Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-07-24 09:58:08.376 00:01:13.817 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-07-24 09:54:21.514 00:06:00.119 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-07-24 09:55:18.509 00:05:00.509 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-07-24 09:54:21.558 00:05:59.994 TCP 10.155.0.1:179 -> 10.158.0.1:37843 7 497 1 2026-07-24 09:55:22.852 00:05:02.005 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-07-24 09:56:18.490 00:05:00.587 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-07-24 09:55:29.110 00:05:56.666 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-07-24 09:55:29.069 00:05:56.730 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-07-24 09:56:22.872 00:05:01.966 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-07-24 09:57:27.472 00:05:01.602 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-07-24 09:57:27.452 00:05:01.662 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-07-24 09:58:13.931 00:05:10.034 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2452 1 2026-07-24 10:00:23.543 00:02:02.972 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-07-24 10:02:37.734 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:02:37.783 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:02:37.822 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:03:27.864 00:01:09.722 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-07-24 10:01:18.511 00:05:00.508 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-07-24 10:01:22.855 00:05:02.006 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:01:21.553 00:06:00.001 TCP 10.155.0.1:179 -> 10.158.0.1:37843 7 497 1 2026-07-24 10:02:18.490 00:05:00.588 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-07-24 10:01:21.515 00:06:00.118 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-07-24 10:01:29.073 00:05:56.724 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-07-24 10:02:22.875 00:05:01.966 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-07-24 10:01:29.113 00:05:56.664 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-07-24 10:03:27.453 00:05:01.661 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:03:27.473 00:05:01.601 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-07-24 10:07:37.900 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:07:38.025 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:07:38.011 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:03:33.966 00:05:10.014 OSPF 10.0.4.2:0 -> 224.0.0.5:0 37 2664 1 2026-07-24 10:05:38.935 00:05:27.773 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 19 1244 1 2026-07-24 10:07:18.513 00:05:00.515 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-07-24 10:07:22.858 00:05:02.006 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:08:18.493 00:05:00.605 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-07-24 10:07:29.074 00:05:56.736 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-07-24 10:08:22.880 00:05:01.964 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-07-24 10:07:29.114 00:05:56.675 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-07-24 10:12:38.163 00:00:00.026 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:12:38.031 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:12:38.130 00:00:00.032 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:08:53.981 00:05:10.004 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2416 1 2026-07-24 10:08:21.554 00:06:00.000 TCP 10.155.0.1:179 -> 10.158.0.1:37843 7 497 1 2026-07-24 10:08:21.517 00:06:00.118 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-07-24 10:09:27.475 00:05:01.604 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-07-24 10:09:27.455 00:05:01.664 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:12:08.055 00:02:02.971 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-07-24 10:15:12.375 00:01:13.821 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-07-24 10:13:18.516 00:05:00.526 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-07-24 10:17:27.543 00:00:00.090 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-07-24 10:13:22.861 00:05:02.007 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:17:38.324 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:17:38.074 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:17:38.107 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:14:13.968 00:05:00.833 OSPF 10.0.4.2:0 -> 224.0.0.5:0 38 2740 1 2026-07-24 10:14:18.496 00:05:00.606 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-07-24 10:13:29.119 00:05:56.672 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-07-24 10:13:29.077 00:05:56.733 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-07-24 10:14:22.881 00:05:01.966 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-07-24 10:15:27.459 00:05:01.661 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:15:27.479 00:05:01.601 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-07-24 10:15:21.555 00:06:00.001 TCP 10.155.0.1:179 -> 10.158.0.1:37843 7 497 1 2026-07-24 10:15:21.523 00:06:00.113 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-07-24 10:22:38.336 00:00:00.024 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:22:38.274 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:22:38.369 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:18:28.987 00:04:22.231 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 18 1160 1 2026-07-24 10:19:18.520 00:05:00.525 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-07-24 10:19:22.864 00:05:02.005 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:19:23.986 00:05:10.003 OSPF 10.0.4.2:0 -> 224.0.0.5:0 33 2240 1 2026-07-24 10:23:52.568 00:00:00.090 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-07-24 10:20:18.499 00:05:00.609 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-07-24 10:19:29.079 00:05:56.732 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-07-24 10:20:22.883 00:05:01.967 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-07-24 10:19:29.120 00:05:56.671 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-07-24 10:21:27.459 00:05:01.661 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:21:27.479 00:05:01.601 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-07-24 10:24:54.008 00:01:13.817 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-07-24 10:22:21.557 00:06:00.000 TCP 10.155.0.1:179 -> 10.158.0.1:37843 7 497 1 2026-07-24 10:22:21.526 00:06:00.112 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-07-24 10:27:38.419 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:27:38.179 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:27:38.334 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:24:43.991 00:05:00.047 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2448 1 2026-07-24 10:27:09.175 00:02:02.974 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-07-24 10:25:18.520 00:05:00.530 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-07-24 