Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-09-20 01:58:07.341 00:01:13.850 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 10 556 1 2026-09-20 01:55:57.885 00:05:02.069 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:00:22.510 00:00:00.120 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 4 220 1 2026-09-20 02:00:22.842 00:00:00.023 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:00:22.841 00:00:00.021 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:00:23.000 00:00:00.022 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:00:23.033 00:00:00.024 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:01:23.979 00:00:28.762 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 4 220 1 2026-09-20 01:56:59.934 00:06:00.001 TCP 10.155.0.1:34089 -> 10.156.0.1:179 7 497 1 2026-09-20 01:56:59.882 00:06:00.112 TCP 10.156.0.1:179 -> 10.155.0.1:34089 14 861 1 2026-09-20 01:58:50.292 00:05:10.005 OSPF 10.0.7.2:0 -> 224.0.0.5:0 37 2672 1 2026-09-20 01:58:57.907 00:05:02.029 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:05:23.202 00:00:00.023 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:05:23.093 00:00:00.024 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:05:23.018 00:00:00.040 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:05:23.147 00:00:00.023 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:01:57.890 00:05:02.065 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:02:53.068 00:05:28.794 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 28 1552 1 2026-09-20 02:04:10.296 00:05:01.009 OSPF 10.0.7.2:0 -> 224.0.0.5:0 34 2316 1 2026-09-20 02:03:59.884 00:06:00.112 TCP 10.156.0.1:179 -> 10.155.0.1:34089 14 861 1 2026-09-20 02:03:59.936 00:06:00.000 TCP 10.155.0.1:34089 -> 10.156.0.1:179 7 497 1 2026-09-20 02:04:57.912 00:05:02.024 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:10:23.387 00:00:00.022 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:10:23.322 00:00:00.022 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:10:23.167 00:00:00.022 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:10:23.170 00:00:00.021 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:07:57.892 00:05:02.064 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:09:20.301 00:05:10.009 OSPF 10.0.7.2:0 -> 224.0.0.5:0 32 2176 1 2026-09-20 02:09:23.181 00:04:14.075 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 22 1216 1 2026-09-20 02:10:57.912 00:05:02.024 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:15:23.249 00:00:00.022 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:15:23.256 00:00:00.022 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:15:23.356 00:00:00.021 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:15:23.301 00:00:00.022 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:10:59.884 00:06:00.113 TCP 10.156.0.1:179 -> 10.155.0.1:34089 14 861 1 2026-09-20 02:10:59.935 00:06:00.001 TCP 10.155.0.1:34089 -> 10.156.0.1:179 7 497 1 2026-09-20 02:14:38.572 00:03:12.632 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 18 996 1 2026-09-20 02:13:57.896 00:05:02.062 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:14:40.312 00:05:10.040 OSPF 10.0.7.2:0 -> 224.0.0.5:0 40 2832 1 2026-09-20 02:20:23.417 00:00:00.024 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:20:23.376 00:00:00.024 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:20:23.355 00:00:00.022 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:20:23.388 00:00:00.022 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:16:57.918 00:05:02.023 TCP 10.155.0.1:179 -> 10.152.0.1:45097 15 1068 1 2026-09-20 02:18:52.555 00:02:15.260 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 14 776 1 2026-09-20 02:17:59.888 00:05:00.115 TCP 10.156.0.1:179 -> 10.155.0.1:34089 14 842 1 2026-09-20 02:17:59.938 00:06:00.003 TCP 10.155.0.1:34089 -> 10.156.0.1:179 9 775 1 2026-09-20 02:19:57.901 00:05:02.061 TCP 10.152.0.1:45097 -> 10.155.0.1:179 16 1120 1 2026-09-20 02:20:00.321 00:05:10.010 OSPF 10.0.7.2:0 -> 224.0.0.5:0 38 2760 1 2026-09-20 02:25:23.498 00:00:00.023 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:25:23.692 00:00:00.033 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:25:23.365 00:00:00.021 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:25:23.649 00:00:00.021 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:22:09.133 00:04:18.168 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 22 1216 1 2026-09-20 02:22:57.924 00:05:02.018 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:23:59.889 00:05:00.114 TCP 10.156.0.1:179 -> 10.155.0.1:34089 12 738 1 2026-09-20 02:25:20.331 00:05:10.009 OSPF 10.0.7.2:0 -> 224.0.0.5:0 35 2404 1 2026-09-20 02:25:57.903 00:05:02.060 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:24:59.942 00:06:00.002 TCP 10.155.0.1:34089 -> 10.156.0.1:179 7 497 1 2026-09-20 02:30:23.734 00:00:00.021 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:30:23.593 