Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 03:55:15.208 00:04:00.691 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 03:55:11.965 00:05:03.255 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 03:55:14.148 00:05:01.741 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:00:55.251 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:00:55.318 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:00:55.014 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 03:57:11.975 00:05:03.234 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 03:57:15.259 00:04:00.630 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-12-02 03:58:11.966 00:05:02.144 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 03:58:49.536 00:05:10.006 OSPF 30.0.3.1:0 -> 224.0.0.5:0 38 2660 1 2025-12-02 03:59:14.099 00:05:01.842 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:00:15.209 00:04:00.691 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:00:12.016 00:05:02.083 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:01:11.967 00:05:03.257 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:01:14.150 00:05:01.752 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:05:55.221 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.230 00:00:00.024 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.260 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:02:15.260 00:04:00.642 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-12-02 04:03:11.976 00:05:03.237 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:04:11.969 00:05:02.145 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:04:09.543 00:05:10.002 OSPF 30.0.3.1:0 -> 224.0.0.5:0 42 3148 1 2025-12-02 04:05:15.209 00:04:00.706 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:05:14.099 00:05:01.856 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:06:12.019 00:05:02.084 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:10:55.572 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.682 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.751 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:10:15.215 00:01:00.702 TCP 30.151.0.1:179 -> 30.158.0.1:37041 4 246 1 2025-12-02 04:07:15.264 00:04:00.641 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-12-02 04:07:11.968 00:05:03.256 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:07:14.152 00:05:01.754 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:09:11.980 00:05:03.234 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:12:15.264 00:01:00.643 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-12-02 04:09:29.545 00:05:10.003 OSPF 30.0.3.1:0 -> 224.0.0.5:0 37 2568 1 2025-12-02 04:10:11.971 00:05:02.144 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:12:15.214 00:02:00.702 TCP 30.151.0.1:179 -> 30.158.0.1:37041 6 369 1 2025-12-02 04:11:14.103 00:05:01.853 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:15:55.557 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.534 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.561 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:15:15.214 00:01:00.702 TCP 30.151.0.1:179 -> 30.158.0.1:37041 4 246 1 2025-12-02 04:12:12.022 00:05:02.083 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:14:15.264 00:02:00.642 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-12-02 04:13:11.970 00:05:03.254 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:13:14.154 00:05:01.754 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:17:15.265 00:01:00.644 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-12-02 04:14:49.549 00:05:10.002 OSPF 30.0.3.1:0 -> 224.0.0.5:0 39 2828 1 2025-12-02 04:15:11.982 00:05:03.233 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:16:11.973 00:05:02.144 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:20:55.636 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.767 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.592 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:19:15.264 00:02:00.644 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-12-02 04:17:15.214 00:04:00.704 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:17:14.106 00:05:01.854 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:18:12.022 00:05:02.084 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:22:15.268 00:01:00.642 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-12-02 04:19:11.971 00:05:03.257 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:19:14.156 00:05:01.753 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:20:09.552 00:05:10.004 OSPF 30.0.3.1:0 -> 224.0.0.5:0 37 2528 1 2025-12-02 04:21:11.985 00:05:03.233 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:25:55.817 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.712 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.812 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:22:15.218 00:04:00.702 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:22:11.975 00:05:02.142 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:23:14.106 00:05:01.854 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:24:12.027 00:05:02.082 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:24:15.268 00:04:00.642 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-12-02 04:25:11.976 00:05:03.255 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:25:14.156 00:05:01.754 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:25:29.558 00:05:10.015 