Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 14:54:57.954 00:05:03.364 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 14:54:01.317 00:06:00.660 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 14:56:00.649 00:05:01.370 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 14:55:57.940 00:05:03.389 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 14:55:57.940 00:05:02.724 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 14:57:00.697 00:05:01.271 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:02:38.183 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:02:38.039 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:02:38.065 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 14:59:34.856 00:05:10.013 OSPF 30.0.3.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-04 14:59:58.020 00:05:02.633 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 14:59:01.369 00:06:00.599 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-04 15:00:57.951 00:05:03.370 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:01:57.943 00:05:03.388 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:01:57.943 00:05:02.723 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:02:00.655 00:05:01.365 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:01:01.321 00:06:00.659 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 15:03:00.705 00:05:01.264 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:07:38.263 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:07:38.242 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:07:38.060 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:04:54.869 00:05:10.012 OSPF 30.0.3.2:0 -> 224.0.0.5:0 36 2600 1 2025-11-04 15:05:57.996 00:05:02.662 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 15:06:01.370 00:06:00.600 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-04 15:06:57.954 00:05:03.367 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:07:57.944 00:05:03.388 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:07:57.944 00:05:02.722 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:08:00.657 00:05:01.366 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:12:38.394 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:12:38.318 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:12:38.153 00:00:00.042 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:09:00.705 00:05:01.265 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:08:01.322 00:06:00.659 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 15:10:14.881 00:05:10.008 OSPF 30.0.3.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-04 15:11:57.996 00:05:02.662 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 15:12:57.954 00:05:03.368 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:17:38.887 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:17:38.676 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:17:38.787 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:14:00.657 00:05:01.366 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:13:01.373 00:06:00.600 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-04 15:13:57.945 00:05:03.388 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:13:57.945 00:05:02.722 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:15:00.706 00:05:01.266 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:15:34.890 00:05:10.006 OSPF 30.0.3.2:0 -> 224.0.0.5:0 39 2820 1 2025-11-04 15:15:01.321 00:06:00.662 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 15:17:57.996 00:05:02.662 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 15:22:38.443 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:22:38.731 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:22:38.586 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:18:57.955 00:05:03.370 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:20:00.656 00:05:01.368 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:19:57.946 00:05:03.389 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:19:57.946 00:05:02.722 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:20:01.373 00:06:00.601 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-04 15:21:00.706 00:05:01.268 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:20:54.896 00:05:10.316 OSPF 30.0.3.2:0 -> 224.0.0.5:0 37 2684 1 2025-11-04 15:22:01.324 00:06:00.661 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 15:27:38.621 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:27:38.678 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:27:38.654 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:23:57.998 00:05:02.661 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 15:24:57.956 00:05:03.370 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:26:00.658 00:05:01.369 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:25:57.946 00:05:03.391 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:25:57.946 00:05:02.722 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:26:14.906 00:05:10.007 OSPF 30.0.3.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-04 15:27:00.707 00:05:01.269 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:27:01.376 00:06:00.600 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-04 15:32:38.694 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:32:38.822 00:00:00.024 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:32:38.750 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:29:01.326 00:06:00.662 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 15:29:58.001 00:05:02.658 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 15:30:57.959 00:05:03.370 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:31:34.913 00:05:10.009 OSPF 30.0.3.2:0 -> 224.0.0.5:0 37 2680 1 2025-11-04 15:31:57.950 00:05:03.390 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:31:57.950 00:05:02.720 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:32:00.659 00:05:01.373 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:33:00.709 00:05:01.273 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:37:38.774 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:37:38.897 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:37:38.813 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:34:01.379 00:06:00.603 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-04 15:35:58.006 00:05:02.656 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 15:36:57.964 00:05:03.367 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:36:01.330 00:06:00.663 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 15:36:54.921 00:05:10.003 OSPF 30.0.3.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-04 15:38:00.659 00:05:01.373 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:37:57.954 00:05:03.387 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:37:57.954 00:05:02.718 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:42:39.028 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:42:38.961 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:42:38.850 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:39:00.709 00:05:01.273 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:41:58.006 00:05:02.657 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 15:41:01.381 00:06:00.603 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-04 15:42:14.925 00:05:10.007 OSPF 30.0.3.2:0 -> 224.0.0.5:0 38 2756 1 2025-11-04 15:42:57.964 00:05:03.367 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:47:39.034 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:47:39.100 00:00:00.020 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:47:39.077 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:44:00.662 00:05:01.372 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:43:01.331 00:06:00.663 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 15:43:57.956 00:05:03.385 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:43:57.956 00:05:02.718 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:45:00.712 00:05:01.271 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:47:34.932 00:05:10.003 OSPF 30.0.3.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-04 15:47:58.008 00:05:02.656 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-04 15:52:38.968 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:52:39.236 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:52:39.291 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:48:57.967 00:05:03.365 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-04 15:48:01.380 00:06:00.603 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-04 15:49:57.956 00:05:03.386 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-04 15:49:57.956 00:05:02.718 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-04 15:50:00.662 00:05:01.372 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-04 15:50:01.331 00:06:00.663 TCP 30.151.0.1:179 -> 30.158.0.1:37041 14 861 1 2025-11-04 15:51:00.713 00:05:01.271 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-04 15:52:54.938 00:05:10.008 OSPF 30.0.3.2:0 -> 224.0.0.5:0 35 2444 1 2025-11-04 15:57:39.116 00:00:00.042 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-04 15:57:39.119 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 15:57:39.390 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-04 15:53:58.012 00:05:02.653 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 Summary: total flows: 124, total bytes: 96005, total packets: 1463, avg bps: 196, avg pps: 0, avg bpp: 65 Time window: 2025-11-04 14:54:01 - 2025-11-04 15:59:00 Total flows processed: 124, passed: 124, Blocks skipped: 0, Bytes read: 12960 Sys: 0.0030s User: 0.0020s Wall: 0.0026s flows/second: 48304.4 Runtime: 0.0026s