Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 01:55:05.585 00:05:02.629 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 01:55:09.108 00:05:01.033 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 01:55:08.263 00:05:01.878 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:00:04.559 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.327 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.433 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 01:56:09.060 00:05:01.092 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 01:57:05.536 00:05:03.538 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 01:57:56.124 00:05:10.001 OSPF 30.0.3.1:0 -> 224.0.0.5:0 41 2816 1 2025-11-20 01:59:05.540 00:05:02.686 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 01:59:08.214 00:05:01.978 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 01:59:05.549 00:05:03.514 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:05:04.536 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.354 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.380 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:01:05.590 00:05:02.626 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:01:09.113 00:05:01.029 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:01:08.264 00:05:01.878 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:02:09.063 00:05:01.091 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:03:05.541 00:05:03.537 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:03:16.127 00:05:10.003 OSPF 30.0.3.1:0 -> 224.0.0.5:0 40 3032 1 2025-11-20 02:05:05.539 00:05:02.687 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:05:05.550 00:05:03.517 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:05:08.215 00:05:01.978 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:10:04.409 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.423 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.320 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:07:05.590 00:05:02.627 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:07:09.116 00:05:01.026 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:07:08.265 00:05:01.877 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:08:09.066 00:05:01.087 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:08:36.130 00:05:10.002 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2592 1 2025-11-20 02:09:05.544 00:05:03.533 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:15:04.575 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.752 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.518 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:11:08.217 00:05:01.979 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:11:05.556 00:05:03.514 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:11:05.545 00:05:02.683 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:13:09.117 00:05:01.029 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:13:08.267 00:05:01.879 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:13:05.598 00:05:02.621 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:14:09.068 00:05:01.088 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:13:56.133 00:05:10.006 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-20 02:15:05.546 00:05:03.534 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:20:04.723 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.744 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.966 00:00:00.020 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:17:05.546 00:05:02.682 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:17:08.218 00:05:01.980 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:17:05.556 00:05:03.514 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:19:09.120 00:05:01.028 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:19:08.269 00:05:01.879 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:19:05.597 00:05:02.622 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:19:16.140 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 43 3132 1 2025-11-20 02:20:09.070 00:05:01.087 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:25:05.375 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:25:05.303 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:25:05.415 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:21:05.549 00:05:03.533 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:23:05.549 00:05:02.684 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:23:05.560 00:05:03.513 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:23:08.220 00:05:01.980 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:24:36.149 00:05:10.010 OSPF 30.0.3.1:0 -> 224.0.0.5:0 39 2672 1 2025-11-20 02:25:09.121 00:05:01.028 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:25:08.269 00:05:01.880 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:25:05.601 00:05:02.621 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:30:04.977 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:04.839 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:30:05.139 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:26:09.072 00:05:01.088 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:27:05.550 00:05:03.532 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:29:08.221 00:05:01.982 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:29:05.565 00:05:03.507 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:29:05.554 00:05:02.677 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:29:56.159 00:05:10.005 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2780 1 2025-11-20 02:35:05.034 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:35:05.104 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:35:05.204 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:31:09.122 00:05:01.028 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:31:08.272 00:05:01.878 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:31:05.601 00:05:02.622 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:32:09.072 00:05:01.088 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:33:05.550 00:05:03.532 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:35:05.550 00:05:02.683 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:35:08.222 00:05:01.980 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:35:05.561 00:05:03.512 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:35:16.165 00:05:10.007 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-20 02:40:05.103 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:05.309 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:40:05.336 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:37:05.602 00:05:02.622 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:37:09.122 00:05:01.029 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:37:08.272 00:05:01.879 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:38:09.072 00:05:01.089 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:39:05.552 00:05:03.532 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:40:36.171 00:05:10.007 OSPF 30.0.3.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-20 02:45:05.015 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:45:05.313 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:45:05.343 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:41:05.552 00:05:02.682 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:41:08.224 00:05:01.978 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:41:05.562 00:05:03.512 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:43:05.602 00:05:02.623 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:43:09.124 00:05:01.028 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:43:08.274 00:05:01.878 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:44:09.074 00:05:01.089 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:45:05.555 00:05:03.529 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:50:05.205 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.217 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.358 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:45:56.179 00:05:10.004 OSPF 30.0.3.1:0 -> 224.0.0.5:0 41 2948 1 2025-11-20 02:47:05.553 00:05:02.682 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:47:05.564 00:05:03.512 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-20 02:47:08.226 00:05:01.978 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:49:09.125 00:05:01.030 TCP 30.158.0.1:37041 -> 30.151.0.1:179 12 738 1 2025-11-20 02:49:08.275 00:05:01.880 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-20 02:49:05.603 00:05:02.622 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-20 02:50:09.074 00:05:01.091 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-20 02:55:05.463 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:55:05.697 00:00:00.020 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 02:55:05.590 00:00:00.020 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-20 02:51:05.553 00:05:03.532 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-20 02:51:16.183 00:05:10.007 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-20 02:53:05.554 00:05:02.684 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-20 02:53:08.225 00:05:01.980 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-20 02:53:05.564 00:05:03.511 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 Summary: total flows: 127, total bytes: 98312, total packets: 1495, avg bps: 207, avg pps: 0, avg bpp: 65 Time window: 2025-11-20 01:55:05 - 2025-11-20 02:58:10 Total flows processed: 127, passed: 127, Blocks skipped: 0, Bytes read: 13272 Sys: 0.0033s User: 0.0017s Wall: 0.0017s flows/second: 72989.4 Runtime: 0.0018s