Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 04:59:10.935 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35058 9 6398 1 2025-07-20 05:00:21.659 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 1 40 1 2025-07-20 05:00:47.727 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:00:47.798 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:01:11.709 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44210 10 6438 1 2025-07-20 04:57:58.864 00:05:01.154 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 04:58:10.610 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2788 1 2025-07-20 05:02:12.129 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41332 9 6398 1 2025-07-20 04:58:59.800 00:05:00.219 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 04:58:59.505 00:05:00.554 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 04:58:59.781 00:05:00.298 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:03:12.530 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 9 6398 1 2025-07-20 04:59:58.846 00:05:01.224 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:04:12.935 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49214 9 6398 1 2025-07-20 05:05:13.357 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39780 9 6398 1 2025-07-20 05:05:47.912 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:05:47.902 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:06:24.134 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33376 1 40 1 2025-07-20 05:07:14.171 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54764 9 6398 1 2025-07-20 05:03:30.615 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2736 1 2025-07-20 05:03:58.866 00:05:01.187 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:08:14.571 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47096 10 6438 1 2025-07-20 05:04:59.505 00:05:00.588 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:04:59.781 00:05:00.332 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:04:59.800 00:05:00.253 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:09:14.975 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35932 9 6398 1 2025-07-20 05:05:58.845 00:05:01.227 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:10:25.749 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48034 1 40 1 2025-07-20 05:10:47.792 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:10:47.795 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:12:16.161 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42578 10 6438 1 2025-07-20 05:08:50.622 00:05:10.053 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 2976 1 2025-07-20 05:13:16.579 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43998 10 6438 1 2025-07-20 05:09:58.865 00:05:01.188 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:14:16.945 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44252 10 6438 1 2025-07-20 05:10:59.805 00:05:00.248 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:10:59.785 00:05:00.329 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:10:59.506 00:05:00.588 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:15:27.727 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44962 1 40 1 2025-07-20 05:15:48.222 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:15:48.136 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:11:58.846 00:05:01.229 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:17:18.162 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49626 9 6398 1 2025-07-20 05:14:10.628 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 33 2240 1 2025-07-20 05:18:28.904 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 1 40 1 2025-07-20 05:19:18.938 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:40776 9 6398 1 2025-07-20 05:15:58.868 00:05:01.187 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:20:48.132 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:20:48.134 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:16:59.806 00:05:00.252 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:16:59.509 00:05:00.590 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:16:59.787 00:05:00.332 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:17:58.847 00:05:01.231 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:22:30.534 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51296 1 40 1 2025-07-20 05:19:24.634 00:05:06.016 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2708 1 2025-07-20 05:23:20.581 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40990 9 6398 1 2025-07-20 05:24:31.367 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47522 1 40 1 2025-07-20 05:25:21.404 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55884 9 6398 1 2025-07-20 05:25:48.114 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:25:48.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:21:58.867 00:05:01.191 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:22:59.812 00:05:00.246 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:22:59.509 00:05:00.589 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:22:59.792 00:05:00.326 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:27:22.171 00:00:10.819 TCP 1.101.0.1:3000 -> 23.104.0.1:54400 10 6438 1 2025-07-20 05:23:58.847 00:05:01.231 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:24:40.648 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2952 1 2025-07-20 05:29:23.400 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57008 10 6438 1 2025-07-20 05:30:48.442 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:30:48.358 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:27:58.869 00:05:01.190 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:32:24.571 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52190 10 6438 1 2025-07-20 05:28:59.514 00:05:00.585 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:28:59.792 00:05:00.327 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:28:59.811 00:05:00.247 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:33:24.930 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40502 10 6438 1 2025-07-20 05:29:58.849 00:05:01.229 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:30:00.655 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2488 1 2025-07-20 05:34:35.707 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58514 1 40 1 2025-07-20 05:35:25.747 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55458 9 6398 1 2025-07-20 05:35:48.424 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:35:48.595 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:36:26.151 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38666 12 6542 1 2025-07-20 05:37:26.563 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46236 9 6398 1 2025-07-20 05:33:58.869 00:05:01.189 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:34:59.812 00:05:00.248 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:34:59.517 00:05:00.585 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:34:59.794 00:05:00.328 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:35:20.666 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3052 1 2025-07-20 05:39:27.459 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40554 9 6398 1 2025-07-20 05:35:58.852 00:05:01.228 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:40:48.612 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:40:48.605 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:41:28.265 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42258 10 6438 1 2025-07-20 05:42:28.668 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59018 10 6438 1 2025-07-20 05:43:39.438 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37030 1 40 1 2025-07-20 05:39:58.874 00:05:01.188 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:44:29.473 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6438 1 2025-07-20 05:40:40.673 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2528 1 2025-07-20 05:40:59.517 00:05:00.585 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:40:59.794 00:05:00.328 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:40:59.815 00:05:00.248 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:45:48.678 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:45:48.679 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:41:58.854 00:05:01.228 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:46:30.296 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56660 10 6438 1 2025-07-20 05:47:30.705 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:51020 11 6490 1 2025-07-20 05:48:41.543 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47602 1 40 1 2025-07-20 05:45:58.875 00:05:01.188 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:46:00.685 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2632 1 2025-07-20 05:50:31.988 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59356 9 6398 1 2025-07-20 05:50:48.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:50:48.716 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:46:59.519 00:05:00.585 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:46:59.796 00:05:00.328 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:46:59.816 00:05:00.248 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:47:58.857 00:05:01.227 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:52:32.763 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50508 9 6398 1 2025-07-20 05:53:33.168 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32852 10 6438 1 2025-07-20 05:54:43.936 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58532 1 40 1 2025-07-20 05:51:20.693 00:05:06.441 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2676 1 2025-07-20 05:55:48.804 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 05:55:49.018 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 05:51:58.878 00:05:01.187 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 05:56:44.717 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33798 1 40 1 2025-07-20 05:52:59.518 00:05:00.587 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 05:52:59.797 00:05:00.340 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-07-20 05:52:59.817 00:05:00.249 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-07-20 05:53:58.859 00:05:01.227 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 05:58:35.129 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33852 10 6438 1 Summary: total flows: 130, total bytes: 285174, total packets: 1418, avg bps: 623, avg pps: 0, avg bpp: 201 Time window: 2025-07-20 04:57:58 - 2025-07-20 05:59:00 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0000s User: 0.0036s Wall: 0.0020s flows/second: 64451.5 Runtime: 0.0020s