10:25:22.864 00:05:02.006 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:26:18.500 00:05:00.609 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-07-24 10:25:29.120 00:05:56.674 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-07-24 10:25:29.080 00:05:56.734 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-07-24 10:26:22.885 00:05:01.965 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-07-24 10:30:13.495 00:01:13.823 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-07-24 10:27:27.462 00:05:01.660 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:27:27.482 00:05:01.600 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-07-24 10:32:38.499 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:32:38.367 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:32:38.410 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:29:53.995 00:05:00.008 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2512 1 2026-07-24 10:29:21.530 00:06:00.112 TCP 10.158.0.1:37843 -> 10.155.0.1:179 16 965 1 2026-07-24 10:29:21.557 00:06:00.004 TCP 10.155.0.1:179 -> 10.158.0.1:37843 9 775 1 2026-07-24 10:32:28.663 00:02:02.971 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-07-24 10:31:18.524 00:05:00.528 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 1016 1 2026-07-24 10:31:22.865 00:05:02.007 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-07-24 10:31:29.080 00:05:56.734 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1016 1 2026-07-24 10:32:22.887 00:05:01.964 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-07-24 10:32:18.503 00:05:00.624 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 842 1 2026-07-24 10:31:29.121 00:05:56.674 TCP 10.153.0.1:35395 -> 10.155.0.1:179 14 842 1 2026-07-24 10:33:18.354 00:05:09.115 TCP 10.154.0.1:35279 -> 10.155.0.1:179 13 790 1 2026-07-24 10:33:18.313 00:05:10.778 TCP 10.155.0.1:179 -> 10.154.0.1:35279 14 1016 1 2026-07-24 10:37:38.748 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:37:38.650 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:37:38.528 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:35:04.002 00:05:10.011 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2404 1 2026-07-24 10:35:32.983 00:04:18.152 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 16 1024 1 2026-07-24 10:40:52.472 00:00:00.090 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-07-24 10:37:18.527 00:05:00.525 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 1016 1 2026-07-24 10:36:21.561 00:06:00.018 TCP 10.155.0.1:179 -> 10.158.0.1:37843 15 1087 1 2026-07-24 10:36:21.538 00:06:00.106 TCP 10.158.0.1:37843 -> 10.155.0.1:179 16 965 1 2026-07-24 10:37:22.870 00:05:02.003 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-07-24 10:38:18.508 00:05:00.607 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 842 1 2026-07-24 10:37:29.081 00:05:56.735 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1016 1 2026-07-24 10:38:22.890 00:05:01.962 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-07-24 10:37:29.123 00:05:56.675 TCP 10.153.0.1:35395 -> 10.155.0.1:179 14 842 1 2026-07-24 10:42:39.053 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:42:38.901 00:00:00.024 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:42:38.869 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:41:53.911 00:01:13.819 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-07-24 10:38:29.130 00:05:59.993 TCP 10.154.0.1:35279 -> 10.155.0.1:179 15 894 1 2026-07-24 10:39:27.489 00:05:01.595 TCP 10.155.0.1:179 -> 10.154.0.1:35279 14 1016 1 2026-07-24 10:40:24.012 00:05:10.002 OSPF 10.0.4.2:0 -> 224.0.0.5:0 40 2840 1 2026-07-24 10:44:09.079 00:02:02.971 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-07-24 10:43:18.569 00:05:00.486 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-07-24 10:43:22.870 00:05:02.004 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:47:38.908 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:47:38.836 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:47:39.007 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:47:13.399 00:00:49.242 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 5 324 1 2026-07-24 10:44:18.509 00:05:00.607 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-07-24 10:43:21.549 00:06:00.097 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-07-24 10:43:29.123 00:05:56.674 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-07-24 10:43:21.564 00:06:00.006 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-07-24 10:43:29.083 00:05:56.734 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-07-24 10:44:22.891 00:05:01.964 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-07-24 10:45:27.491 00:05:01.593 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-07-24 10:45:27.470 00:05:01.653 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:49:03.990 00:00:42.594 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 5 324 1 2026-07-24 10:45:44.016 00:05:10.023 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2368 1 2026-07-24 10:50:50.486 00:01:01.532 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 6 376 1 2026-07-24 10:52:38.950 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:52:38.982 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:52:38.769 00:00:00.024 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:49:18.532 00:05:00.527 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-07-24 10:49:22.872 00:05:02.006 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:50:18.512 00:05:00.608 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-07-24 10:49:29.124 00:05:56.674 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-07-24 10:49:29.084 00:05:56.734 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-07-24 10:50:22.900 00:05:01.959 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-07-24 10:52:53.367 00:02:19.355 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 10 648 1 2026-07-24 10:51:04.039 00:05:10.007 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2384 1 2026-07-24 10:50:21.566 00:06:00.008 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-07-24 10:50:21.552 00:06:00.097 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-07-24 10:51:27.492 00:05:01.596 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-07-24 10:51:27.473 00:05:01.655 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-07-24 10:57:39.022 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:57:38.980 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-07-24 10:57:38.995 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-07-24 10:56:14.070 00:02:02.971 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 Summary: total flows: 167, total bytes: 124470, total packets: 1894, avg bps: 259, avg pps: 0, avg bpp: 65 Time window: 2026-07-24 09:54:21 - 2026-07-24 10:58:17 Total flows processed: 167, passed: 167, Blocks skipped: 0, Bytes read: 17432 Sys: 0.0020s User: 0.0020s Wall: 0.0023s flows/second: 71826.2 Runtime: 0.0023s