Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 19:55:22.812 00:05:02.088 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 19:59:15.328 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36594 10 6452 1 2025-09-04 19:58:24.462 00:02:00.478 TCP 23.156.0.1:36051 -> 23.155.0.1:179 6 369 1 2025-09-04 20:00:26.078 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 1 40 1 2025-09-04 19:59:24.483 00:02:00.401 TCP 23.155.0.1:179 -> 23.156.0.1:36051 6 369 1 2025-09-04 20:01:16.130 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49396 10 6452 1 2025-09-04 19:58:04.202 00:05:10.093 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2936 1 2025-09-04 20:01:24.464 00:01:00.481 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 19:58:23.429 00:05:01.494 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:03:14.762 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:03:14.762 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:02:24.483 00:01:00.401 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:03:16.960 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6452 1 2025-09-04 19:59:22.834 00:05:02.050 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:04:17.368 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41984 10 6452 1 2025-09-04 20:03:24.463 00:02:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 6 369 1 2025-09-04 20:01:22.813 00:05:02.092 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:05:17.773 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50646 10 6452 1 2025-09-04 20:04:24.484 00:02:00.401 TCP 23.155.0.1:179 -> 23.156.0.1:36051 6 369 1 2025-09-04 20:06:18.172 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57468 9 6412 1 2025-09-04 20:06:24.465 00:01:00.480 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:03:24.215 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2788 1 2025-09-04 20:08:14.817 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:08:14.906 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:07:24.486 00:01:00.399 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:04:23.431 00:05:01.495 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:05:22.834 00:05:02.051 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:09:19.467 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46092 9 6412 1 2025-09-04 20:08:24.467 00:02:00.479 TCP 23.156.0.1:36051 -> 23.155.0.1:179 6 369 1 2025-09-04 20:09:24.487 00:02:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 6 369 1 2025-09-04 20:07:22.815 00:05:02.092 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:11:24.466 00:01:00.480 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:08:44.221 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2440 1 2025-09-04 20:13:14.948 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:13:14.947 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:12:24.487 00:01:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:13:21.069 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52546 10 6452 1 2025-09-04 20:10:23.430 00:05:01.498 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:14:21.470 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33316 10 6452 1 2025-09-04 20:13:24.468 00:02:00.480 TCP 23.156.0.1:36051 -> 23.155.0.1:179 6 369 1 2025-09-04 20:14:24.487 00:01:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:11:22.836 00:05:02.051 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:15:32.251 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55642 1 40 1 2025-09-04 20:16:24.490 00:00:00.399 TCP 23.155.0.1:179 -> 23.156.0.1:36051 2 123 1 2025-09-04 20:16:22.286 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48924 10 6452 1 2025-09-04 20:16:24.470 00:01:00.480 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:13:22.818 00:05:02.092 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:17:22.687 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 9 6412 1 2025-09-04 20:14:04.226 00:05:10.001 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2884 1 2025-09-04 20:18:15.180 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:18:15.062 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:17:24.488 00:01:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:18:23.119 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 12 10365 1 2025-09-04 20:18:24.469 00:01:00.480 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:19:33.927 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 1 40 1 2025-09-04 20:19:24.489 00:01:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:20:24.470 00:00:00.480 TCP 23.156.0.1:36051 -> 23.155.0.1:179 2 123 1 2025-09-04 20:16:23.436 00:05:01.494 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:20:23.960 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:53168 10 6452 1 2025-09-04 20:21:24.489 00:00:00.399 TCP 23.155.0.1:179 -> 23.156.0.1:36051 2 123 1 2025-09-04 20:17:22.838 00:05:02.054 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:21:34.706 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 1 40 1 2025-09-04 20:21:24.469 00:01:00.483 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:22:24.748 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58202 9 6412 1 2025-09-04 20:23:15.355 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:23:15.118 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:22:24.490 00:01:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:19:22.818 00:05:02.093 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:19:24.227 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-09-04 20:23:25.168 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:45080 12 10365 1 2025-09-04 20:23:24.470 00:01:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:24:35.974 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40000 1 40 1 2025-09-04 20:25:24.469 00:00:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 2 123 1 2025-09-04 20:24:24.490 00:01:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:25:36.384 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59384 1 40 1 2025-09-04 20:26:24.490 00:00:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 2 123 1 2025-09-04 20:22:23.436 00:05:01.495 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:26:26.424 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54482 9 6412 1 2025-09-04 20:23:22.840 00:05:02.052 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:26:24.470 00:01:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:27:37.211 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33036 1 40 1 2025-09-04 20:28:14.940 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:28:15.362 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:27:24.490 00:01:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:24:44.230 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2752 1 2025-09-04 20:28:24.470 00:01:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:25:22.820 