Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 15:54:12.026 00:06:00.623 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 15:55:11.020 00:05:01.629 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 15:55:08.812 00:05:02.158 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 15:56:11.985 00:05:56.780 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 15:57:16.813 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-25 15:58:11.974 00:05:00.685 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:02:47.369 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.327 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.407 00:00:00.020 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 15:59:08.764 00:05:02.218 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 15:58:11.976 00:05:56.802 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 15:59:10.970 00:05:01.730 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:01:08.814 00:05:02.158 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:01:11.022 00:05:01.630 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:01:12.027 00:06:00.624 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 16:02:36.823 00:05:10.015 OSPF 30.0.3.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-25 16:02:11.986 00:05:56.782 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 16:07:48.055 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:07:48.140 00:00:00.027 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:07:48.094 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:04:11.975 00:05:00.686 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:04:11.976 00:05:56.802 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:05:08.767 00:05:02.216 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:05:10.972 00:05:01.730 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:07:11.024 00:05:01.629 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:07:08.818 00:05:02.155 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:07:56.839 00:05:10.011 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-25 16:12:47.566 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.576 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.587 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:08:11.986 00:05:56.782 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 16:08:12.027 00:06:00.627 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 16:10:11.977 00:05:00.687 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:10:11.976 00:05:56.802 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:11:10.973 00:05:01.731 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:11:08.769 00:05:02.217 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:13:11.025 00:05:01.630 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:13:08.820 00:05:02.158 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:13:16.849 00:05:10.008 OSPF 30.0.3.1:0 -> 224.0.0.5:0 41 2988 1 2025-11-25 16:17:47.760 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.691 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.846 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:14:11.988 00:05:56.781 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 16:15:12.030 00:06:00.627 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 16:16:11.978 00:05:00.688 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:16:11.980 00:05:56.802 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:17:10.975 00:05:01.734 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:17:08.768 00:05:02.217 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:18:36.857 00:05:10.017 OSPF 30.0.3.1:0 -> 224.0.0.5:0 42 3012 1 2025-11-25 16:22:47.916 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.937 00:00:00.030 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.925 00:00:00.032 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:19:11.026 00:05:01.633 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:19:08.821 00:05:02.155 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:20:11.991 00:05:56.780 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 16:22:11.982 00:05:00.694 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:22:12.032 00:06:00.628 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 16:23:08.770 00:05:02.218 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:22:11.982 00:05:56.800 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:23:10.976 00:05:01.734 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:27:48.111 00:00:00.050 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.120 00:00:00.039 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.310 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:23:56.875 00:05:10.004 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2488 1 2025-11-25 16:25:08.821 00:05:02.158 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:25:11.027 00:05:01.634 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:26:11.992 00:05:56.782 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 16:28:11.984 00:05:00.687 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:32:48.161 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.274 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.094 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:28:11.984 00:05:56.800 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:29:08.771 00:05:02.218 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:29:10.977 00:05:01.734 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:29:16.879 00:05:10.003 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2604 1 2025-11-25 16:29:12.035 00:06:00.629 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 16:31:08.822 00:05:02.159 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:31:11.031 00:05:01.636 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:32:11.995 00:05:56.779 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 16:37:48.119 00:00:00.036 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.050 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.291 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:34:11.986 00:05:00.696 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:34:36.881 00:05:10.009 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-25 16:34:11.985 00:05:56.799 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:35:08.773 00:05:02.218 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:35:10.979 00:05:01.742 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:36:12.037 00:06:00.635 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 16:37:11.031 00:05:01.641 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:37:08.824 00:05:02.158 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:42:48.033 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.224 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.166 00:00:00.039 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:38:11.997 00:05:56.778 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 16:39:56.891 00:05:10.005 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-25 16:40:11.986 00:05:00.700 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:40:11.987 00:05:56.798 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:41:10.982 00:05:01.746 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:41:08.774 00:05:02.218 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:43:11.033 00:05:01.645 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:43:08.826 00:05:02.157 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:47:48.471 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.728 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.666 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:44:11.997 00:05:00.002 TCP 30.153.0.1:36505 -> 30.151.0.1:179 11 667 1 2025-11-25 16:43:12.037 00:06:00.640 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 16:45:16.895 00:05:10.004 OSPF 30.0.3.1:0 -> 224.0.0.5:0 42 3068 1 2025-11-25 16:46:11.989 00:05:00.700 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:46:11.988 00:05:56.798 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:47:10.983 00:05:01.747 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:47:08.776 00:05:02.218 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:52:48.347 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.428 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.514 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-25 16:49:11.034 00:05:01.646 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-11-25 16:49:08.826 00:05:02.159 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-11-25 16:50:08.775 00:05:03.225 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-11-25 16:50:36.899 00:05:10.006 OSPF 30.0.3.1:0 -> 224.0.0.5:0 39 2828 1 2025-11-25 16:50:12.039 00:06:00.640 TCP 30.158.0.1:37041 -> 30.151.0.1:179 14 861 1 2025-11-25 16:52:11.989 00:05:00.700 TCP 30.151.0.1:179 -> 30.158.0.1:37041 12 738 1 2025-11-25 16:52:11.990 00:05:56.798 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-11-25 16:53:10.985 00:05:01.745 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-11-25 16:53:08.777 00:05:02.220 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-11-25 16:57:48.580 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.594 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.503 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 Summary: total flows: 126, total bytes: 98210, total packets: 1494, avg bps: 204, avg pps: 0, avg bpp: 65 Time window: 2025-11-25 15:54:12 - 2025-11-25 16:58:12 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0043s User: 0.0017s Wall: 0.0018s flows/second: 69046.6 Runtime: 0.0018s