Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 08:55:01.622 00:05:02.827 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 08:55:01.582 00:05:03.561 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 08:55:05.193 00:04:00.441 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 08:55:04.499 00:05:01.137 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 08:55:11.444 00:05:08.961 OSPF 30.0.3.1:0 -> 224.0.0.5:0 34 2316 1 2025-11-12 08:56:05.143 00:06:00.000 TCP 30.151.0.1:179 -> 30.158.0.1:37041 13 809 1 2025-11-12 09:01:21.861 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:01:21.805 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:01:21.833 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 08:59:01.573 00:05:03.581 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 08:59:01.573 00:05:02.888 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 08:59:04.449 00:05:01.236 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:00:05.193 00:04:00.442 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:00:30.405 00:05:10.013 OSPF 30.0.3.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-12 09:01:01.624 00:05:02.829 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:01:01.584 00:05:03.560 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:01:04.500 00:05:01.136 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:06:22.039 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:06:22.283 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:06:22.169 00:00:00.024 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:02:05.645 00:05:00.000 TCP 30.151.0.1:179 -> 30.158.0.1:37041 11 667 1 2025-11-12 09:05:04.452 00:05:01.236 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:05:05.194 00:04:00.441 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:05:01.573 00:05:02.890 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:05:01.574 00:05:03.581 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:05:50.418 00:05:10.013 OSPF 30.0.3.1:0 -> 224.0.0.5:0 41 2916 1 2025-11-12 09:07:04.504 00:05:01.135 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:07:01.626 00:05:02.829 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:07:01.586 00:05:03.561 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:11:22.203 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:11:22.100 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:11:22.118 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:08:05.145 00:04:00.503 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 09:10:05.195 00:04:00.445 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:11:01.575 00:05:03.581 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:11:01.575 00:05:02.890 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:11:04.454 00:05:01.236 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:11:10.431 00:05:10.014 OSPF 30.0.3.1:0 -> 224.0.0.5:0 39 2868 1 2025-11-12 09:16:22.214 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:16:22.311 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:16:22.153 00:00:00.048 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:13:05.146 00:04:00.506 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 09:13:01.627 00:05:02.830 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:13:01.587 00:05:03.559 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:13:04.504 00:05:01.138 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:15:05.195 00:04:00.447 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:16:30.445 00:05:10.005 OSPF 30.0.3.1:0 -> 224.0.0.5:0 39 2812 1 2025-11-12 09:17:04.456 00:05:01.239 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:17:01.579 00:05:02.891 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:20:05.199 00:01:00.445 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-12 09:17:01.578 00:05:03.579 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:21:22.109 00:00:00.047 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:21:22.302 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:21:22.249 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:18:05.146 00:04:00.508 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 09:19:01.629 00:05:02.830 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:19:01.588 00:05:03.559 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:19:04.507 00:05:01.138 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:21:50.451 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 39 2736 1 2025-11-12 09:22:05.196 00:04:00.449 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:26:22.462 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:26:22.381 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:26:22.493 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:23:01.579 00:05:02.893 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:23:01.579 00:05:03.579 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:23:05.148 00:04:00.507 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 09:23:04.460 00:05:01.244 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:25:01.630 00:05:02.832 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:25:01.590 00:05:03.558 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:25:04.509 00:05:01.142 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:27:05.198 00:04:00.454 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:31:22.473 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:31:22.541 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:31:22.435 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:27:10.461 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-12 09:29:01.583 00:05:03.575 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:29:01.583 00:05:02.889 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:28:05.147 00:06:00.001 TCP 30.151.0.1:179 -> 30.158.0.1:37041 13 809 1 2025-11-12 09:29:04.462 00:05:01.242 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:31:01.633 00:05:02.829 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:31:01.593 00:05:03.555 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:31:04.512 00:05:01.142 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:32:05.197 00:04:00.456 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:36:22.405 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:36:22.569 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:36:22.332 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:32:30.471 00:05:00.588 OSPF 30.0.3.1:0 -> 224.0.0.5:0 41 2896 1 2025-11-12 09:34:05.664 00:05:00.001 TCP 30.151.0.1:179 -> 30.158.0.1:37041 11 667 1 2025-11-12 09:35:01.585 00:05:03.574 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:35:01.585 00:05:02.892 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:35:04.463 00:05:01.242 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:37:01.634 00:05:02.832 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:37:01.594 00:05:03.554 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:37:05.197 00:04:00.458 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:37:04.516 00:05:01.140 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:41:22.836 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:41:22.625 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:41:22.729 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:37:40.476 00:05:10.007 OSPF 30.0.3.1:0 -> 224.0.0.5:0 41 3012 1 2025-11-12 09:40:05.149 00:04:00.517 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 09:41:01.585 00:05:03.574 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:41:01.585 00:05:02.892 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:41:04.466 00:05:01.240 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:42:05.199 00:04:00.456 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:46:22.794 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:46:22.867 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:46:22.830 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:43:01.595 00:05:03.554 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:43:01.635 00:05:02.831 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:43:04.518 00:05:01.140 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:43:00.483 00:05:10.736 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2732 1 2025-11-12 09:45:05.149 00:04:00.518 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 09:47:01.588 00:05:03.574 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:47:05.200 00:04:00.457 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:47:01.588 00:05:02.891 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:47:04.466 00:05:01.240 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:51:22.896 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:51:22.908 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:51:22.941 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:48:20.489 00:05:10.006 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2672 1 2025-11-12 09:52:05.203 00:01:00.454 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-12 09:49:01.638 00:05:02.831 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:49:01.597 00:05:03.556 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 09:49:04.518 00:05:01.139 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:50:05.151 00:04:00.515 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 09:56:23.048 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 09:56:22.856 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 09:56:22.872 00:00:00.024 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:53:01.588 00:05:02.891 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:53:01.588 00:05:03.582 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 09:53:04.469 00:05:01.239 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:53:40.495 00:05:10.005 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-12 09:54:05.205 00:04:00.452 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 Summary: total flows: 133, total bytes: 100817, total packets: 1532, avg bps: 210, avg pps: 0, avg bpp: 65 Time window: 2025-11-12 08:55:01 - 2025-11-12 09:58:50 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0044s User: 0.0017s Wall: 0.0024s flows/second: 55166.4 Runtime: 0.0024s