Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 09:55:04.520 00:05:01.140 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 09:55:05.153 00:04:00.514 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 09:55:01.638 00:05:02.830 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 09:55:01.598 00:05:03.561 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:01:23.481 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.420 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.516 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 09:59:05.211 00:04:00.447 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 09:59:01.589 00:05:02.891 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 09:59:04.469 00:05:01.242 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 09:59:00.499 00:05:10.048 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2516 1 2025-11-12 09:59:01.589 00:05:03.582 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:00:05.160 00:06:00.001 TCP 30.151.0.1:179 -> 30.158.0.1:37041 13 809 1 2025-11-12 10:01:01.639 00:05:02.831 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:01:01.599 00:05:03.562 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:01:04.520 00:05:01.142 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:06:23.204 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:06:23.218 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:06:23.238 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:04:05.211 00:04:00.454 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:04:11.415 00:05:09.094 OSPF 30.0.3.1:0 -> 224.0.0.5:0 45 3232 1 2025-11-12 10:05:01.592 00:05:03.581 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:05:01.592 00:05:02.890 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:05:04.470 00:05:01.244 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:06:05.672 00:05:00.001 TCP 30.151.0.1:179 -> 30.158.0.1:37041 11 667 1 2025-11-12 10:07:01.642 00:05:02.829 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:07:01.603 00:05:03.560 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:07:04.521 00:05:01.142 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:11:23.240 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.388 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.225 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:09:05.213 00:04:00.451 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:09:30.515 00:05:09.999 OSPF 30.0.3.1:0 -> 224.0.0.5:0 34 2420 1 2025-11-12 10:11:01.593 00:05:03.581 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:11:01.593 00:05:02.891 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:11:04.472 00:05:01.243 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:12:05.163 00:04:00.511 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 10:16:23.491 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.510 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.611 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:13:01.644 00:05:02.831 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:13:01.604 00:05:03.561 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:13:04.522 00:05:01.143 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:14:05.214 00:04:00.451 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:14:50.514 00:05:10.008 OSPF 30.0.3.1:0 -> 224.0.0.5:0 42 3100 1 2025-11-12 10:17:01.594 00:05:03.580 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:17:01.594 00:05:02.890 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:17:05.165 00:04:00.511 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 10:17:04.473 00:05:01.244 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:21:23.555 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:21:23.489 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:21:23.446 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:19:05.215 00:04:00.453 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:19:01.646 00:05:02.829 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:19:01.606 00:05:03.560 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:19:04.524 00:05:01.143 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:20:10.524 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-12 10:24:05.215 00:01:00.451 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-12 10:22:05.165 00:04:00.513 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 10:26:23.924 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:26:23.863 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:26:23.892 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:23:01.594 00:05:03.582 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:23:01.595 00:05:02.891 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:23:04.474 00:05:01.243 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:25:01.646 00:05:02.831 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:25:01.606 00:05:03.562 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:25:04.525 00:05:01.143 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:25:30.531 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-12 10:26:05.215 00:04:00.452 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:27:05.167 00:04:00.511 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 10:31:23.638 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.787 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.740 00:00:00.024 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:29:04.476 00:05:01.242 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:29:01.596 00:05:03.584 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:29:01.596 00:05:02.896 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:30:50.539 00:05:10.005 OSPF 30.0.3.1:0 -> 224.0.0.5:0 41 2900 1 2025-11-12 10:31:05.219 00:04:00.449 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:31:01.649 00:05:02.835 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:31:01.609 00:05:03.562 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:31:04.530 00:05:01.139 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:32:05.168 00:04:00.510 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 10:36:23.847 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:36:23.704 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:36:23.853 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:35:01.601 00:05:03.581 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:35:01.601 00:05:02.893 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:35:04.483 00:05:01.236 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:36:05.221 00:04:00.448 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:36:00.817 00:05:09.759 OSPF 30.0.3.1:0 -> 224.0.0.5:0 40 2944 1 2025-11-12 10:37:01.652 00:05:02.833 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:37:01.612 00:05:03.561 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:37:04.534 00:05:01.135 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:41:23.804 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:41:23.819 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:41:23.900 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:37:05.172 00:06:00.001 TCP 30.151.0.1:179 -> 30.158.0.1:37041 13 809 1 2025-11-12 10:43:05.679 00:00:00.000 TCP 30.151.0.1:179 -> 30.158.0.1:37041 1 52 1 2025-11-12 10:41:05.223 00:04:00.448 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:41:01.603 00:05:02.893 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:41:04.483 00:05:01.237 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:41:01.602 00:05:03.582 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:41:20.576 00:05:10.008 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2732 1 2025-11-12 10:46:23.959 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:46:24.039 00:00:00.025 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:46:23.934 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:43:01.653 00:05:02.836 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:43:01.613 00:05:03.561 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:43:04.535 00:05:01.136 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:44:05.174 00:04:00.508 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 10:46:05.223 00:04:00.450 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:46:40.585 00:05:10.004 OSPF 30.0.3.1:0 -> 224.0.0.5:0 37 2608 1 2025-11-12 10:47:01.606 00:05:03.581 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:47:01.606 00:05:02.893 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:47:04.489 00:05:01.234 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:51:24.005 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:51:23.954 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:51:24.155 00:00:00.044 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:49:05.176 00:04:00.507 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-11-12 10:49:01.654 00:05:02.835 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-12 10:49:01.613 00:05:03.564 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-12 10:49:04.539 00:05:01.135 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-12 10:51:05.226 00:04:00.447 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-11-12 10:52:00.589 00:05:10.005 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-12 10:56:24.210 00:00:00.017 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-12 10:56:24.349 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-12 10:56:24.138 00:00:00.024 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-12 10:56:05.228 00:01:00.446 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-11-12 10:53:01.605 00:05:02.896 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-12 10:53:04.489 00:05:01.235 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-12 10:53:01.604 00:05:03.583 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-12 10:54:05.177 00:04:00.507 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 Summary: total flows: 133, total bytes: 98165, total packets: 1493, avg bps: 207, avg pps: 0, avg bpp: 65 Time window: 2025-11-12 09:55:01 - 2025-11-12 10:58:05 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0051s User: 0.0010s Wall: 0.0021s flows/second: 63753.4 Runtime: 0.0021s