Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 15:55:01.415 00:05:49.955 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 15:56:51.369 00:05:10.048 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:01:12.571 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:01:12.570 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 15:56:54.719 00:05:56.611 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 15:56:54.740 00:05:56.571 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 15:57:51.899 00:05:00.275 OSPF 4.0.12.2:0 -> 224.0.0.5:0 37 2760 1 2025-11-01 15:57:51.308 00:05:02.717 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 15:57:51.308 00:05:03.433 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 15:57:51.328 00:05:03.393 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 15:58:11.898 00:05:10.012 OSPF 4.0.12.2:0 -> 224.0.0.5:0 38 2828 1 2025-11-01 15:58:51.309 00:05:02.714 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 15:59:50.778 00:05:00.533 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 15:59:01.436 00:05:49.875 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 15:59:01.436 00:05:49.875 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:00:50.778 00:05:00.533 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:01:01.416 00:05:49.955 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:06:12.547 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:06:12.545 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:02:51.371 00:05:10.048 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:03:01.907 00:05:10.011 OSPF 4.0.12.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-01 16:03:31.911 00:05:10.007 OSPF 4.0.12.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-01 16:02:54.742 00:05:56.570 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:02:54.721 00:05:56.611 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:03:51.311 00:05:02.715 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:03:51.311 00:05:03.436 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:03:51.332 00:05:03.396 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:04:51.312 00:05:02.714 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:05:01.437 00:05:49.875 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:05:50.780 00:05:00.533 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:05:01.437 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:06:50.779 00:05:00.534 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:11:12.757 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:11:12.758 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:07:01.418 00:05:49.955 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:08:21.918 00:05:10.009 OSPF 4.0.12.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-01 16:08:51.372 00:05:10.048 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:08:51.919 00:05:10.010 OSPF 4.0.12.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-01 16:08:54.726 00:05:56.606 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:08:54.747 00:05:56.566 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:09:51.332 00:05:03.395 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:09:51.312 00:05:02.715 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:09:51.312 00:05:03.435 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:10:51.312 00:05:02.715 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:11:01.440 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:11:50.783 00:05:00.533 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:11:01.438 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:16:13.439 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:16:13.438 00:00:00.023 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:12:50.781 00:05:00.534 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:13:01.419 00:05:49.955 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:13:41.928 00:05:10.006 OSPF 4.0.12.2:0 -> 224.0.0.5:0 34 2436 1 2025-11-01 16:14:11.928 00:05:10.005 OSPF 4.0.12.2:0 -> 224.0.0.5:0 34 2436 1 2025-11-01 16:14:51.374 00:05:10.048 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:14:54.726 00:05:56.609 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:14:54.747 00:05:56.568 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:15:51.312 00:05:02.715 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:15:51.312 00:05:03.435 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:15:51.334 00:05:03.395 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:16:51.315 00:05:02.713 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:21:12.948 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:21:12.948 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:17:01.440 00:05:49.875 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:17:50.783 00:05:00.532 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:17:01.441 00:05:49.874 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:18:50.782 00:05:00.532 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:19:01.933 00:05:10.006 OSPF 4.0.12.2:0 -> 224.0.0.5:0 38 2576 1 2025-11-01 16:19:31.934 00:05:10.005 OSPF 4.0.12.2:0 -> 224.0.0.5:0 39 2640 1 2025-11-01 16:19:01.422 00:05:49.955 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:20:51.375 00:05:10.047 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:20:54.748 00:05:56.568 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:20:54.729 00:05:56.608 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:21:51.315 00:05:03.441 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:21:51.315 00:05:02.717 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:21:51.336 00:05:03.401 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:26:13.095 00:00:00.024 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:26:13.095 00:00:00.024 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:22:51.314 00:05:02.715 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:23:01.442 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:23:50.787 00:05:00.531 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:23:01.442 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:24:12.435 00:05:09.511 OSPF 4.0.12.2:0 -> 224.0.0.5:0 36 2616 1 2025-11-01 16:24:50.787 00:05:00.535 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:24:51.939 00:05:10.009 OSPF 4.0.12.