Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-08-05 02:56:51.960 00:02:02.880 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 156 1 2026-08-05 02:54:26.167 00:05:58.685 TCP 10.155.0.1:179 -> 10.157.0.1:36347 15 1338 1 2026-08-05 02:55:31.299 00:05:03.555 TCP 10.155.0.1:179 -> 10.153.0.1:35395 15 1338 1 2026-08-05 02:55:27.681 00:06:00.128 TCP 10.158.0.1:37843 -> 10.155.0.1:179 17 1017 1 2026-08-05 02:56:30.943 00:05:00.523 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 908 1 2026-08-05 02:56:30.962 00:05:00.530 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 719 1 2026-08-05 02:56:31.002 00:05:53.829 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-05 02:57:32.907 00:05:01.945 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-05 02:57:31.279 00:05:03.612 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-05 02:57:32.886 00:05:02.005 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-05 02:57:56.276 00:05:10.007 OSPF 10.0.4.1:0 -> 224.0.0.5:0 37 2580 1 2026-08-05 02:59:56.280 00:03:04.326 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 4 208 1 2026-08-05 03:03:15.965 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:03:15.961 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:03:15.834 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:04:02.040 00:01:17.914 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-08-05 03:00:26.167 00:05:58.687 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-05 03:00:27.602 00:06:00.228 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-08-05 03:01:31.302 00:05:03.552 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-05 03:02:29.431 00:05:02.035 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-05 03:02:29.411 00:05:02.075 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-05 03:02:26.227 00:05:58.607 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-05 03:03:16.283 00:05:10.003 OSPF 10.0.4.1:0 -> 224.0.0.5:0 37 2644 1 2026-08-05 03:02:27.682 00:06:00.128 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-05 03:03:32.907 00:05:01.945 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-05 03:03:31.282 00:05:03.611 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-05 03:03:32.888 00:05:02.005 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-05 03:08:15.820 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:08:15.961 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:08:15.964 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:06:21.304 00:03:08.505 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 13 836 1 2026-08-05 03:06:26.168 00:05:22.126 TCP 10.155.0.1:179 -> 10.157.0.1:36347 13 964 1 2026-08-05 03:07:31.303 00:05:03.551 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1016 1 2026-08-05 03:10:31.159 00:01:13.818 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-08-05 03:07:27.604 00:06:00.228 TCP 10.155.0.1:179 -> 10.158.0.1:37843 16 1139 1 2026-08-05 03:08:29.433 00:05:02.036 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-08-05 03:08:29.412 00:05:02.076 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-08-05 03:08:36.285 00:05:10.004 OSPF 10.0.4.1:0 -> 224.0.0.5:0 38 2688 1 2026-08-05 03:08:26.228 00:05:44.228 TCP 10.157.0.1:36347 -> 10.155.0.1:179 15 875 1 2026-08-05 03:13:15.898 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:13:16.099 00:00:00.014 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:13:16.068 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:09:31.283 00:05:03.611 TCP 10.153.0.1:35395 -> 10.155.0.1:179 16 946 1 2026-08-05 03:09:32.889 00:05:02.005 TCP 10.154.0.1:35279 -> 10.155.0.1:179 16 946 1 2026-08-05 03:09:32.909 00:05:01.945 TCP 10.155.0.1:179 -> 10.154.0.1:35279 16 1460 1 2026-08-05 03:09:27.684 00:06:00.128 TCP 10.158.0.1:37843 -> 10.155.0.1:179 18 1069 1 2026-08-05 03:12:46.327 00:02:23.450 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 10 648 1 2026-08-05 03:12:24.856 00:05:01.316 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 1182 1 2026-08-05 03:13:31.304 00:05:03.550 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1182 1 2026-08-05 03:13:56.289 00:05:10.014 OSPF 10.0.4.1:0 -> 224.0.0.5:0 37 2684 1 2026-08-05 03:18:16.334 00:00:00.021 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:18:16.216 00:00:00.024 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:18:16.279 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:14:06.729 00:05:21.105 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 1182 1 2026-08-05 03:14:06.729 00:05:22.709 TCP 10.155.0.1:179 -> 10.151.0.1:37279 13 1111 1 