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2464 1 2025-12-02 04:30:55.810 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.706 00:00:00.022 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.808 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:27:15.219 00:04:00.704 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:27:11.986 00:05:03.233 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:28:11.977 00:05:02.142 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:29:15.269 00:04:00.644 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-12-02 04:29:14.108 00:05:01.854 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:30:12.029 00:05:02.079 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:30:49.576 00:05:10.004 OSPF 30.0.3.1:0 -> 224.0.0.5:0 45 3392 1 2025-12-02 04:31:11.978 00:05:03.252 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:31:14.158 00:05:01.755 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:35:55.594 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.897 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.746 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:32:15.220 00:04:00.704 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:33:11.988 00:05:03.231 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:34:15.271 00:04:00.644 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-12-02 04:34:11.980 00:05:02.140 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:35:14.108 00:05:01.857 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:36:12.030 00:05:02.078 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:36:09.579 00:05:10.006 OSPF 30.0.3.1:0 -> 224.0.0.5:0 33 2240 1 2025-12-02 04:40:55.934 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:40:55.944 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:40:55.901 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:37:11.979 00:05:03.253 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:37:15.220 00:04:00.704 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:37:14.159 00:05:01.756 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:39:15.271 00:04:00.644 TCP 30.158.0.1:37041 -> 30.151.0.1:179 10 615 1 2025-12-02 04:39:11.989 00:05:03.233 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:40:11.980 00:05:02.140 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:44:15.273 00:01:00.643 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-12-02 04:41:14.108 00:05:01.858 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:41:29.586 00:05:10.007 OSPF 30.0.3.1:0 -> 224.0.0.5:0 43 3140 1 2025-12-02 04:45:55.962 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:45:56.121 00:00:00.029 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:45:56.290 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:42:15.222 00:04:00.704 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:42:12.032 00:05:02.079 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:43:11.982 00:05:03.252 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:43:14.160 00:05:01.756 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:47:15.223 00:01:00.703 TCP 30.151.0.1:179 -> 30.158.0.1:37041 4 246 1 2025-12-02 04:46:15.274 00:02:00.643 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-12-02 04:45:11.991 00:05:03.232 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:46:11.982 00:05:02.140 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:49:15.273 00:01:00.643 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-12-02 04:46:49.595 00:05:10.006 OSPF 30.0.3.1:0 -> 224.0.0.5:0 37 2544 1 2025-12-02 04:50:56.207 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:50:56.232 00:00:00.021 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:50:56.092 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:47:14.111 00:05:01.856 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:48:12.034 00:05:02.078 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:49:15.223 00:04:00.704 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:49:11.984 00:05:03.251 TCP 30.153.0.1:36505 -> 30.151.0.1:179 12 738 1 2025-12-02 04:51:15.274 00:02:00.644 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 2025-12-02 04:49:14.162 00:05:01.755 TCP 30.158.0.1:41617 -> 30.155.0.1:179 12 738 1 2025-12-02 04:51:11.994 00:05:03.231 TCP 30.151.0.1:179 -> 30.153.0.1:36505 12 738 1 2025-12-02 04:54:15.274 00:01:00.643 TCP 30.158.0.1:37041 -> 30.151.0.1:179 4 246 1 2025-12-02 04:55:56.217 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 04:55:56.091 00:00:00.023 ICMP 32.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 04:55:56.258 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-02 04:52:11.983 00:05:02.140 TCP 30.153.0.1:179 -> 30.155.0.1:40737 12 738 1 2025-12-02 04:52:09.600 00:05:01.026 OSPF 30.0.3.1:0 -> 224.0.0.5:0 36 2460 1 2025-12-02 04:53:14.112 00:05:01.858 TCP 30.155.0.1:179 -> 30.158.0.1:41617 12 738 1 2025-12-02 04:54:15.224 00:04:00.705 TCP 30.151.0.1:179 -> 30.158.0.1:37041 10 615 1 2025-12-02 04:54:12.037 00:05:02.077 TCP 30.155.0.1:40737 -> 30.153.0.1:179 12 738 1 2025-12-02 04:56:15.275 00:02:00.644 TCP 30.158.0.1:37041 -> 30.151.0.1:179 6 369 1 Summary: total flows: 140, total bytes: 98822, total packets: 1503, avg bps: 205, avg pps: 0, avg bpp: 65 Time window: 2025-12-02 03:55:11 - 2025-12-02 04:59:14 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0020s Wall: 0.0018s flows/second: 77172.1 Runtime: 0.0018s