Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-08-01 01:57:48.918 00:02:02.972 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 01:56:22.908 00:05:00.491 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-01 01:56:27.498 00:05:01.651 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 01:56:31.272 00:05:01.811 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 01:56:27.479 00:05:01.692 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 01:56:31.254 00:05:01.870 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:01:19.085 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:01:19.152 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:01:19.377 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 01:56:33.122 00:05:56.241 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 01:57:25.789 00:06:00.029 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 01:57:25.737 00:06:00.073 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-08-01 01:58:29.380 00:05:03.704 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 02:00:53.238 00:02:02.970 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 01:59:19.286 00:05:10.015 OSPF 10.0.4.2:0 -> 224.0.0.5:0 34 2336 1 2026-08-01 02:03:57.559 00:00:00.091 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-08-01 02:00:22.889 00:05:00.572 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-01 02:06:19.577 00:00:00.021 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:06:19.255 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:06:19.166 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:02:22.910 00:05:00.492 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-01 02:02:27.483 00:05:01.688 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:02:27.501 00:05:01.649 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 02:02:31.273 00:05:01.810 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 02:02:31.253 00:05:01.870 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:02:33.124 00:05:56.241 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 02:04:29.384 00:05:03.700 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 02:04:59.002 00:03:37.177 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 13 836 1 2026-08-01 02:04:39.303 00:05:10.001 OSPF 10.0.4.2:0 -> 224.0.0.5:0 38 2660 1 2026-08-01 02:04:25.738 00:06:00.073 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-08-01 02:04:25.789 00:06:00.029 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 02:09:37.526 00:00:00.091 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-08-01 02:06:22.890 00:05:00.575 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-01 02:11:19.594 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:11:19.477 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:11:19.434 00:00:00.021 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:10:38.971 00:01:13.816 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-08-01 02:08:27.484 00:05:01.687 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:08:22.912 00:05:00.502 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-01 02:08:27.505 00:05:01.646 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 02:08:31.256 00:05:01.869 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:08:31.275 00:05:01.810 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 02:08:33.124 00:05:56.243 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 02:09:59.303 00:05:10.004 OSPF 10.0.4.2:0 -> 224.0.0.5:0 39 2712 1 2026-08-01 02:10:29.386 00:05:03.700 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 02:12:54.135 00:02:02.972 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 02:16:19.583 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:16:19.521 00:00:00.029 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:16:19.559 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:11:25.737 00:06:00.076 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-08-01 02:12:22.901 00:05:00.577 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-01 02:11:25.792 00:06:00.028 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 02:15:58.457 00:01:13.817 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-08-01 02:14:27.488 00:05:01.686 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:14:22.913 00:05:00.503 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-01 02:14:27.508 00:05:01.645 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 02:14:31.280 00:05:01.807 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 02:14:31.260 00:05:01.868 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:14:33.126 00:05:56.243 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 02:15:19.307 00:05:10.002 OSPF 10.0.4.2:0 -> 224.0.0.5:0 34 2388 1 2026-08-01 02:18:13.623 00:02:02.970 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 02:16:29.387 00:05:03.700 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 02:21:19.472 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:21:19.705 00:00:00.021 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:21:19.776 00:00:00.024 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:18:22.897 00:05:00.581 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-01 02:18:25.793 00:06:00.026 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 02:18:25.739 00:06:00.077 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-08-01 02:20:22.917 00:05:00.499 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-01 02:20:27.510 00:05:01.646 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 02:20:31.280 00:05:01.808 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 02:20:27.490 00:05:01.685 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:20:31.260 00:05:01.868 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:20:39.309 00:05:01.033 OSPF 10.0.4.2:0 -> 224.0.0.5:0 33 2352 1 2026-08-01 02:20:33.128 00:05:56.242 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 02:21:17.949 00:04:59.094 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 14 888 1 2026-08-01 02:26:19.655 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:26:19.773 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:26:19.632 00:00:00.024 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:22:29.388 00:05:03.702 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 02:24:22.898 00:05:00.579 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-01 02:25:49.311 00:05:10.007 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2384 1 2026-08-01 02:26:22.921 00:05:00.497 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-01 02:25:25.740 00:06:00.078 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-08-01 02:25:25.796 00:06:00.025 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 02:26:27.492 00:05:01.685 