2026-08-05 03:14:06.749 00:05:22.669 TCP 10.151.0.1:37279 -> 10.155.0.1:179 13 790 1 2026-08-05 03:14:24.839 00:05:01.405 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-05 03:15:31.286 00:05:03.610 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-05 03:15:32.891 00:05:02.005 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-05 03:15:32.911 00:05:01.944 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-05 03:16:11.127 00:05:23.674 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 22 1432 1 2026-08-05 03:16:27.685 00:06:00.130 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-05 03:21:35.894 00:00:00.060 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 2 136 1 2026-08-05 03:18:24.860 00:05:01.314 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 1016 1 2026-08-05 03:23:16.468 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:23:16.383 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:23:16.210 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:19:16.304 00:05:10.005 OSPF 10.0.4.1:0 -> 224.0.0.5:0 43 3136 1 2026-08-05 03:19:31.312 00:05:03.543 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1016 1 2026-08-05 03:19:31.470 00:05:57.968 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-08-05 03:19:31.490 00:05:57.928 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-08-05 03:20:24.839 00:05:01.395 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 842 1 2026-08-05 03:20:27.605 00:06:00.231 TCP 10.155.0.1:179 -> 10.158.0.1:37843 16 1139 1 2026-08-05 03:21:32.914 00:05:01.942 TCP 10.155.0.1:179 -> 10.154.0.1:35279 14 1016 1 2026-08-05 03:21:31.290 00:05:03.606 TCP 10.153.0.1:35395 -> 10.155.0.1:179 14 842 1 2026-08-05 03:21:32.894 00:05:02.002 TCP 10.154.0.1:35279 -> 10.155.0.1:179 14 842 1 2026-08-05 03:22:36.150 00:05:19.579 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 18 1160 1 2026-08-05 03:22:58.336 00:05:29.481 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 842 1 2026-08-05 03:28:16.677 00:00:00.021 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:28:16.652 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:28:16.543 00:00:00.024 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:24:24.862 00:05:01.313 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-05 03:24:36.308 00:05:10.004 OSPF 10.0.4.1:0 -> 224.0.0.5:0 33 2240 1 2026-08-05 03:28:22.294 00:00:43.067 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 4 272 1 2026-08-05 03:25:31.311 00:05:03.546 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1016 1 2026-08-05 03:25:31.491 00:05:57.929 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-08-05 03:26:24.841 00:05:01.393 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 842 1 2026-08-05 03:25:31.472 00:05:57.968 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-08-05 03:27:32.898 00:05:02.000 TCP 10.154.0.1:35279 -> 10.155.0.1:179 14 842 1 2026-08-05 03:27:31.291 00:05:03.607 TCP 10.153.0.1:35395 -> 10.155.0.1:179 14 842 1 2026-08-05 03:27:32.917 00:05:01.940 TCP 10.155.0.1:179 -> 10.154.0.1:35279 14 1016 1 2026-08-05 03:30:06.711 00:02:02.970 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-05 03:27:27.609 00:06:00.230 TCP 10.155.0.1:179 -> 10.158.0.1:37843 16 1139 1 2026-08-05 03:33:16.517 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:33:16.678 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:33:16.378 00:00:00.024 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:29:56.314 00:05:10.151 OSPF 10.0.4.1:0 -> 224.0.0.5:0 40 2904 1 2026-08-05 03:30:18.212 00:05:06.651 TCP 10.155.0.1:179 -> 10.157.0.1:36347 13 945 1 2026-08-05 03:29:27.689 00:06:00.129 TCP 10.158.0.1:37843 -> 10.155.0.1:179 16 965 1 2026-08-05 03:31:31.312 00:05:03.546 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-05 03:31:31.491 00:05:57.929 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-05 03:32:24.841 00:05:01.394 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-05 03:31:31.472 00:05:57.968 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-05 03:33:31.293 00:05:03.606 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-05 03:33:32.898 00:05:02.001 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-05 03:33:32.917 00:05:01.941 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-05 03:33:11.031 00:04:38.617 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 15 940 1 2026-08-05 03:38:16.469 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:38:16.618 00:00:00.021 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:38:16.498 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:35:16.320 