| Source Address | Destination Address | Server Port | rate(llbytes) |
|---|
| 24 Apr, 00:05 - 24 Apr, 01:05 |
|---|
| 10.0.0.238 | 10.0.0.70 | TCP:548 (afpovertcp) | 2,735,120.000 |
| 10.1.3.2 | 10.0.0.70 | UDP:15196 | 1,702,480.000 |
| 10.0.0.70 | 10.1.3.2 | UDP:15196 | 1,484,352.000 |
| 10.0.0.70 | 10.0.0.238 | TCP:548 (afpovertcp) | 558,408.000 |
| 10.0.0.114 | 10.0.0.236 | TCP:2049 (nfs) | 72,720.000 |
| 10.0.0.239 | 10.0.0.160 | UDP:161 (snmp) | 51,688.000 |
| 10.0.0.160 | 10.0.0.70 | TCP:80 (www-http) | 30,816.000 |
| 10.1.3.2 | 10.0.0.70 | RTP:10 (L16) | 29,928.000 |
| 10.0.0.254 | 10.0.0.114 | UDP:161 (snmp) | 19,944.000 |
| 10.1.3.2 | 10.0.0.70 | RTP:14 (MPA) | 16,472.000 |
| 10.0.0.121 | 10.0.0.160 | UDP:6343 (sflow) | 9,320.000 |
| 10.0.0.114 | 10.0.0.160 | UDP:6343 (sflow) | 4,544.000 |
| 10.0.0.106 | 10.0.0.152 | ICMP:8 (Echo) | 2,488.000 |
| 10.0.0.70 | 173.194.66.108 | TCP:993 (imaps) | 2,168.000 |
| 10.1.3.2 | 10.0.0.70 | RTP:18 (G729) | 2,136.000 |
| 10.0.0.70 | 173.194.11.203 | TCP:80 (www-http) | 2,040.000 |
| 10.1.3.2 | 10.0.0.70 | RTP:12 (QCELP) | 1,992.000 |
| 10.0.0.114 | 10.0.0.240 | UDP:161 (snmp) | 1,688.000 |
| 10.0.0.70 | 173.194.66.109 | TCP:993 (imaps) | 1,600.000 |
| 10.0.0.72 | 10.0.0.255 | UDP:62936 | 1,536.000 |
| 10.0.0.70 | 10.1.3.2 | RTP:13 (CN) | 1,496.000 |
| 10.0.0.72 | 10.0.0.255 | UDP:53597 | 1,328.000 |
| 10.0.0.114 | 192.168.49.254 | UDP:161 (snmp) | 1,304.000 |
| 10.0.0.70 | 10.1.3.2 | RTP:3 (GSM) | 1,224.000 |
| 10.0.0.72 | 10.0.0.255 | UDP:61038 | 1,184.000 |
| 10.0.0.72 | 10.0.0.255 | UDP:57354 | 1,160.000 |
| 10.0.0.72 | 10.0.0.255 | UDP:62807 | 1,128.000 |
| 10.0.0.70 | 10.1.3.2 | RTP:15 (G728) | 992.000 |
| 10.0.0.70 | 24.99.28.29 | TCP:80 (www-http) | 920.000 |
| 10.0.0.114 | 10.111.111.111 | UDP:161 (snmp) | 832.000 |
| 10.0.0.72 | 10.0.0.255 | UDP:52925 | 600.000 |