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:26:27.511 00:05:01.645 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 02:26:31.264 00:05:01.866 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:26:31.284 00:05:01.806 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 02:31:19.945 00:00:00.024 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:31:20.069 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:31:20.144 00:00:00.034 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:26:33.130 00:05:56.241 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 02:27:18.391 00:04:18.138 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 16 1024 1 2026-08-01 02:28:29.388 00:05:03.703 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 02:30:22.901 00:05:00.577 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-01 02:32:37.880 00:02:38.811 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 10 648 1 2026-08-01 02:31:09.318 00:05:10.006 OSPF 10.0.4.2:0 -> 224.0.0.5:0 37 2576 1 2026-08-01 02:36:19.886 00:00:00.021 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:36:19.914 00:00:00.024 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:36:20.004 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:32:22.922 00:05:00.497 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-01 02:32:27.514 00:05:01.645 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 02:32:27.493 00:05:01.685 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:32:31.283 00:05:01.810 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 02:32:31.264 00:05:01.870 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:32:25.741 00:06:00.078 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 861 1 2026-08-01 02:32:25.798 00:06:00.024 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 02:36:19.063 00:01:13.818 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-08-01 02:32:33.131 00:05:56.240 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 02:34:29.391 00:05:03.701 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 02:36:22.906 00:05:00.574 TCP 10.157.0.1:36347 -> 10.155.0.1:179 12 738 1 2026-08-01 02:38:34.231 00:02:02.970 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 02:36:29.327 00:05:10.007 OSPF 10.0.4.2:0 -> 224.0.0.5:0 41 2936 1 2026-08-01 02:41:20.096 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:41:20.038 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:41:20.189 00:00:00.027 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:38:22.927 00:05:00.494 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 1016 1 2026-08-01 02:38:27.493 00:05:01.689 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-08-01 02:38:27.514 00:05:01.648 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-08-01 02:38:31.284 00:05:01.811 TCP 10.155.0.1:179 -> 10.154.0.1:35279 14 1016 1 2026-08-01 02:38:31.265 00:05:01.871 TCP 10.154.0.1:35279 -> 10.155.0.1:179 14 842 1 2026-08-01 02:38:33.132 00:05:56.246 TCP 10.153.0.1:35395 -> 10.155.0.1:179 14 842 1 2026-08-01 02:41:38.552 00:02:02.971 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 02:39:25.742 00:06:00.077 TCP 10.155.0.1:179 -> 10.158.0.1:37843 16 1139 1 2026-08-01 02:39:25.799 00:06:00.026 TCP 10.158.0.1:37843 -> 10.155.0.1:179 16 965 1 2026-08-01 02:40:29.394 00:05:03.702 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1016 1 2026-08-01 02:44:42.870 00:00:00.091 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-08-01 02:41:49.334 00:05:10.002 OSPF 10.0.4.2:0 -> 224.0.0.5:0 36 2532 1 2026-08-01 02:46:20.158 00:00:00.042 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:46:20.208 00:00:00.024 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:46:20.251 00:00:00.018 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:41:44.374 00:05:39.110 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 842 1 2026-08-01 02:44:22.932 00:05:00.490 TCP 10.155.0.1:179 -> 10.157.0.1:36347 12 738 1 2026-08-01 02:44:27.514 00:05:01.652 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 02:44:27.496 00:05:01.692 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:44:31.265 00:05:01.871 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 02:44:31.285 00:05:01.811 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 02:44:33.136 00:05:56.244 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 02:45:44.310 00:04:22.236 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 17 1108 1 2026-08-01 02:46:25.745 00:05:03.772 TCP 10.155.0.1:179 -> 10.158.0.1:37843 16 1294 1 2026-08-01 02:46:25.800 00:05:03.797 TCP 10.158.0.1:37843 -> 10.155.0.1:179 16 946 1 2026-08-01 02:46:29.398 00:05:03.699 TCP 10.155.0.1:179 -> 10.153.0.1:35395 16 1294 1 2026-08-01 02:51:07.896 00:00:00.090 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-08-01 02:51:20.313 00:00:00.024 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:51:20.013 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:51:20.291 00:00:00.026 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:47:09.336 00:05:10.005 OSPF 10.0.4.2:0 -> 224.0.0.5:0 33 2356 1 2026-08-01 02:48:22.910 00:05:00.574 TCP 10.157.0.1:36347 -> 10.155.0.1:179 16 946 1 2026-08-01 02:52:09.336 00:01:01.538 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 6 376 1 2026-08-01 02:54:12.216 00:00:00.091 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 2026-08-01 02:50:22.930 00:05:00.494 TCP 10.155.0.1:179 -> 10.157.0.1:36347 18 1572 1 2026-08-01 02:50:27.518 00:05:01.650 TCP 10.155.0.1:179 -> 10.151.0.1:37279 18 1572 1 2026-08-01 02:50:31.287 00:05:01.810 TCP 10.155.0.1:179 -> 10.154.0.1:35279 18 1572 1 2026-08-01 02:50:27.498 00:05:01.691 TCP 10.151.0.1:37279 -> 10.155.0.1:179 18 1050 1 2026-08-01 02:50:31.267 00:05:01.870 TCP 10.154.0.1:35279 -> 10.155.0.1:179 18 1050 1 2026-08-01 02:50:33.136 00:05:56.351 TCP 10.153.0.1:35395 -> 10.155.0.1:179 20 1154 1 2026-08-01 02:56:20.312 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:56:20.367 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 02:56:20.306 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 02:52:29.440 00:05:03.657 TCP 10.155.0.1:179 -> 10.153.0.1:35395 16 1294 1 2026-08-01 02:52:29.341 00:05:10.007 OSPF 10.0.4.2:0 -> 224.0.0.5:0 36 2448 1 2026-08-01 02:52:25.802 00:06:00.024 TCP 10.158.0.1:37843 -> 10.155.0.1:179 18 1069 1 2026-08-01 02:52:25.745 00:06:00.080 TCP 10.155.0.1:179 -> 10.158.0.1:37843 18 1417 1 2026-08-01 02:53:44.574 00:05:38.910 TCP 10.157.0.1:36347 -> 10.155.0.1:179 16 946 1 Summary: total flows: 165, total bytes: 130136, total packets: 1968, avg bps: 275, avg pps: 0, avg bpp: 66 Time window: 2026-08-01 01:56:22 - 2026-08-01 02:59:23 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0027s User: 0.0014s Wall: 0.0021s flows/second: 77135.6 Runtime: 0.0022s