Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 19:59:12.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36948 9 6398 1 2025-07-20 19:55:11.972 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2832 1 2025-07-20 20:00:12.510 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42796 10 6438 1 2025-07-20 19:56:00.104 00:06:00.336 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:01:05.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:01:05.962 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:01:12.915 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56890 9 6398 1 2025-07-20 19:57:59.149 00:05:01.231 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:02:13.329 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50654 9 6398 1 2025-07-20 19:58:59.852 00:05:00.568 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 19:58:00.127 00:06:00.252 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-07-20 20:03:24.088 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51486 1 40 1 2025-07-20 19:59:59.129 00:05:01.278 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:04:14.140 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55902 10 6438 1 2025-07-20 20:00:31.979 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2424 1 2025-07-20 20:05:14.536 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56848 9 6398 1 2025-07-20 20:06:05.728 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:06:05.884 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:06:25.306 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57732 1 40 1 2025-07-20 20:03:59.150 00:05:01.231 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:03:00.108 00:06:00.332 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:08:15.713 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 12 10352 1 2025-07-20 20:04:59.854 00:05:00.567 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:05:51.992 00:05:00.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2788 1 2025-07-20 20:05:00.131 00:06:00.250 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-07-20 20:05:59.131 00:05:01.270 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:10:16.613 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42478 9 6398 1 2025-07-20 20:11:06.136 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:11:06.131 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:11:17.017 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53176 9 6398 1 2025-07-20 20:12:27.745 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33562 1 40 1 2025-07-20 20:13:17.790 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 9 6398 1 2025-07-20 20:09:59.151 00:05:01.236 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:14:18.161 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58752 9 6398 1 2025-07-20 20:10:59.854 00:05:00.576 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:10:00.111 00:06:00.335 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:11:02.002 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2644 1 2025-07-20 20:15:28.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47616 1 40 1 2025-07-20 20:11:59.131 00:05:01.275 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:16:05.987 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:16:06.112 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:16:18.963 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43332 9 6398 1 2025-07-20 20:12:00.133 00:06:00.253 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-07-20 20:17:19.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57078 9 6398 1 2025-07-20 20:18:19.780 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41374 9 6398 1 2025-07-20 20:19:20.201 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54672 10 6438 1 2025-07-20 20:15:59.153 00:05:01.235 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:16:22.008 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2488 1 2025-07-20 20:20:20.597 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:32882 10 6438 1 2025-07-20 20:16:59.855 00:05:00.573 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:21:06.333 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:21:06.264 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:21:20.960 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 9 6398 1 2025-07-20 20:17:00.115 00:06:00.336 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:17:59.135 00:05:01.275 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:22:21.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39930 10 6438 1 2025-07-20 20:23:21.771 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36440 9 6398 1 2025-07-20 20:19:00.139 00:06:00.251 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-07-20 20:24:22.131 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51434 10 6438 1 2025-07-20 20:25:22.534 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34032 10 6438 1 2025-07-20 20:21:42.015 00:05:10.037 OSPF 23.0.7.1:0 -> 224.0.0.5:0 45 3280 1 2025-07-20 20:21:59.155 00:05:01.235 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:26:06.197 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:26:06.121 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:26:22.934 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 10 6438 1 2025-07-20 20:22:59.861 00:05:00.571 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:27:23.334 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 9 6398 1 2025-07-20 20:23:59.136 00:05:01.275 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:28:34.103 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52098 1 40 1 2025-07-20 20:24:00.114 00:06:00.336 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:29:24.138 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48370 9 6398 1 2025-07-20 20:30:24.536 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38766 10 6438 1 2025-07-20 20:26:00.135 00:06:00.256 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-07-20 20:31:06.506 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:31:06.458 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:27:02.052 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-07-20 20:31:24.940 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41410 9 6398 1 2025-07-20 20:27:59.158 00:05:01.235 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:32:35.672 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59960 1 40 1 2025-07-20 20:28:59.860 00:05:00.572 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:29:59.137 00:05:01.277 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:34:36.499 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45826 1 40 1 2025-07-20 20:31:00.118 00:06:00.337 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:36:06.423 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:36:06.561 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:32:22.054 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2712 1 2025-07-20 20:36:26.950 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 9 6398 1 2025-07-20 20:33:00.139 00:06:00.258 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-07-20 20:33:59.161 00:05:01.236 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:38:38.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40004 1 40 1 2025-07-20 20:34:59.863 00:05:00.572 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:39:28.160 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43244 11 6502 1 2025-07-20 20:35:59.140 00:05:01.276 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:40:28.574 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38980 10 6438 1 2025-07-20 20:41:06.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:41:06.726 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:41:39.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34612 1 40 1 2025-07-20 20:37:42.060 00:05:10.015 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2520 1 2025-07-20 20:42:29.379 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34320 9 6398 1 2025-07-20 20:38:00.119 00:06:00.338 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:43:29.798 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50366 9 6398 1 2025-07-20 20:39:59.160 00:05:01.236 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:44:30.212 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39054 9 6398 1 2025-07-20 20:40:59.877 00:05:00.559 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:40:00.139 00:06:00.258 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-07-20 20:41:59.140 00:05:01.276 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:46:06.765 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:46:06.762 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:46:31.036 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34822 9 6398 1 2025-07-20 20:43:02.078 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2724 1 2025-07-20 20:48:31.852 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42928 10 6438 1 2025-07-20 20:49:32.262 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44234 9 6398 1 2025-07-20 20:45:00.119 00:06:00.338 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:45:59.161 00:05:01.236 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:50:42.993 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41584 1 40 1 2025-07-20 20:46:59.879 00:05:00.558 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:51:06.889 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:51:06.887 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:51:33.030 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 9 6398 1 2025-07-20 20:47:00.140 00:06:00.258 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-07-20 20:47:59.141 00:05:01.276 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:48:22.089 00:05:06.221 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2972 1 2025-07-20 20:52:33.392 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6438 1 2025-07-20 20:54:34.214 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53828 10 6438 1 2025-07-20 20:55:44.979 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59186 1 40 1 2025-07-20 20:51:59.162 00:05:01.235 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-07-20 20:56:06.788 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 20:56:06.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 20:56:35.025 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 9 6398 1 2025-07-20 20:52:59.881 00:05:00.560 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-07-20 20:52:00.121 00:06:00.341 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-07-20 20:53:32.098 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2608 1 2025-07-20 20:57:45.800 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32980 1 40 1 2025-07-20 20:53:59.143 00:05:01.278 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-07-20 20:58:35.839 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6438 1 Summary: total flows: 135, total bytes: 336155, total packets: 1515, avg bps: 702, avg pps: 0, avg bpp: 221 Time window: 2025-07-20 19:55:11 - 2025-07-20 20:59:00 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0031s User: 0.0010s Wall: 0.0022s flows/second: 60243.8 Runtime: 0.0023s