Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 16:57:06.453 00:02:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 16:59:06.470 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:55:13.872 00:05:52.659 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:00:41.874 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:00:41.889 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:00:41.836 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:00:41.765 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:00:41.883 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:00:06.455 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:57:06.549 00:05:05.540 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:57:06.469 00:05:05.641 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:57:28.677 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2608 1 2025-12-01 17:01:06.471 00:02:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 16:58:13.893 00:05:52.580 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:02:06.455 00:02:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 17:04:06.472 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 17:05:41.782 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:05:41.963 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:05:42.017 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:05:42.155 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:05:41.995 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:05:06.454 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:01:13.873 00:05:52.664 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:02:48.685 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-12-01 17:03:06.472 00:05:05.639 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:03:06.552 00:05:05.539 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:06:06.472 00:02:00.006 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 317 1 2025-12-01 17:04:13.894 00:05:52.585 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:07:06.454 00:02:00.043 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 17:09:06.478 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:10:42.364 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:10:42.000 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:10:42.324 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:10:42.229 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:10:42.073 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:10:06.457 00:01:00.042 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:11:06.479 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:07:13.876 00:05:52.667 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:08:08.693 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2724 1 2025-12-01 17:13:06.480 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-12-01 17:09:06.559 00:05:05.536 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:09:06.479 00:05:05.636 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:12:06.457 00:02:00.046 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 17:14:06.484 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:10:13.897 00:05:52.588 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:15:41.943 00:00:00.028 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:15:42.075 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:15:41.993 00:00:00.028 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:15:42.001 00:00:00.028 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:15:42.152 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:15:06.458 00:01:00.046 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:16:06.484 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:13:28.702 00:05:10.013 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2664 1 2025-12-01 17:18:06.484 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-12-01 17:17:06.457 00:01:00.047 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:13:13.875 00:05:52.670 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:19:06.458 00:00:00.047 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 17:15:06.565 00:05:05.532 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:15:06.484 00:05:05.633 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:19:06.485 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:20:42.309 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:20:42.434 00:00:00.020 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:20:42.281 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:20:42.356 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:20:42.439 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:20:06.459 00:01:00.047 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:16:13.897 00:05:52.589 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:21:06.485 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:18:48.715 00:05:10.012 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2996 1 2025-12-01 17:22:06.459 00:01:00.047 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:23:06.486 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-12-01 17:24:06.460 00:00:00.048 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 17:19:13.878 00:05:52.670 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:24:06.488 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:21:06.565 00:05:05.532 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:21:06.485 00:05:05.632 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:25:42.401 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:25:42.407 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:25:42.501 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:25:42.521 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:25:42.481 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:25:06.460 00:01:00.048 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:26:06.488 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:22:13.898 00:05:52.590 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:27:06.461 00:01:00.048 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:24:08.726 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2464 1 2025-12-01 17:25:13.878 00:05:52.670 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:28:06.488 00:02:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 17:30:42.556 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:30:42.535 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:30:42.570 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:30:42.576 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:30:42.491 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:29:06.460 00:02:00.048 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 17:27:06.568 00:05:05.530 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:27:06.488 00:05:05.631 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:31:06.489 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:28:13.899 00:05:52.592 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:32:06.460 00:01:00.050 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:29:28.735 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-12-01 17:33:06.491 00:02:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 17:35:42.660 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:35:42.542 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:35:42.733 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:35:42.650 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:35:42.506 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:34:06.462 00:02:00.049 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 17:31:13.880 00:05:52.672 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:36:06.491 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:33:06.571 00:05:05.528 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:33:06.491 00:05:05.629 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:37:06.463 00:01:00.048 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:34:48.743 00:05:10.005 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2752 1 2025-12-01 17:34:13.904 00:05:52.589 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:38:06.492 00:02:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 17:40:42.891 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:40:42.672 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:40:42.690 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:40:42.699 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:40:42.614 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:39:06.464 00:02:00.049 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 17:37:13.881 00:05:52.672 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:41:06.492 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:42:06.464 00:01:00.048 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:39:06.492 00:05:05.630 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:39:06.574 00:05:05.530 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:43:06.492 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:40:08.748 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2828 1 2025-12-01 17:45:06.494 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-12-01 17:40:13.901 00:05:52.592 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:45:42.833 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:45:42.721 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:45:42.702 00:00:00.030 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:45:42.914 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:45:42.911 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:44:06.464 00:02:00.049 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 17:46:06.492 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:47:06.466 00:01:00.047 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:43:13.882 00:05:52.672 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:48:06.493 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:45:06.493 00:05:05.631 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:45:06.573 00:05:05.530 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:45:28.756 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2932 1 2025-12-01 17:50:06.494 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-12-01 17:50:43.079 00:00:00.025 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:50:43.157 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:50:43.230 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:50:43.231 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:50:43.009 00:00:00.020 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:49:06.466 00:02:00.048 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 17:46:13.902 00:05:52.592 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:51:06.493 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:52:06.467 00:01:00.055 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:53:06.503 00:00:59.991 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:49:13.882 00:05:52.673 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 17:50:48.765 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 17:54:06.470 00:01:00.045 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 17:55:06.496 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-12-01 17:51:06.574 00:05:05.531 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 17:51:06.494 00:05:05.632 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 17:55:43.151 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 17:55:43.079 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 17:55:43.121 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 17:55:43.126 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 17:55:43.239 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 17:56:06.471 00:00:00.045 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 17:56:06.495 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 17:52:13.903 00:05:52.592 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 17:57:06.474 00:01:00.043 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 Summary: total flows: 169, total bytes: 86795, total packets: 1272, avg bps: 184, avg pps: 0, avg bpp: 68 Time window: 2025-12-01 16:55:13 - 2025-12-01 17:58:06 Total flows processed: 169, passed: 169, Blocks skipped: 0, Bytes read: 17640 Sys: 0.0032s User: 0.0021s Wall: 0.0026s flows/second: 64334.5 Runtime: 0.0027s