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-01 16:25:01.422 00:05:49.959 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:26:51.376 00:05:10.047 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:31:13.012 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:31:13.009 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:26:54.736 00:05:56.605 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:26:54.756 00:05:56.566 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:27:51.317 00:05:02.715 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:27:51.317 00:05:03.440 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:27:51.338 00:05:03.400 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:28:51.318 00:05:02.714 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:29:31.948 00:05:10.004 OSPF 4.0.12.2:0 -> 224.0.0.5:0 38 2720 1 2025-11-01 16:29:50.795 00:05:00.526 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:29:01.442 00:05:49.879 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:29:01.443 00:05:49.878 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:30:11.948 00:05:10.004 OSPF 4.0.12.2:0 -> 224.0.0.5:0 38 2720 1 2025-11-01 16:30:50.796 00:05:00.526 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:31:01.423 00:05:49.959 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:36:13.507 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:36:13.507 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:32:51.382 00:05:10.045 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:32:54.737 00:05:56.605 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:32:54.757 00:05:56.565 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:33:51.341 00:05:03.396 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:33:51.322 00:05:02.710 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:33:51.322 00:05:03.436 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:34:51.322 00:05:02.710 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:34:51.951 00:05:10.004 OSPF 4.0.12.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-01 16:35:31.952 00:05:00.678 OSPF 4.0.12.2:0 -> 224.0.0.5:0 35 2396 1 2025-11-01 16:35:50.796 00:05:00.526 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:35:01.446 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:35:01.447 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:36:50.797 00:05:00.526 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:41:12.943 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:41:12.944 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:37:01.428 00:05:49.957 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:38:51.383 00:05:10.046 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:38:54.738 00:05:56.605 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:38:54.758 00:05:56.565 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:39:51.342 00:05:03.397 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:39:51.322 00:05:02.711 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:39:51.322 00:05:03.436 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:40:11.961 00:05:10.005 OSPF 4.0.12.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-01 16:40:41.961 00:05:10.005 OSPF 4.0.12.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-01 16:40:51.323 00:05:02.710 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:41:50.805 00:05:00.519 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:41:01.448 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:41:01.448 00:05:49.876 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:46:13.436 00:00:00.022 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:46:13.435 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:42:50.802 00:05:00.522 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:43:01.428 00:05:49.956 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:44:51.384 00:05:10.047 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:45:31.965 00:05:10.004 OSPF 4.0.12.2:0 -> 224.0.0.5:0 37 2644 1 2025-11-01 16:44:54.759 00:05:56.565 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:44:54.739 00:05:56.606 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:45:51.324 00:05:02.711 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:45:51.324 00:05:03.435 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:45:51.342 00:05:03.396 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:46:01.966 00:05:10.003 OSPF 4.0.12.2:0 -> 224.0.0.5:0 38 2708 1 2025-11-01 16:46:51.323 00:05:02.711 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:51:13.341 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:51:13.341 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:47:01.454 00:05:49.873 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:47:50.801 00:05:00.524 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:47:01.452 00:05:49.873 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:48:50.802 00:05:00.523 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:49:01.431 00:05:49.956 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:50:42.788 00:05:09.183 OSPF 4.0.12.2:0 -> 224.0.0.5:0 36 2524 1 2025-11-01 16:50:51.384 00:05:10.047 TCP 4.158.0.1:40299 -> 4.157.0.1:179 12 738 1 2025-11-01 16:51:21.970 00:05:10.002 OSPF 4.0.12.2:0 -> 224.0.0.5:0 37 2732 1 2025-11-01 16:50:54.759 00:05:56.567 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:50:54.739 00:05:56.608 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:51:51.325 00:05:02.711 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:51:51.325 00:05:03.436 TCP 4.157.0.1:179 -> 4.153.0.1:38071 12 738 1 2025-11-01 16:51:51.344 00:05:03.396 TCP 4.153.0.1:38071 -> 4.157.0.1:179 12 738 1 2025-11-01 16:56:13.507 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:56:13.508 00:00:00.021 ICMP 4.0.198.2:0 -> 4.107.0.1:8.0 3 252 1 2025-11-01 16:52:51.325 00:05:02.710 TCP 4.157.0.1:37347 -> 4.156.0.1:179 12 738 1 2025-11-01 16:53:50.803 00:05:00.523 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 2025-11-01 16:53:01.456 00:05:49.870 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:53:01.455 00:05:49.871 TCP 4.157.0.1:179 -> 4.158.0.1:40299 12 738 1 2025-11-01 16:54:50.804 00:05:00.523 TCP 4.157.0.1:33999 -> 4.154.0.1:179 12 738 1 Summary: total flows: 166, total bytes: 150540, total packets: 2305, avg bps: 309, avg pps: 0, avg bpp: 65 Time window: 2025-11-01 15:55:01 - 2025-11-01 16:59:51 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0017s User: 0.0043s Wall: 0.0029s flows/second: 57857.3 Runtime: 0.0029s