Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 23:58:56.714 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 1 40 1 2025-09-01 23:55:21.499 00:05:01.883 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-01 23:59:57.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59330 1 40 1 2025-09-01 23:55:23.056 00:06:00.307 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:00:47.154 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41932 10 6452 1 2025-09-02 00:01:52.844 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:01:52.921 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:01:47.555 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45174 10 6452 1 2025-09-01 23:58:22.095 00:05:01.307 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:02:47.915 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:41488 9 6412 1 2025-09-01 23:58:58.593 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2360 1 2025-09-01 23:58:23.034 00:06:00.388 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-01 23:59:21.520 00:05:01.843 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:04:48.653 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33976 10 6452 1 2025-09-02 00:01:21.499 00:05:01.883 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:05:49.059 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32840 9 6412 1 2025-09-02 00:06:53.001 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:06:53.002 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:06:49.464 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48254 10 6452 1 2025-09-02 00:02:23.057 00:06:00.306 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:07:49.865 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:47094 10 6452 1 2025-09-02 00:04:22.097 00:05:01.307 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:04:18.608 00:05:10.015 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2516 1 2025-09-02 00:05:21.521 00:05:01.842 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:10:01.037 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54090 1 40 1 2025-09-02 00:05:23.038 00:06:00.389 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-02 00:07:21.502 00:05:01.882 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:11:53.160 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:11:53.270 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:12:51.892 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39226 10 6452 1 2025-09-02 00:09:38.623 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2668 1 2025-09-02 00:09:23.058 00:06:00.309 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:10:22.099 00:05:01.308 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:15:02.978 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56340 1 40 1 2025-09-02 00:11:21.524 00:05:01.843 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:15:53.017 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34698 9 6412 1 2025-09-02 00:16:53.309 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:16:53.254 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:13:21.506 00:05:01.881 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:12:23.062 00:06:00.366 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-02 00:18:54.279 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 10 6452 1 2025-09-02 00:14:58.626 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 2968 1 2025-09-02 00:16:22.098 00:05:01.310 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:21:05.369 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39760 1 40 1 2025-09-02 00:16:23.087 00:06:00.281 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:17:21.527 00:05:01.840 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:21:53.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:21:53.266 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:21:55.413 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59532 10 6452 1 2025-09-02 00:23:06.173 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47540 1 40 1 2025-09-02 00:19:21.508 00:05:01.882 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:19:23.071 00:06:00.359 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-02 00:20:18.630 00:05:00.955 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2864 1 2025-09-02 00:25:56.975 00:00:10.770 TCP 1.101.0.1:3000 -> 23.104.0.1:49402 9 6412 1 2025-09-02 00:22:22.100 00:05:01.311 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:26:53.551 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:26:53.544 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:26:57.782 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:52922 10 6452 1 2025-09-02 00:23:21.529 00:05:01.842 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:28:08.482 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36644 1 40 1 2025-09-02 00:23:23.096 00:06:00.276 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:29:08.885 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58834 1 40 1 2025-09-02 00:25:21.508 00:05:01.883 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:25:28.640 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2648 1 2025-09-02 00:29:58.926 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60852 10 6452 1 2025-09-02 00:30:59.331 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51238 9 6412 1 2025-09-02 00:26:23.077 00:06:00.356 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-02 00:31:53.831 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:31:54.021 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:31:59.747 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52316 9 6412 1 2025-09-02 00:28:22.101 00:05:01.311 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:29:21.529 00:05:01.842 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:34:10.882 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58038 1 40 1 2025-09-02 00:30:48.645 00:05:01.059 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2448 1 2025-09-02 00:31:21.510 00:05:01.882 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:30:23.098 00:06:00.274 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:36:11.700 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 1 40 1 2025-09-02 00:36:53.559 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:36:53.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:37:12.119 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50062 1 40 1 2025-09-02 00:38:02.154 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:53582 11 10325 1 2025-09-02 00:34:22.103 00:05:01.311 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:33:23.079 00:06:00.355 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-02 00:39:12.969 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42788 1 40 1 2025-09-02 00:35:21.531 00:05:01.842 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:35:58.660 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-09-02 00:41:13.746 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 1 40 1 2025-09-02 00:37:21.511 00:05:01.883 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:41:53.659 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:41:53.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:42:03.788 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49632 10 6452 1 2025-09-02 00:37:23.100 00:06:00.275 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:43:04.203 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54742 10 6452 1 2025-09-02 00:44:14.975 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58514 1 40 1 2025-09-02 00:40:22.103 00:05:01.318 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:40:23.079 00:06:00.362 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-02 00:41:21.531 00:05:01.850 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:41:18.672 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-09-02 00:46:15.790 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39534 1 40 1 2025-09-02 00:46:53.841 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:46:53.840 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:47:05.828 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60704 9 6412 1 2025-09-02 00:43:21.511 00:05:01.890 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:49:16.916 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36152 1 40 1 2025-09-02 00:44:23.099 00:06:00.282 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:50:06.959 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35542 9 6412 1 2025-09-02 00:46:22.104 00:05:01.317 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:46:38.682 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2988 1 2025-09-02 00:47:21.532 00:05:01.849 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:51:53.743 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:51:53.833 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:52:07.741 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54426 9 6412 1 2025-09-02 00:47:23.079 00:06:00.364 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-02 00:53:18.459 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37356 1 40 1 2025-09-02 00:49:21.513 00:05:01.892 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-02 00:54:08.503 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54176 9 6412 1 2025-09-02 00:55:19.272 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53102 1 40 1 2025-09-02 00:51:58.693 00:05:00.325 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3012 1 2025-09-02 00:56:19.676 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58548 1 40 1 2025-09-02 00:52:22.106 00:05:01.320 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-02 00:51:23.107 00:06:00.277 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-02 00:56:54.165 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 00:56:54.114 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 00:53:21.534 00:05:01.851 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-02 00:57:20.083 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56000 1 40 1 2025-09-02 00:58:20.497 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59858 1 40 1 Summary: total flows: 126, total bytes: 225090, total packets: 1326, avg bps: 476, avg pps: 0, avg bpp: 169 Time window: 2025-09-01 23:55:21 - 2025-09-02 00:58:23 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0034s User: 0.0017s Wall: 0.0024s flows/second: 52700.7 Runtime: 0.0024s