Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 00:55:26.093 00:05:02.215 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 00:59:42.966 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55454 1 40 1 2025-09-12 01:00:33.005 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38428 9 6412 1 2025-09-12 00:57:27.838 00:05:00.512 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:01:43.780 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42206 1 40 1 2025-09-12 01:01:50.157 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:01:50.167 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:58:26.746 00:05:01.583 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 00:58:27.857 00:05:00.432 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:02:44.186 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52280 1 40 1 2025-09-12 00:59:18.593 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2936 1 2025-09-12 00:59:26.115 00:05:02.175 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:03:34.225 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60476 10 6452 1 2025-09-12 01:04:44.996 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60524 1 40 1 2025-09-12 01:01:26.093 00:05:02.216 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:06:50.311 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:06:50.446 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:03:27.838 00:05:00.512 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:07:46.174 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42672 1 40 1 2025-09-12 01:04:26.748 00:05:01.582 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:04:27.859 00:05:00.431 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:04:38.599 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2976 1 2025-09-12 01:08:36.213 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 9 6412 1 2025-09-12 01:05:26.114 00:05:02.175 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:09:36.576 00:00:10.606 TCP 1.101.0.1:3000 -> 23.104.0.1:35356 10 6452 1 2025-09-12 01:07:26.095 00:05:02.215 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:11:50.588 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:11:50.396 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:12:48.349 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56540 1 40 1 2025-09-12 01:09:27.842 00:05:00.510 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:09:58.608 00:05:10.370 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3020 1 2025-09-12 01:10:27.863 00:05:00.430 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:10:26.749 00:05:01.584 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:11:26.115 00:05:02.178 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:15:39.162 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59690 9 6412 1 2025-09-12 01:16:39.562 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45478 10 6452 1 2025-09-12 01:16:50.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:16:50.454 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:13:26.095 00:05:02.217 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:17:39.961 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 9 6412 1 2025-09-12 01:18:40.383 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52402 9 6412 1 2025-09-12 01:15:18.611 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-12 01:15:27.844 00:05:00.510 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:19:40.743 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55748 9 6412 1 2025-09-12 01:16:27.866 00:05:00.428 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:16:26.751 00:05:01.583 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:20:51.518 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55958 1 40 1 2025-09-12 01:17:26.116 00:05:02.178 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:21:50.774 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:21:50.512 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:21:51.917 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49326 1 40 1 2025-09-12 01:22:52.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59908 1 40 1 2025-09-12 01:19:26.096 00:05:02.218 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:20:38.617 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2464 1 2025-09-12 01:24:42.739 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36250 10 6452 1 2025-09-12 01:21:27.847 00:05:00.508 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:25:43.161 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49908 9 6412 1 2025-09-12 01:22:26.750 00:05:01.584 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:22:27.867 00:05:00.427 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:26:50.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:26:50.863 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:26:43.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55062 9 6412 1 2025-09-12 01:23:26.117 00:05:02.177 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:27:44.002 00:00:10.708 TCP 1.101.0.1:3000 -> 23.104.0.1:32950 9 6412 1 2025-09-12 01:28:44.752 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59560 9 6412 1 2025-09-12 01:25:26.098 00:05:02.218 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:29:55.523 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55004 1 40 1 2025-09-12 01:25:58.627 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2892 1 2025-09-12 01:30:55.890 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40396 1 40 1 2025-09-12 01:27:27.849 00:05:00.506 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:31:50.944 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:31:50.979 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:28:27.869 00:05:00.427 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:28:26.754 00:05:01.582 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:32:46.341 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50820 9 6412 1 2025-09-12 01:29:26.118 00:05:02.178 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:33:46.701 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35510 9 6412 1 2025-09-12 01:34:57.506 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40204 1 40 1 2025-09-12 01:31:18.632 00:05:00.744 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2844 1 2025-09-12 01:31:26.099 00:05:02.216 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:35:47.545 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44858 9 6412 1 2025-09-12 01:36:50.721 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:36:51.008 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:36:47.909 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54742 10 6452 1 2025-09-12 01:33:27.855 00:05:00.501 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:37:48.333 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47684 10 6452 1 2025-09-12 01:34:27.874 00:05:00.422 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:34:26.755 00:05:01.581 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:38:59.117 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55208 1 40 1 2025-09-12 01:35:26.120 00:05:02.177 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:39:49.150 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35986 9 6412 1 2025-09-12 01:36:28.638 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2872 1 2025-09-12 01:40:49.554 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 9 6412 1 2025-09-12 01:37:26.100 00:05:02.218 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:41:50.936 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:41:50.778 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:41:49.955 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:45698 9 6412 1 2025-09-12 01:42:50.384 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40060 9 6412 1 2025-09-12 01:39:27.856 00:05:00.501 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:43:50.793 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-09-12 01:40:27.877 00:05:00.421 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:40:26.757 00:05:01.582 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:44:51.196 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 9 6412 1 2025-09-12 01:41:26.120 00:05:02.177 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:41:48.640 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2596 1 2025-09-12 01:46:01.958 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 1 40 1 2025-09-12 01:46:51.022 00:00:00.051 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:46:51.094 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:46:51.997 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 10 6452 1 2025-09-12 01:43:26.101 00:05:02.217 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:47:52.414 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48718 10 6452 1 2025-09-12 01:45:27.858 00:05:00.501 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:50:03.660 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 1 40 1 2025-09-12 01:46:26.757 00:05:01.582 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:46:27.877 00:05:00.421 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:47:08.644 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 33 2256 1 2025-09-12 01:47:26.123 00:05:02.176 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-12 01:51:50.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:51:51.099 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:51:54.134 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49612 10 6452 1 2025-09-12 01:53:04.912 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53488 1 40 1 2025-09-12 01:49:26.104 00:05:02.219 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-12 01:53:54.959 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 11 6516 1 2025-09-12 01:54:55.398 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54578 10 6452 1 2025-09-12 01:51:27.859 00:05:00.505 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-12 01:55:55.802 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34506 9 6412 1 2025-09-12 01:52:27.880 00:05:00.423 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-12 01:52:26.757 00:05:01.586 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-12 01:52:28.652 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2624 1 2025-09-12 01:56:51.212 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 01:56:51.309 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 01:57:06.572 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 1 40 1 2025-09-12 01:53:26.124 00:05:02.179 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 Summary: total flows: 133, total bytes: 272744, total packets: 1399, avg bps: 576, avg pps: 0, avg bpp: 194 Time window: 2025-09-12 00:55:26 - 2025-09-12 01:58:28 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0029s User: 0.0019s Wall: 0.0052s flows/second: 25469.9 Runtime: 0.0052s