00:05:02.094 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:29:27.651 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33984 10 6452 1 2025-09-04 20:29:24.491 00:01:00.404 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:30:38.387 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52102 1 40 1 2025-09-04 20:31:28.436 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56496 10 6452 1 2025-09-04 20:30:24.472 00:02:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 6 369 1 2025-09-04 20:28:23.438 00:05:01.494 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:32:39.250 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41996 1 40 1 2025-09-04 20:33:15.252 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:33:15.328 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:31:24.491 00:02:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 6 369 1 2025-09-04 20:29:22.841 00:05:02.051 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:33:29.289 00:00:10.551 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 9 6412 1 2025-09-04 20:30:04.237 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 46 3324 1 2025-09-04 20:33:24.470 00:01:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:34:24.492 00:01:00.401 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:31:22.821 00:05:02.091 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:35:30.303 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38906 9 6412 1 2025-09-04 20:36:30.663 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39760 10 6452 1 2025-09-04 20:35:24.471 00:02:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 6 369 1 2025-09-04 20:37:31.081 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36410 10 6452 1 2025-09-04 20:38:15.307 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:38:15.510 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:36:24.492 00:02:00.401 TCP 23.155.0.1:179 -> 23.156.0.1:36051 6 369 1 2025-09-04 20:34:23.440 00:05:01.493 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:38:24.473 00:01:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:35:22.842 00:05:02.052 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:35:24.248 00:05:10.044 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2440 1 2025-09-04 20:39:24.491 00:01:00.403 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:40:42.657 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44302 1 40 1 2025-09-04 20:37:22.824 00:05:02.090 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:41:32.694 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43328 9 6412 1 2025-09-04 20:40:24.471 00:02:00.483 TCP 23.156.0.1:36051 -> 23.155.0.1:179 6 369 1 2025-09-04 20:41:24.492 00:01:00.403 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:43:15.514 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:43:15.564 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:43:24.493 00:00:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 2 123 1 2025-09-04 20:43:33.455 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:50194 11 10327 1 2025-09-04 20:43:24.472 00:01:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:40:23.444 00:05:01.491 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:44:33.936 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47474 10 6452 1 2025-09-04 20:40:44.255 00:05:10.016 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2444 1 2025-09-04 20:44:24.495 00:01:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:41:22.846 00:05:02.049 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:45:34.345 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44646 10 6452 1 2025-09-04 20:45:24.473 00:01:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:46:45.131 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35110 1 40 1 2025-09-04 20:46:24.495 00:01:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:47:24.474 00:00:00.481 TCP 23.156.0.1:36051 -> 23.155.0.1:179 2 123 1 2025-09-04 20:43:22.827 00:05:02.088 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:48:15.566 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:48:15.405 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:48:24.495 00:00:00.401 TCP 23.155.0.1:179 -> 23.156.0.1:36051 2 123 1 2025-09-04 20:48:24.475 00:01:00.481 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:49:35.940 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55474 9 6412 1 2025-09-04 20:46:04.269 00:05:10.036 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2776 1 2025-09-04 20:49:24.495 00:01:00.401 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:46:23.446 00:05:01.491 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:50:24.475 00:01:00.481 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:47:22.849 00:05:02.047 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:51:36.709 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40358 10 6452 1 2025-09-04 20:52:24.476 00:00:00.480 TCP 23.156.0.1:36051 -> 23.155.0.1:179 2 123 1 2025-09-04 20:51:24.496 00:01:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:53:16.007 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:53:15.858 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:53:24.495 00:00:00.401 TCP 23.155.0.1:179 -> 23.156.0.1:36051 2 123 1 2025-09-04 20:49:22.831 00:05:02.087 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 20:53:24.475 00:01:00.482 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:51:14.861 00:05:09.418 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2620 1 2025-09-04 20:54:24.497 00:01:00.400 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:55:48.658 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50866 1 40 1 2025-09-04 20:55:24.476 00:01:00.481 TCP 23.156.0.1:36051 -> 23.155.0.1:179 4 246 1 2025-09-04 20:52:23.447 00:05:01.491 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 20:56:38.696 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36906 9 6412 1 2025-09-04 20:56:24.496 00:01:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 4 246 1 2025-09-04 20:57:24.477 00:00:00.481 TCP 23.156.0.1:36051 -> 23.155.0.1:179 2 123 1 2025-09-04 20:53:22.855 00:05:02.043 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 20:57:49.515 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43886 1 40 1 2025-09-04 20:58:15.737 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 20:58:15.970 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 20:58:24.497 00:00:00.402 TCP 23.155.0.1:179 -> 23.156.0.1:36051 2 123 1 2025-09-04 20:58:39.552 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46542 9 6412 1 Summary: total flows: 168, total bytes: 278173, total packets: 1398, avg bps: 584, avg pps: 0, avg bpp: 198 Time window: 2025-09-04 19:55:22 - 2025-09-04 20:58:49 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0022s User: 0.0022s Wall: 0.0039s flows/second: 43242.9 Runtime: 0.0039s