00:05:10.006 OSPF 10.0.4.1:0 -> 224.0.0.5:0 34 2336 1 2026-08-05 03:34:27.610 00:06:00.230 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-08-05 03:35:26.175 00:05:58.690 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-05 03:36:27.690 00:06:00.130 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-05 03:37:31.313 00:05:03.546 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-05 03:37:31.495 00:05:57.929 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-05 03:38:24.843 00:05:01.395 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-05 03:37:31.476 00:05:57.969 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-05 03:38:50.999 00:04:14.045 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 16 1024 1 2026-08-05 03:43:16.656 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:43:16.840 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:43:16.775 00:00:00.021 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:39:32.918 00:05:01.941 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-05 03:39:31.296 00:05:03.604 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-05 03:39:32.898 00:05:02.002 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-05 03:40:36.325 00:05:10.010 OSPF 10.0.4.1:0 -> 224.0.0.5:0 39 2768 1 2026-08-05 03:41:26.177 00:05:01.374 TCP 10.155.0.1:179 -> 10.157.0.1:36347 13 985 1 2026-08-05 03:41:27.609 00:06:00.236 TCP 10.155.0.1:179 -> 10.158.0.1:37843 16 1160 1 2026-08-05 03:43:31.317 00:05:03.544 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1037 1 2026-08-05 03:48:16.817 00:00:00.025 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:48:16.718 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:48:16.849 00:00:00.024 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:44:06.395 00:04:18.134 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 16 1024 1 2026-08-05 03:43:31.478 00:05:57.972 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1037 1 2026-08-05 03:43:31.499 00:05:57.932 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-08-05 03:44:24.846 00:05:01.399 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 842 1 2026-08-05 03:43:27.692 00:06:00.135 TCP 10.158.0.1:37843 -> 10.155.0.1:179 16 965 1 2026-08-05 03:49:25.879 00:00:00.091 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-08-05 03:45:32.919 00:05:01.941 TCP 10.155.0.1:179 -> 10.154.0.1:35279 15 1259 1 2026-08-05 03:45:31.298 00:05:03.603 TCP 10.153.0.1:35395 -> 10.155.0.1:179 15 894 1 2026-08-05 03:45:32.900 00:05:02.001 TCP 10.154.0.1:35279 -> 10.155.0.1:179 15 894 1 2026-08-05 03:45:56.337 00:05:10.007 OSPF 10.0.4.1:0 -> 224.0.0.5:0 44 3304 1 2026-08-05 03:50:27.320 00:00:28.250 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 5 324 1 2026-08-05 03:47:24.866 00:05:01.316 TCP 10.155.0.1:179 -> 10.157.0.1:36347 13 960 1 2026-08-05 03:51:55.896 00:00:54.874 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 5 324 1 2026-08-05 03:53:17.119 00:00:00.029 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:53:17.086 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:53:17.225 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:48:27.612 00:06:00.235 TCP 10.155.0.1:179 -> 10.158.0.1:37843 15 1083 1 2026-08-05 03:49:31.317 00:05:03.543 TCP 10.155.0.1:179 -> 10.153.0.1:35395 13 960 1 2026-08-05 03:49:31.518 00:05:57.914 TCP 10.151.0.1:37279 -> 10.155.0.1:179 13 790 1 2026-08-05 03:50:24.847 00:05:01.397 TCP 10.157.0.1:36347 -> 10.155.0.1:179 13 790 1 2026-08-05 03:49:31.497 00:05:57.954 TCP 10.155.0.1:179 -> 10.151.0.1:37279 13 960 1 2026-08-05 03:51:32.921 00:05:01.941 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-05 03:51:16.343 00:05:10.006 OSPF 10.0.4.1:0 -> 224.0.0.5:0 35 2440 1 2026-08-05 03:50:27.693 00:06:00.134 TCP 10.158.0.1:37843 -> 10.155.0.1:179 15 913 1 2026-08-05 03:51:31.297 00:05:03.604 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-05 03:51:32.900 00:05:02.002 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-05 03:53:24.868 00:05:01.315 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-05 03:53:52.119 00:04:18.139 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 18 1160 1 2026-08-05 03:58:17.009 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-05 03:58:17.125 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-05 03:58:16.867 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 137274, total packets: 2021, avg bps: 285, avg pps: 0, avg bpp: 67 Time window: 2026-08-05 02:54:26 - 2026-08-05 03:58:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0000s Wall: 0.0020s flows/second: 83588.6 Runtime: 0.0020s