Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 03:58:50.295 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36572 1 40 1 2025-08-04 03:54:07.155 00:06:00.276 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 03:59:40.336 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37568 10 6452 1 2025-08-04 04:00:40.742 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:47036 9 6412 1 2025-08-04 03:57:06.506 00:05:00.866 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:02:51.913 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47570 1 40 1 2025-08-04 04:02:59.964 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:02:59.912 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 03:58:07.177 00:06:00.194 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-04 03:59:06.796 00:05:00.616 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 03:59:15.062 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2892 1 2025-08-04 04:03:52.335 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51174 1 40 1 2025-08-04 04:00:06.486 00:05:00.906 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:04:42.376 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47298 10 6452 1 2025-08-04 04:05:42.776 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:39672 10 6452 1 2025-08-04 04:01:07.160 00:06:00.272 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 04:06:53.564 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46978 1 40 1 2025-08-04 04:03:06.508 00:05:00.890 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:07:59.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:08:00.127 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36820 1 40 1 2025-08-04 04:07:59.981 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:04:35.076 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2672 1 2025-08-04 04:08:50.176 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33866 9 6412 1 2025-08-04 04:05:06.799 00:05:00.613 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:09:50.585 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60730 10 6452 1 2025-08-04 04:05:07.182 00:06:00.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-04 04:06:06.491 00:05:00.903 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:11:01.372 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42316 1 40 1 2025-08-04 04:13:00.349 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:13:02.195 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41060 1 40 1 2025-08-04 04:13:00.407 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:09:06.508 00:05:00.866 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:08:07.162 00:06:00.273 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 04:09:55.082 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2900 1 2025-08-04 04:14:52.652 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42634 9 6412 1 2025-08-04 04:11:06.801 00:05:00.614 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:15:53.051 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53884 9 6412 1 2025-08-04 04:12:06.489 00:05:00.906 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:12:07.181 00:06:00.193 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-04 04:18:04.245 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47292 1 40 1 2025-08-04 04:18:00.228 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:18:00.175 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:15:06.509 00:05:00.866 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:15:15.095 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2804 1 2025-08-04 04:20:05.100 00:00:00.011 TCP 1.101.0.1:3000 -> 23.104.0.1:58418 2 80 1 2025-08-04 04:15:07.163 00:06:00.272 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 04:17:06.802 00:05:00.615 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:21:55.543 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40174 9 6412 1 2025-08-04 04:18:06.493 00:05:00.903 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:23:00.454 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:23:00.320 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:23:06.300 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49528 1 40 1 2025-08-04 04:19:07.186 00:06:00.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-04 04:23:56.338 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33482 10 6452 1 2025-08-04 04:20:35.101 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-08-04 04:24:56.719 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39702 10 6452 1 2025-08-04 04:21:06.516 00:05:00.862 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:25:57.134 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52950 9 6412 1 2025-08-04 04:27:07.900 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37160 1 40 1 2025-08-04 04:23:06.816 00:05:00.601 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:22:07.166 00:06:00.271 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 04:28:00.056 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:28:00.057 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:27:57.941 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59408 10 6452 1 2025-08-04 04:24:06.496 00:05:00.901 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:28:58.363 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 9 6412 1 2025-08-04 04:25:55.105 00:05:13.788 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2828 1 2025-08-04 04:29:58.725 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:41572 10 6452 1 2025-08-04 04:26:07.186 00:06:00.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-04 04:30:59.118 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 9 6412 1 2025-08-04 04:27:06.518 00:05:00.859 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:32:09.894 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60190 1 40 1 2025-08-04 04:33:00.487 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:33:00.441 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:29:06.818 00:05:00.602 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:33:10.263 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32780 1 40 1 2025-08-04 04:29:07.167 00:06:00.271 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 04:30:06.500 00:05:00.898 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:31:09.655 00:05:05.464 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2500 1 2025-08-04 04:36:01.088 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42998 9 6412 1 2025-08-04 04:33:06.521 00:05:00.858 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:37:01.502 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41676 9 6412 1 2025-08-04 04:38:00.679 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:38:00.357 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:33:07.189 00:06:00.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-04 04:38:01.906 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:45614 9 6412 1 2025-08-04 04:35:06.819 00:05:00.601 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:39:02.298 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57776 10 6452 1 2025-08-04 04:36:06.504 00:05:00.896 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:40:02.716 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50678 10 6452 1 2025-08-04 04:36:19.758 00:05:05.382 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2628 1 2025-08-04 04:36:07.169 00:06:00.271 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 04:41:03.131 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48908 9 6412 1 2025-08-04 04:42:03.531 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49044 9 6412 1 2025-08-04 04:43:00.545 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:43:00.547 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:39:06.526 00:05:00.856 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:43:03.930 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60848 9 6412 1 2025-08-04 04:44:04.301 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41532 9 6412 1 2025-08-04 04:40:07.189 00:06:00.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-04 04:41:06.821 00:05:00.600 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:41:35.140 00:05:03.804 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2916 1 2025-08-04 04:42:06.506 00:05:00.894 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:46:05.041 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45810 10 6452 1 2025-08-04 04:48:00.778 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:48:00.825 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:43:07.170 00:06:00.271 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 04:48:05.844 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51540 10 6452 1 2025-08-04 04:45:06.525 00:05:00.859 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:49:16.611 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54722 1 40 1 2025-08-04 04:50:06.647 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37252 10 6452 1 2025-08-04 04:46:39.907 00:05:05.237 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2460 1 2025-08-04 04:47:06.821 00:05:00.600 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:51:07.056 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59626 9 6412 1 2025-08-04 04:47:07.190 00:06:00.192 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-04 04:48:06.505 00:05:00.896 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:52:07.460 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38822 10 6452 1 2025-08-04 04:53:00.796 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:53:00.861 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:53:07.863 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:35856 9 6412 1 2025-08-04 04:54:18.670 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36684 1 40 1 2025-08-04 04:51:06.525 00:05:00.857 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-04 04:50:07.173 00:06:00.271 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-04 04:51:55.145 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-08-04 04:56:09.118 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40810 9 6412 1 2025-08-04 04:53:06.824 00:05:00.599 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-04 04:57:09.514 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39076 10 6452 1 2025-08-04 04:58:01.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 04:58:00.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 04:54:06.507 00:05:00.896 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-04 04:58:09.920 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36622 9 6412 1 Summary: total flows: 131, total bytes: 291473, total packets: 1419, avg bps: 597, avg pps: 0, avg bpp: 205 Time window: 2025-08-04 03:54:07 - 2025-08-04 04:59:07 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0035s User: 0.0012s Wall: 0.0020s flows/second: 64248.6 Runtime: 0.0021s