Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 09:58:58.380 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44474 9 6412 1 2025-09-18 09:55:29.071 00:05:02.309 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 09:59:54.222 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 09:59:54.224 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 09:59:58.795 00:00:10.904 TCP 1.101.0.1:3000 -> 23.104.0.1:33396 10 6452 1 2025-09-18 09:56:51.289 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2624 1 2025-09-18 10:01:10.079 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54986 1 40 1 2025-09-18 09:57:30.852 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:02:00.136 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:54526 10 6452 1 2025-09-18 09:58:29.946 00:05:01.459 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 09:59:30.871 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 09:59:29.095 00:05:02.270 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:04:54.306 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:04:54.215 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:05:11.702 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33630 1 40 1 2025-09-18 10:01:29.076 00:05:02.308 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:06:12.110 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57598 1 40 1 2025-09-18 10:02:11.298 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3124 1 2025-09-18 10:07:02.152 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59464 10 6452 1 2025-09-18 10:03:30.852 00:05:00.573 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:08:02.512 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50910 12 6556 1 2025-09-18 10:04:29.953 00:05:01.453 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:09:02.930 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53380 10 6452 1 2025-09-18 10:05:30.872 00:05:00.493 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:05:29.097 00:05:02.268 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:09:54.377 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:09:54.391 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:10:13.667 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42962 1 40 1 2025-09-18 10:11:03.708 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34870 9 6412 1 2025-09-18 10:07:29.078 00:05:02.310 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:07:31.302 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2528 1 2025-09-18 10:12:04.141 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52174 9 6412 1 2025-09-18 10:13:14.866 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53900 1 40 1 2025-09-18 10:09:30.855 00:05:00.573 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:14:15.256 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44304 1 40 1 2025-09-18 10:10:29.953 00:05:01.456 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:14:54.602 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:14:54.550 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:15:05.299 00:00:12.742 TCP 1.101.0.1:3000 -> 23.104.0.1:49436 10 6452 1 2025-09-18 10:11:30.876 00:05:00.493 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:11:29.099 00:05:02.270 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:16:08.124 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59990 10 6452 1 2025-09-18 10:12:51.308 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2336 1 2025-09-18 10:17:08.524 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49460 10 6452 1 2025-09-18 10:13:29.079 00:05:02.311 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:18:19.300 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54642 1 40 1 2025-09-18 10:19:19.698 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53178 1 40 1 2025-09-18 10:15:30.857 00:05:00.575 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:19:54.596 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:19:54.507 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:20:20.127 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48402 1 40 1 2025-09-18 10:16:29.953 00:05:01.456 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:21:10.167 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54522 9 6412 1 2025-09-18 10:17:30.877 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:17:29.101 00:05:02.270 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:22:20.890 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52762 1 40 1 2025-09-18 10:18:11.316 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2608 1 2025-09-18 10:23:21.293 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53858 1 40 1 2025-09-18 10:19:29.081 00:05:02.310 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:24:11.343 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60014 10 6452 1 2025-09-18 10:24:54.799 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:24:54.737 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:25:11.753 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35536 10 6452 1 2025-09-18 10:21:30.858 00:05:00.573 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:22:29.954 00:05:01.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:27:12.564 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34914 9 6412 1 2025-09-18 10:23:30.878 00:05:00.493 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:23:29.101 00:05:02.270 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:23:31.323 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3084 1 2025-09-18 10:28:12.938 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 9 6412 1 2025-09-18 10:29:23.722 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41166 1 40 1 2025-09-18 10:25:29.082 00:05:02.309 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:29:54.904 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:29:54.860 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:30:13.771 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60420 9 6412 1 2025-09-18 10:31:14.131 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 9 6412 1 2025-09-18 10:27:30.858 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:32:14.539 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34204 9 6412 1 2025-09-18 10:28:29.955 00:05:01.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:28:51.331 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3144 1 2025-09-18 10:33:14.939 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 9 6412 1 2025-09-18 10:29:30.880 00:05:00.492 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:29:29.104 00:05:02.268 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:34:15.342 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43628 9 6412 1 2025-09-18 10:34:54.916 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:34:54.857 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:35:15.758 00:00:10.497 TCP 1.101.0.1:3000 -> 23.104.0.1:43360 10 6452 1 2025-09-18 10:31:29.085 00:05:02.307 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:33:30.862 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:34:11.336 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2528 1 2025-09-18 10:38:27.494 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49932 1 40 1 2025-09-18 10:34:29.960 00:05:01.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:39:17.537 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59092 10 6452 1 2025-09-18 10:35:30.881 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:35:29.107 00:05:02.268 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:39:55.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:39:55.100 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:40:28.286 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45852 1 40 1 2025-09-18 10:41:18.328 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56694 9 6412 1 2025-09-18 10:37:29.087 00:05:02.307 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:42:18.733 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43082 10 6452 1 2025-09-18 10:39:30.862 00:05:00.573 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:39:31.340 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-09-18 10:44:29.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35402 1 40 1 2025-09-18 10:40:29.961 00:05:01.453 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:44:55.259 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:44:55.134 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:41:30.883 00:05:00.493 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:45:19.943 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39782 9 6412 1 2025-09-18 10:41:29.109 00:05:02.267 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:43:29.088 00:05:02.308 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:47:20.776 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:37112 10 6452 1 2025-09-18 10:48:21.154 00:00:10.939 TCP 1.101.0.1:3000 -> 23.104.0.1:37998 10 6452 1 2025-09-18 10:44:51.347 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2432 1 2025-09-18 10:49:32.471 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34966 1 40 1 2025-09-18 10:45:30.862 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:49:55.133 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:49:55.203 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:46:29.966 00:05:01.451 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:50:22.509 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54950 10 6452 1 2025-09-18 10:51:33.295 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 1 40 1 2025-09-18 10:47:30.885 00:05:00.493 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:47:29.112 00:05:02.266 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:52:23.335 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48558 10 6452 1 2025-09-18 10:53:34.116 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 1 40 1 2025-09-18 10:49:29.090 00:05:02.306 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:50:11.349 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-09-18 10:54:34.515 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48246 1 40 1 2025-09-18 10:54:55.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:54:55.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:51:30.865 00:05:00.573 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:55:24.556 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-09-18 10:52:29.964 00:05:01.454 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:53:30.884 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:53:29.111 00:05:02.267 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:57:25.339 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41926 10 6452 1 2025-09-18 10:58:25.700 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52930 9 6412 1 Summary: total flows: 137, total bytes: 285824, total packets: 1425, avg bps: 603, avg pps: 0, avg bpp: 200 Time window: 2025-09-18 09:55:29 - 2025-09-18 10:58:36 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0037s User: 0.0019s Wall: 0.0028s flows/second: 49707.6 Runtime: 0.0028s