Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 12:54:59.661 00:05:01.321 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 12:55:56.768 00:05:02.847 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 12:56:56.728 00:05:03.523 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 12:57:20.485 00:05:10.006 OSPF 30.0.3.1:0 -> 224.0.0.5:0 34 2500 1 2025-11-02 13:01:37.616 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:01:38.017 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:01:37.799 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 12:58:00.247 00:04:00.744 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-02 12:59:00.299 00:04:00.683 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-02 12:58:59.611 00:05:01.421 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 12:59:56.719 00:05:02.907 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 12:59:56.719 00:05:03.544 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:00:59.665 00:05:01.317 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:01:56.771 00:05:02.846 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:06:38.280 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:06:38.068 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:06:38.230 00:00:00.020 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:02:40.491 00:05:00.955 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2540 1 2025-11-02 13:03:00.251 00:04:00.741 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-02 13:02:56.730 00:05:03.523 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:04:00.302 00:04:00.681 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-02 13:04:59.615 00:05:01.418 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:09:00.303 00:01:00.680 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-02 13:05:56.720 00:05:02.907 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 13:05:56.720 00:05:03.543 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:06:59.666 00:05:01.317 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:11:38.734 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:11:38.785 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:11:38.506 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:07:56.771 00:05:02.848 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:08:00.253 00:04:00.741 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-02 13:07:50.494 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 43 2980 1 2025-11-02 13:08:56.731 00:05:03.524 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:11:00.303 00:02:00.681 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-11-02 13:14:00.306 00:01:00.678 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-02 13:10:59.618 00:05:01.418 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:11:56.721 00:05:03.545 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:11:56.722 00:05:02.907 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 13:16:38.552 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:16:38.578 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:16:38.665 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:13:00.256 00:04:00.740 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-02 13:12:59.668 00:05:01.317 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:13:10.504 00:05:10.093 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2712 1 2025-11-02 13:13:56.771 00:05:02.848 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:16:00.307 00:02:00.680 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-11-02 13:18:00.255 00:01:00.740 TCP 30.151.0.1:179 -> 30.158.0.1:37041 4 246 1 2025-11-02 13:14:56.731 00:05:03.525 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:19:00.306 00:01:00.680 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-02 13:16:59.619 00:05:01.417 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:21:38.312 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:21:38.331 00:00:00.029 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:21:38.313 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:20:00.255 00:02:00.740 TCP 30.151.0.1:179 -> 30.158.0.1:37041 6 369 1 2025-11-02 13:17:56.722 00:05:02.913 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 13:17:56.722 00:05:03.545 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:18:30.507 00:05:10.004 OSPF 30.0.3.1:0 -> 224.0.0.5:0 41 2992 1 2025-11-02 13:21:00.306 00:02:00.679 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-11-02 13:18:59.669 00:05:01.316 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:23:00.258 00:01:00.739 TCP 30.151.0.1:179 -> 30.158.0.1:37041 4 246 1 2025-11-02 13:19:56.774 00:05:02.848 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:24:00.308 00:01:00.678 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-02 13:20:56.733 00:05:03.524 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:26:38.482 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:26:38.384 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:26:38.461 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:22:59.624 00:05:01.412 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:23:50.513 00:05:10.008 OSPF 30.0.3.1:0 -> 224.0.0.5:0 34 2500 1 2025-11-02 13:23:56.724 00:05:03.548 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:26:00.308 00:02:00.679 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-11-02 13:23:56.724 00:05:02.907 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 13:25:00.258 00:04:00.738 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-02 13:24:59.671 00:05:01.318 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:25:56.797 00:05:02.826 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:29:00.312 00:01:00.677 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-02 13:26:56.735 00:05:03.528 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:31:38.834 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:31:38.851 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:31:38.755 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:28:59.621 00:05:01.417 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:29:10.520 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-02 13:29:56.726 00:05:03.547 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:29:56.726 00:05:02.907 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 13:30:00.263 00:04:00.736 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-02 13:31:00.314 00:04:00.675 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-02 13:30:59.672 00:05:01.316 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:35:00.263 00:01:00.735 TCP 30.151.0.1:179 -> 30.158.0.1:37041 4 246 1 2025-11-02 13:31:56.777 00:05:02.846 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:36:38.523 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:36:38.533 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:36:38.749 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:32:56.736 00:05:03.527 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:34:30.530 00:05:10.010 OSPF 30.0.3.1:0 -> 224.0.0.5:0 42 2964 1 2025-11-02 13:34:59.622 00:05:01.417 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:36:00.314 00:04:00.676 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-02 13:35:56.729 00:05:02.905 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 13:35:56.728 00:05:03.546 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:36:59.673 00:05:01.317 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:37:00.264 00:05:00.736 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-02 13:41:38.632 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:41:38.720 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:41:38.747 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:37:56.780 00:05:02.845 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:38:56.739 00:05:03.526 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:39:50.540 00:05:10.005 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2480 1 2025-11-02 13:41:00.315 00:04:00.676 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-02 13:40:59.623 00:05:01.418 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:41:56.730 00:05:03.546 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:41:56.730 00:05:02.905 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 13:46:38.819 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:46:38.976 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:46:38.862 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:43:00.264 00:05:00.738 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-02 13:46:00.316 00:01:00.676 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-02 13:42:59.674 00:05:01.317 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:43:56.780 00:05:02.845 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:44:56.742 00:05:03.525 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:45:10.546 00:05:10.029 OSPF 30.0.3.1:0 -> 224.0.0.5:0 45 3328 1 2025-11-02 13:48:00.315 00:02:00.676 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-11-02 13:46:59.625 00:05:01.420 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:51:39.013 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:51:39.104 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:51:39.048 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:51:00.316 00:01:00.678 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-02 13:47:56.731 00:05:02.904 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-02 13:47:56.731 00:05:03.545 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:48:59.675 00:05:01.319 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-02 13:49:00.266 00:05:00.740 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-02 13:49:56.811 00:05:02.816 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-02 13:50:20.984 00:05:09.575 OSPF 30.0.3.1:0 -> 224.0.0.5:0 34 2496 1 2025-11-02 13:50:56.773 00:05:03.494 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-02 13:53:00.317 00:02:00.678 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-11-02 13:56:39.030 00:00:00.014 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 13:56:39.046 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 13:56:39.118 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-02 13:56:00.317 00:01:00.679 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-02 13:52:59.626 00:05:01.421 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-02 13:53:56.763 00:05:03.514 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-02 13:53:56.763 00:05:02.878 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 Summary: total flows: 139, total bytes: 97512, total packets: 1478, avg bps: 203, avg pps: 0, avg bpp: 65 Time window: 2025-11-02 12:54:59 - 2025-11-02 13:59:00 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0037s User: 0.0025s Wall: 0.0019s flows/second: 72477.4 Runtime: 0.0019s