Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 23:54:07.941 00:06:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-04 23:56:13.817 00:05:54.204 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-04 23:56:07.909 00:06:00.051 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-04 23:57:07.940 00:05:05.899 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-04 23:58:07.940 00:05:07.494 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:02:16.767 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:02:16.821 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:02:16.826 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:02:16.929 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:02:17.045 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-04 23:59:55.212 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2992 1 2025-12-04 23:59:15.414 00:05:52.589 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:01:07.940 00:06:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-05 00:02:13.820 00:05:54.204 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:03:07.941 00:05:05.904 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:07:16.769 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:07:17.023 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:07:17.083 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:07:17.050 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:07:17.022 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:03:07.912 00:06:00.051 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-05 00:04:07.940 00:05:07.495 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:05:15.221 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2520 1 2025-12-05 00:05:15.414 00:05:52.590 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:12:17.353 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:12:17.226 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:12:17.265 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:12:17.033 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:12:17.412 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:08:13.824 00:05:54.202 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:08:07.943 00:06:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-05 00:09:07.943 00:05:05.903 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:10:07.942 00:05:07.495 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:10:35.223 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2852 1 2025-12-05 00:10:07.912 00:06:00.053 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-05 00:11:15.415 00:05:52.591 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:17:17.365 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:17:17.241 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:17:17.213 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:17:17.331 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:17:17.366 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:14:13.825 00:05:54.204 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:15:07.944 00:05:05.902 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:15:55.229 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2544 1 2025-12-05 00:15:07.945 00:06:00.006 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-05 00:16:07.945 00:05:07.493 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:17:15.417 00:05:52.593 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:17:07.913 00:06:00.056 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-05 00:22:17.303 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:22:17.307 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:22:17.339 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:22:17.267 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:22:17.331 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:20:13.827 00:05:54.204 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:21:07.949 00:05:05.899 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:21:15.236 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2648 1 2025-12-05 00:22:07.949 00:05:07.490 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:22:07.948 00:06:00.004 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-05 00:27:17.537 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:27:17.454 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:27:17.442 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:27:17.493 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:27:17.479 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:23:15.418 00:05:52.595 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:24:07.913 00:06:00.059 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-05 00:26:35.243 00:05:10.864 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2868 1 2025-12-05 00:26:13.828 00:05:54.207 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:27:07.952 00:05:05.901 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:28:07.952 00:05:07.491 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:32:17.732 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:32:17.658 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:32:17.747 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:32:17.485 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:32:17.776 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:29:15.421 00:05:52.594 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:29:07.953 00:06:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-05 00:31:55.252 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-12-05 00:31:07.914 00:06:00.060 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-05 00:32:13.833 00:05:54.202 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:33:07.952 00:05:05.902 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:37:17.843 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:37:17.767 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:37:17.671 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:37:17.739 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:37:17.784 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:34:07.954 00:05:07.490 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:35:15.424 00:05:52.591 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:36:07.955 00:06:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-05 00:37:15.259 00:05:10.005 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2608 1 2025-12-05 00:42:17.763 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:42:17.792 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:42:17.731 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:42:17.903 00:00:00.031 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:42:17.783 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:38:13.834 00:05:54.202 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:38:07.915 00:06:00.061 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-05 00:39:07.955 00:05:05.902 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:40:07.955 00:05:07.492 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:41:15.428 00:05:52.590 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:42:35.264 00:05:10.012 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2660 1 2025-12-05 00:47:17.998 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:47:17.810 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:47:17.957 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:47:17.917 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:47:18.004 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:43:07.956 00:06:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-05 00:44:13.837 00:05:54.201 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:45:07.956 00:05:05.902 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:45:07.921 00:06:00.057 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-05 00:46:07.957 00:05:07.493 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:47:55.277 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-12-05 00:47:15.427 00:05:52.591 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-05 00:52:18.522 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:52:18.359 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:52:18.483 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:52:18.447 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:52:18.291 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:50:13.838 00:05:54.201 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-05 00:50:07.956 00:06:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 7 497 1 2025-12-05 00:51:07.958 00:05:05.902 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-05 00:52:07.959 00:05:07.493 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-05 00:52:07.921 00:06:00.057 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-12-05 00:57:18.051 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-05 00:57:17.816 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 00:57:17.853 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-05 00:57:18.015 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-05 00:57:18.055 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-05 00:53:15.283 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2584 1 2025-12-05 00:53:15.430 00:05:52.589 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 Summary: total flows: 129, total bytes: 86722, total packets: 1268, avg bps: 177, avg pps: 0, avg bpp: 68 Time window: 2025-12-04 23:54:07 - 2025-12-05 00:59:08 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0157s User: 0.0039s Wall: 0.0027s flows/second: 47975.3 Runtime: 0.0027s