Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-08-01 12:55:01.301 00:05:22.435 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 842 1 2026-08-01 12:55:01.243 00:05:24.793 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 1016 1 2026-08-01 12:55:29.548 00:05:03.776 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 12:56:27.734 00:05:01.675 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 12:59:42.712 00:00:50.266 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 5 324 1 2026-08-01 12:56:27.714 00:05:01.716 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:01:32.330 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:01:32.281 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:01:32.415 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 12:57:26.019 00:06:00.010 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 12:57:23.149 00:06:00.530 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 861 1 2026-08-01 12:58:29.569 00:05:03.716 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 12:58:33.284 00:05:48.169 TCP 10.155.0.1:179 -> 10.154.0.1:35279 13 964 1 2026-08-01 12:58:33.325 00:05:48.169 TCP 10.154.0.1:35279 -> 10.155.0.1:179 13 771 1 2026-08-01 12:59:50.046 00:05:10.006 OSPF 10.0.4.2:0 -> 224.0.0.5:0 38 2656 1 2026-08-01 13:01:25.949 00:05:00.087 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 1016 1 2026-08-01 13:01:29.549 00:05:03.785 TCP 10.153.0.1:35395 -> 10.155.0.1:179 14 842 1 2026-08-01 13:01:34.328 00:05:19.579 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 20 1296 1 2026-08-01 13:01:23.129 00:06:00.612 TCP 10.157.0.1:36347 -> 10.155.0.1:179 16 965 1 2026-08-01 13:02:27.735 00:05:01.676 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-08-01 13:06:32.670 00:00:00.021 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:06:32.614 00:00:00.024 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:02:27.714 00:05:01.717 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-08-01 13:06:32.716 00:00:00.021 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:04:21.403 00:05:04.626 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 842 1 2026-08-01 13:04:21.323 00:05:02.357 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 1016 1 2026-08-01 13:07:51.189 00:00:41.020 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 4 272 1 2026-08-01 13:04:21.325 00:05:08.250 TCP 10.155.0.1:179 -> 10.153.0.1:35395 13 945 1 2026-08-01 13:04:31.445 00:05:01.884 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:04:31.465 00:05:01.823 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 13:05:10.052 00:05:10.007 OSPF 10.0.4.2:0 -> 224.0.0.5:0 39 2760 1 2026-08-01 13:07:25.950 00:05:00.088 TCP 10.155.0.1:179 -> 10.158.0.1:37843 12 738 1 2026-08-01 13:11:32.847 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:11:32.678 00:00:00.021 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:11:32.623 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:09:33.560 00:02:02.969 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 13:07:29.553 00:05:03.776 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 13:08:27.716 00:05:01.720 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:08:27.737 00:05:01.680 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 13:08:23.131 00:06:00.612 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 861 1 2026-08-01 13:12:37.879 00:01:09.723 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 460 1 2026-08-01 13:09:33.288 00:05:56.288 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 13:10:31.469 00:05:01.822 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 13:10:31.449 00:05:01.883 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:10:30.061 00:05:10.014 OSPF 10.0.4.2:0 -> 224.0.0.5:0 36 2532 1 2026-08-01 13:10:23.151 00:05:38.265 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 1016 1 2026-08-01 13:10:26.016 00:05:35.479 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 842 1 2026-08-01 13:16:32.811 00:00:00.023 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:16:32.760 00:00:00.023 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:16:32.789 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:14:48.950 00:02:02.971 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 13:13:25.950 00:05:00.090 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 1016 1 2026-08-01 13:13:29.556 00:05:03.774 TCP 10.153.0.1:35395 -> 10.155.0.1:179 14 842 1 2026-08-01 13:14:27.736 00:05:01.681 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-08-01 