00:00:00.022 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:30:23.507 00:00:00.022 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:30:23.592 00:00:00.023 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:27:28.621 00:03:08.547 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 18 996 1 2026-09-20 02:28:57.925 00:05:02.020 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:29:59.892 00:05:00.113 TCP 10.156.0.1:179 -> 10.155.0.1:34089 12 738 1 2026-09-20 02:31:38.477 00:03:12.637 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 18 996 1 2026-09-20 02:30:40.340 00:05:10.007 OSPF 10.0.7.2:0 -> 224.0.0.5:0 36 2684 1 2026-09-20 02:35:23.540 00:00:00.022 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:35:23.581 00:00:00.022 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:35:23.574 00:00:00.022 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:35:23.623 00:00:00.022 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:31:57.905 00:05:02.060 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:31:59.943 00:06:00.003 TCP 10.155.0.1:34089 -> 10.156.0.1:179 7 497 1 2026-09-20 02:35:52.458 00:03:04.412 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 15 828 1 2026-09-20 02:34:57.926 00:05:02.020 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:35:59.895 00:05:00.114 TCP 10.156.0.1:179 -> 10.155.0.1:34089 12 738 1 2026-09-20 02:36:00.348 00:05:10.019 OSPF 10.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2026-09-20 02:40:23.655 00:00:00.024 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:40:23.853 00:00:00.022 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:40:23.832 00:00:00.022 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:40:23.782 00:00:00.023 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:37:57.905 00:05:02.061 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:38:59.946 00:06:00.001 TCP 10.155.0.1:34089 -> 10.156.0.1:179 7 497 1 2026-09-20 02:39:58.191 00:05:23.704 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 25 1384 1 2026-09-20 02:40:57.927 00:05:02.020 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:45:23.891 00:00:00.023 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:45:23.815 00:00:00.022 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:45:23.815 00:00:00.021 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:45:23.996 00:00:00.023 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:41:20.368 00:05:10.008 OSPF 10.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2026-09-20 02:41:59.913 00:05:00.096 TCP 10.156.0.1:179 -> 10.155.0.1:34089 12 738 1 2026-09-20 02:43:57.908 00:05:02.060 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:46:23.215 00:02:02.999 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 12 660 1 2026-09-20 02:50:24.005 00:00:00.022 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:50:24.039 00:00:00.022 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:50:24.119 00:00:00.022 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:50:24.200 00:00:00.023 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:49:27.534 00:01:13.848 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 10 556 1 2026-09-20 02:46:40.376 00:05:10.008 OSPF 10.0.7.2:0 -> 224.0.0.5:0 40 2928 1 2026-09-20 02:46:57.928 00:05:02.020 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:45:59.948 00:06:00.042 TCP 10.155.0.1:34089 -> 10.156.0.1:179 10 653 1 2026-09-20 02:51:42.701 00:00:00.121 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 4 220 1 2026-09-20 02:47:59.914 00:05:00.096 TCP 10.156.0.1:179 -> 10.155.0.1:34089 12 738 1 2026-09-20 02:52:44.140 00:01:13.849 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 10 556 1 2026-09-20 02:49:57.909 00:05:02.060 TCP 10.152.0.1:45097 -> 10.155.0.1:179 12 738 1 2026-09-20 02:55:24.243 00:00:00.023 ICMP 11.102.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-09-20 02:55:23.988 00:00:00.023 ICMP 10.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-09-20 02:55:23.873 00:00:00.023 ICMP 10.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2026-09-20 02:55:23.915 00:00:00.023 ICMP 11.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-09-20 02:52:00.384 00:05:10.004 OSPF 10.0.7.2:0 -> 224.0.0.5:0 34 2376 1 2026-09-20 02:52:57.930 00:05:02.021 TCP 10.155.0.1:179 -> 10.152.0.1:45097 12 738 1 2026-09-20 02:53:59.931 00:05:00.088 TCP 10.156.0.1:179 -> 10.155.0.1:34089 12 738 1 2026-09-20 02:52:59.948 00:06:00.010 TCP 10.155.0.1:34089 -> 10.156.0.1:179 13 809 1 2026-09-20 02:54:59.308 00:03:12.633 TCP 10.0.4.2:52974 -> 10.104.0.1:3323 18 996 1 Summary: total flows: 115, total bytes: 82436, total packets: 1240, avg bps: 174, avg pps: 0, avg bpp: 66 Time window: 2026-09-20 01:55:57 - 2026-09-20 02:59:00 Total flows processed: 115, passed: 115, Blocks skipped: 0, Bytes read: 12024 Sys: 0.0018s User: 0.0027s Wall: 0.0017s flows/second: 66548.7 Runtime: 0.0017s