Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 18:58:06.493 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 18:59:06.511 00:00:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 19:00:06.493 00:00:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 18:55:13.902 00:05:52.669 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:00:44.298 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:00:44.325 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:00:44.267 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:00:44.369 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:00:44.513 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:00:06.510 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 18:57:06.510 00:05:05.638 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 18:57:06.590 00:05:05.538 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:01:06.494 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:02:06.511 00:01:00.004 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 18:58:13.922 00:05:52.589 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 18:59:48.848 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2728 1 2025-12-01 19:04:06.511 00:00:00.004 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 19:03:06.494 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:05:06.494 00:00:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 19:05:44.558 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:05:44.529 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:05:44.467 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:05:44.372 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:05:44.505 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:01:13.903 00:05:52.668 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:05:06.511 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:06:06.495 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:03:06.510 00:05:05.640 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:03:06.590 00:05:05.540 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:07:06.511 00:01:00.004 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:04:13.922 00:05:52.590 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:08:06.495 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:05:08.856 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2500 1 2025-12-01 19:10:44.553 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:10:44.488 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:10:44.364 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:10:44.456 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:10:44.690 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:09:06.511 00:02:00.004 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 19:10:06.495 00:02:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 19:07:13.904 00:05:52.669 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:12:06.512 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:09:06.592 00:05:05.539 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:09:06.512 00:05:05.640 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:13:06.495 00:01:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:10:28.865 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 43 3276 1 2025-12-01 19:10:13.923 00:05:52.590 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:15:44.600 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:15:44.676 00:00:00.020 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:15:44.676 00:00:00.019 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:15:44.634 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:15:44.676 00:00:00.019 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:14:06.514 00:02:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 19:15:06.496 00:02:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 19:13:13.905 00:05:52.669 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:17:06.514 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:18:06.497 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:15:06.514 00:05:05.638 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:15:06.595 00:05:05.538 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:15:48.867 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 19:19:06.515 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:20:44.522 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:20:44.764 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:20:44.682 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:20:44.685 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:20:44.795 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:21:06.515 00:00:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 19:16:13.926 00:05:52.589 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:20:06.496 00:02:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 19:22:06.515 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:23:06.498 00:01:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:19:13.906 00:05:52.669 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:24:06.516 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:21:06.514 00:05:05.638 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:21:06.597 00:05:05.536 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:21:08.872 00:05:11.041 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2608 1 2025-12-01 19:25:44.904 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:25:44.761 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:25:44.800 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:25:44.864 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:25:44.839 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:25:06.498 00:01:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:26:06.517 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 19:27:06.499 00:00:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 19:22:13.928 00:05:52.590 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:27:06.516 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:28:06.498 00:01:00.040 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:25:13.908 00:05:52.670 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:29:06.518 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:26:28.883 00:05:10.011 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-12-01 19:30:45.161 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:30:44.930 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:30:45.022 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:30:45.032 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:30:45.238 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:31:06.518 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 19:30:06.498 00:01:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:27:06.597 00:05:05.536 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:27:06.517 00:05:05.636 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:32:06.498 00:00:00.040 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 19:32:06.517 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:28:13.928 00:05:52.590 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:33:06.498 00:01:00.040 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:34:06.518 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:35:45.238 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:35:45.082 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:35:45.058 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:35:45.239 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:35:45.240 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:31:48.895 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2788 1 2025-12-01 19:35:06.499 00:01:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:36:06.518 00:00:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 19:31:13.909 00:05:52.670 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:37:06.500 00:00:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 19:33:06.598 00:05:05.537 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:33:06.518 00:05:05.637 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:37:06.519 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 19:38:06.500 00:01:00.040 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:34:13.929 00:05:52.592 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:39:06.520 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 194 1 2025-12-01 19:40:45.153 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:40:45.187 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:40:45.022 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:40:45.119 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:40:45.066 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:40:06.500 00:01:00.041 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:37:08.901 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 3140 1 2025-12-01 19:37:13.910 00:05:52.672 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:41:06.521 00:02:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 19:39:06.521 00:05:05.636 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:39:06.601 00:05:05.535 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:42:06.501 00:02:00.042 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 19:44:06.522 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 19:40:13.931 00:05:52.591 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:45:45.467 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:45:45.430 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:45:45.519 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:45:45.448 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:45:45.554 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:45:06.502 00:01:00.041 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:42:24.440 00:05:04.475 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2516 1 2025-12-01 19:46:06.523 00:02:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 19:43:13.914 00:05:52.670 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:47:06.502 00:02:00.041 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 19:45:06.522 00:05:05.635 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:45:06.604 00:05:05.534 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:49:06.523 00:01:00.040 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 194 1 2025-12-01 19:50:45.342 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:50:45.270 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:50:45.275 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:50:45.308 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:50:45.177 00:00:00.047 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:50:06.503 00:01:00.040 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:46:13.934 00:05:52.590 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:47:38.916 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2400 1 2025-12-01 19:51:06.525 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 194 1 2025-12-01 19:53:06.523 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-12-01 19:52:06.503 00:02:00.041 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 19:49:13.915 00:05:52.670 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 19:54:06.524 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 19:51:06.603 00:05:05.535 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 19:51:06.523 00:05:05.636 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 19:55:45.497 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 19:55:45.268 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 19:55:45.394 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 19:55:45.392 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 19:55:45.435 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 19:55:06.503 00:01:00.041 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 19:52:58.923 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-12-01 19:56:06.525 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 19:52:13.936 00:05:52.589 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 19:58:06.524 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-12-01 19:57:06.503 00:01:00.041 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 Summary: total flows: 173, total bytes: 88499, total packets: 1304, avg bps: 187, avg pps: 0, avg bpp: 67 Time window: 2025-12-01 18:55:13 - 2025-12-01 19:58:08 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0035s User: 0.0027s Wall: 0.0015s flows/second: 115635.8 Runtime: 0.0015s