Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 01:58:44.707 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35016 9 6412 1 2025-09-03 01:55:23.630 00:05:00.447 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 01:55:21.992 00:05:02.045 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:00:55.913 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44600 1 40 1 2025-09-03 01:57:23.651 00:05:00.368 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 01:58:22.592 00:05:01.466 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:02:24.211 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:02:24.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 01:58:40.781 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-09-03 02:02:57.427 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 1 40 1 2025-09-03 01:59:22.016 00:05:02.004 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:03:47.472 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56922 9 6412 1 2025-09-03 02:04:47.875 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33860 10 6452 1 2025-09-03 02:01:23.631 00:05:00.478 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:01:21.995 00:05:02.074 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:05:48.299 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49406 10 6452 1 2025-09-03 02:06:59.070 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 1 40 1 2025-09-03 02:07:24.100 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:03:23.653 00:05:00.389 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:07:24.080 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:04:00.784 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 47 3564 1 2025-09-03 02:04:22.593 00:05:01.492 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:08:49.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58208 10 6452 1 2025-09-03 02:05:22.014 00:05:02.038 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:10:50.338 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46678 9 6412 1 2025-09-03 02:07:23.633 00:05:00.480 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:07:22.020 00:05:02.053 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:11:50.739 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54988 9 6412 1 2025-09-03 02:12:24.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:12:24.385 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:12:51.154 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-09-03 02:09:23.657 00:05:00.399 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:09:20.786 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2440 1 2025-09-03 02:14:01.888 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38208 1 40 1 2025-09-03 02:10:22.596 00:05:01.502 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:15:02.296 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49438 1 40 1 2025-09-03 02:11:22.018 00:05:02.040 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:16:02.708 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 1 40 1 2025-09-03 02:16:52.746 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32950 11 6516 1 2025-09-03 02:17:24.604 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:17:24.116 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:13:23.639 00:05:00.491 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:13:21.999 00:05:02.091 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:14:40.796 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 33 2308 1 2025-09-03 02:19:03.933 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49218 1 40 1 2025-09-03 02:15:23.659 00:05:00.410 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:16:22.600 00:05:01.509 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:20:54.388 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33232 9 6412 1 2025-09-03 02:17:22.018 00:05:02.051 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:21:54.790 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-09-03 02:22:24.478 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:22:24.389 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:22:55.197 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 11 10327 1 2025-09-03 02:19:23.643 00:05:00.490 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:19:22.002 00:05:02.091 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:23:55.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36598 10 6452 1 2025-09-03 02:20:00.802 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2812 1 2025-09-03 02:24:56.095 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34802 9 6412 1 2025-09-03 02:21:23.662 00:05:00.410 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:25:56.524 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55246 10 6452 1 2025-09-03 02:22:22.613 00:05:01.500 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:27:24.710 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:23:22.021 00:05:02.051 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:27:24.583 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:27:57.393 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 12 10367 1 2025-09-03 02:28:57.876 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:41364 9 6412 1 2025-09-03 02:25:22.003 00:05:02.092 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:25:23.647 00:05:00.488 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:25:20.805 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-09-03 02:29:58.256 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-09-03 02:27:23.672 00:05:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:31:59.056 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-09-03 02:32:24.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:32:24.761 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:28:22.614 00:05:01.502 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:32:59.457 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50766 10 6452 1 2025-09-03 02:29:22.022 00:05:02.054 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:33:59.870 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55496 9 6412 1 2025-09-03 02:30:40.812 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 44 3312 1 2025-09-03 02:35:00.296 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58584 9 6412 1 2025-09-03 02:31:23.648 00:05:00.489 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:31:22.003 00:05:02.094 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:36:11.062 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42538 1 40 1 2025-09-03 02:37:11.515 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59114 1 40 1 2025-09-03 02:37:24.807 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:37:24.882 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:33:23.667 00:05:00.409 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:38:01.560 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37310 10 6452 1 2025-09-03 02:34:22.615 00:05:01.513 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:39:01.961 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-09-03 02:35:22.024 00:05:02.063 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:36:00.820 00:05:10.001 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2384 1 2025-09-03 02:40:02.395 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59744 10 6452 1 2025-09-03 02:37:23.648 00:05:00.500 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:37:22.004 00:05:02.104 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:42:13.537 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40434 1 40 1 2025-09-03 02:42:24.886 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:42:24.890 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:43:03.581 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 10 6452 1 2025-09-03 02:39:23.668 00:05:00.423 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:40:22.617 00:05:01.511 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:41:22.027 00:05:02.062 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:41:20.822 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2572 1 2025-09-03 02:46:04.782 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37618 9 6412 1 2025-09-03 02:47:05.152 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53396 9 6412 1 2025-09-03 02:43:23.650 00:05:00.499 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:43:22.006 00:05:02.103 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:47:25.058 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:47:25.072 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:48:15.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59976 1 40 1 2025-09-03 02:49:16.341 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58512 1 40 1 2025-09-03 02:45:23.671 00:05:00.419 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:50:06.377 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53018 9 6412 1 2025-09-03 02:46:22.621 00:05:01.510 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:46:40.828 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2652 1 2025-09-03 02:51:06.797 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51484 9 6412 1 2025-09-03 02:47:22.026 00:05:02.067 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:52:07.204 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52592 9 6412 1 2025-09-03 02:52:25.510 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:52:25.256 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:53:18.049 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47224 1 40 1 2025-09-03 02:49:23.652 00:05:00.507 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-03 02:49:22.007 00:05:02.104 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-03 02:54:08.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 10 6452 1 2025-09-03 02:51:23.672 00:05:00.421 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-03 02:52:00.841 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2624 1 2025-09-03 02:56:08.883 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:38680 10 6452 1 2025-09-03 02:52:22.621 00:05:01.512 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-03 02:53:22.028 00:05:02.065 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-03 02:57:25.251 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:57:25.252 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:58:09.662 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46032 10 6452 1 Summary: total flows: 132, total bytes: 299774, total packets: 1430, avg bps: 634, avg pps: 0, avg bpp: 209 Time window: 2025-09-03 01:55:21 - 2025-09-03 02:58:24 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0027s User: 0.0018s Wall: 0.0019s flows/second: 71318.8 Runtime: 0.0019s