13:14:27.716 00:05:01.721 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-08-01 13:15:50.074 00:05:10.003 OSPF 10.0.4.2:0 -> 224.0.0.5:0 34 2436 1 2026-08-01 13:17:53.271 00:02:19.354 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 12 784 1 2026-08-01 13:15:23.133 00:06:00.610 TCP 10.157.0.1:36347 -> 10.155.0.1:179 16 965 1 2026-08-01 13:15:33.290 00:05:56.286 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1016 1 2026-08-01 13:16:01.307 00:05:30.164 TCP 10.155.0.1:179 -> 10.154.0.1:35279 13 945 1 2026-08-01 13:16:01.348 00:05:30.104 TCP 10.154.0.1:35279 -> 10.155.0.1:179 13 790 1 2026-08-01 13:16:26.021 00:06:00.010 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 13:16:23.155 00:06:00.532 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 861 1 2026-08-01 13:21:32.876 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:21:32.658 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:21:32.860 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:21:13.982 00:02:02.964 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 13:19:25.951 00:05:00.091 TCP 10.155.0.1:179 -> 10.158.0.1:37843 12 738 1 2026-08-01 13:19:29.556 00:05:03.778 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 13:20:27.718 00:05:01.721 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:20:27.738 00:05:01.682 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 13:21:10.078 00:05:10.023 OSPF 10.0.4.2:0 -> 224.0.0.5:0 35 2384 1 2026-08-01 13:24:18.296 00:02:02.880 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 7 428 1 2026-08-01 13:26:32.950 00:00:00.021 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:26:32.897 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:21:33.330 00:05:58.122 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:26:32.861 00:00:00.024 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:21:33.289 00:05:56.288 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 13:21:33.289 00:05:58.183 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 13:27:22.615 00:00:00.000 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 1 52 1 2026-08-01 13:22:23.134 00:06:00.614 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 861 1 2026-08-01 13:23:23.154 00:06:00.533 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 861 1 2026-08-01 13:23:26.021 00:06:00.011 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 13:25:25.950 00:05:00.093 TCP 10.155.0.1:179 -> 10.158.0.1:37843 12 738 1 2026-08-01 13:25:29.557 00:05:03.776 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 13:26:27.739 00:05:01.681 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 13:26:27.719 00:05:01.722 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:26:30.102 00:05:10.005 OSPF 10.0.4.2:0 -> 224.0.0.5:0 36 2480 1 2026-08-01 13:31:33.579 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:31:33.326 00:00:00.021 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:31:33.357 00:00:00.022 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:27:33.293 00:05:56.285 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 13:27:33.293 00:05:58.182 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 13:27:33.333 00:05:58.122 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:28:24.056 00:05:27.770 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 14 888 1 2026-08-01 13:29:23.135 00:06:00.613 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 861 1 2026-08-01 13:30:23.156 00:06:00.535 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 861 1 2026-08-01 13:31:25.952 00:05:00.094 TCP 10.155.0.1:179 -> 10.158.0.1:37843 12 738 1 2026-08-01 13:30:26.024 00:06:00.010 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 13:31:29.558 00:05:03.778 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 13:31:50.107 00:05:10.008 OSPF 10.0.4.2:0 -> 224.0.0.5:0 41 2896 1 2026-08-01 13:32:27.722 00:05:01.721 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:32:27.742 00:05:01.680 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 13:36:33.239 00:00:00.024 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:36:33.022 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:36:33.063 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:34:53.174 00:01:58.876 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 10 648 1 2026-08-01 13:33:33.294 00:05:56.286 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 13:33:33.294 00:05:58.183 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 13:33:33.334 00:05:58.123 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:37:10.114 00:05:10.007 OSPF 10.0.4.2:0 -> 224.0.0.5:0 36 2520 1 2026-08-01 13:36:23.138 00:06:00.617 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 861 1 2026-08-01 13:37:25.952 00:05:00.094 TCP 10.155.0.1:179 -> 10.158.0.1:37843 12 738 1 2026-08-01 13:41:33.207 00:00:00.021 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:41:33.279 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:37:29.561 00:05:03.777 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 13:41:33.143 00:00:00.037 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:37:53.399 00:05:15.483 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 13 836 1 2026-08-01 13:37:23.159 00:05:58.446 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 1016 1 2026-08-01 13:37:26.026 00:05:55.658 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 842 1 2026-08-01 13:38:27.723 00:05:01.721 TCP 10.151.0.1:37279 -> 10.155.0.1:179 14 842 1 2026-08-01 13:38:27.742 00:05:01.680 TCP 10.155.0.1:179 -> 10.151.0.1:37279 14 1016 1 2026-08-01 13:39:33.336 00:05:58.122 TCP 10.154.0.1:35279 -> 10.155.0.1:179 14 842 1 2026-08-01 13:39:33.297 00:05:56.286 TCP 10.155.0.1:179 -> 10.153.0.1:35395 14 1016 1 2026-08-01 13:39:33.297 00:05:58.181 TCP 10.155.0.1:179 -> 10.154.0.1:35279 14 1016 1 2026-08-01 13:44:10.230 00:02:07.074 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 9 564 1 2026-08-01 13:46:33.303 00:00:00.022 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:46:33.318 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:46:33.281 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:42:30.122 00:05:10.008 OSPF 10.0.4.2:0 -> 224.0.0.5:0 34 2388 1 2026-08-01 13:43:21.530 00:05:02.226 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 842 1 2026-08-01 13:43:21.469 00:05:04.582 TCP 10.155.0.1:179 -> 10.158.0.1:37843 14 1016 1 2026-08-01 13:43:21.510 00:05:08.055 TCP 10.153.0.1:35395 -> 10.155.0.1:179 13 790 1 2026-08-01 13:43:23.159 00:06:00.536 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 861 1 2026-08-01 13:43:26.028 00:06:00.010 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 13:44:27.743 00:05:01.684 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 13:44:27.724 00:05:01.724 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:45:33.297 00:05:56.289 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 13:45:33.297 00:05:58.183 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 13:45:33.337 00:05:58.123 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:47:18.647 00:03:57.659 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 13 836 1 2026-08-01 13:51:33.420 00:00:00.021 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:51:33.550 00:00:00.022 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:51:33.477 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:47:50.128 00:05:10.184 OSPF 10.0.4.2:0 -> 224.0.0.5:0 36 2564 1 2026-08-01 13:49:25.957 00:05:00.093 TCP 10.155.0.1:179 -> 10.158.0.1:37843 12 738 1 2026-08-01 13:48:33.338 00:05:56.230 TCP 10.153.0.1:35395 -> 10.155.0.1:179 12 738 1 2026-08-01 13:49:23.142 00:06:00.625 TCP 10.157.0.1:36347 -> 10.155.0.1:179 14 861 1 2026-08-01 13:50:27.744 00:05:01.688 TCP 10.155.0.1:179 -> 10.151.0.1:37279 12 738 1 2026-08-01 13:50:27.723 00:05:01.729 TCP 10.151.0.1:37279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:50:23.161 00:06:00.546 TCP 10.155.0.1:179 -> 10.157.0.1:36347 14 861 1 2026-08-01 13:50:26.030 00:06:00.010 TCP 10.158.0.1:37843 -> 10.155.0.1:179 14 861 1 2026-08-01 13:51:33.338 00:05:58.122 TCP 10.154.0.1:35279 -> 10.155.0.1:179 12 738 1 2026-08-01 13:51:33.299 00:05:58.182 TCP 10.155.0.1:179 -> 10.154.0.1:35279 12 738 1 2026-08-01 13:51:33.299 00:05:56.290 TCP 10.155.0.1:179 -> 10.153.0.1:35395 12 738 1 2026-08-01 13:56:33.606 00:00:00.031 ICMP 10.107.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:56:33.506 00:00:00.021 ICMP 10.107.0.1:0 -> 8.0.198.2:0.0 3 252 1 2026-08-01 13:56:33.530 00:00:00.023 ICMP 12.102.0.1:0 -> 9.0.198.2:0.0 3 252 1 2026-08-01 13:52:17.655 00:04:38.619 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 15 940 1 2026-08-01 13:53:10.136 00:05:10.004 OSPF 10.0.4.2:0 -> 224.0.0.5:0 34 2304 1 2026-08-01 13:57:57.623 00:00:00.090 TCP 10.104.0.1:3323 -> 10.0.4.2:52974 3 188 1 Summary: total flows: 161, total bytes: 126866, total packets: 1927, avg bps: 267, avg pps: 0, avg bpp: 65 Time window: 2026-08-01 12:55:01 - 2026-08-01 13:58:20 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0034s User: 0.0009s Wall: 0.0026s flows/second: 61261.3 Runtime: 0.0026s