Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 13:58:46.470 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35914 9 6412 1 2025-09-18 13:55:29.138 00:05:02.322 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 13:59:59.079 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 13:59:58.993 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 13:56:41.604 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2672 1 2025-09-18 14:00:47.267 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52318 10 6452 1 2025-09-18 13:57:30.920 00:05:00.577 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:01:58.033 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43576 1 40 1 2025-09-18 13:58:30.017 00:05:01.460 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:02:58.403 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39726 1 40 1 2025-09-18 13:59:30.939 00:05:00.498 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 13:59:29.157 00:05:02.280 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:03:48.445 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47526 10 6452 1 2025-09-18 14:04:59.143 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:04:59.251 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56320 1 40 1 2025-09-18 14:04:59.186 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:01:29.137 00:05:02.320 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:05:49.288 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55116 10 6452 1 2025-09-18 14:02:01.613 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2336 1 2025-09-18 14:06:49.696 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45900 10 6452 1 2025-09-18 14:03:30.920 00:05:00.579 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:07:50.060 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46792 10 6452 1 2025-09-18 14:04:30.018 00:05:01.461 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:05:29.161 00:05:02.279 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:05:30.941 00:05:00.499 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:09:59.206 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:09:59.146 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:09:50.862 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 9 6412 1 2025-09-18 14:10:51.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57010 9 6412 1 2025-09-18 14:07:29.140 00:05:02.319 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:07:21.624 00:05:10.562 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2688 1 2025-09-18 14:12:02.045 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60294 1 40 1 2025-09-18 14:12:52.085 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46650 10 6452 1 2025-09-18 14:09:30.919 00:05:00.579 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:10:30.019 00:05:01.460 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:14:59.158 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:14:59.405 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:15:03.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58572 1 40 1 2025-09-18 14:11:30.940 00:05:00.499 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:11:29.160 00:05:02.279 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:15:53.302 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45096 10 6452 1 2025-09-18 14:12:41.629 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2940 1 2025-09-18 14:16:53.665 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33966 10 6452 1 2025-09-18 14:13:29.141 00:05:02.320 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:17:54.082 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 9 6412 1 2025-09-18 14:19:04.853 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36716 1 40 1 2025-09-18 14:15:30.921 00:05:00.581 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:19:59.352 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:19:59.431 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:20:05.258 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45486 1 40 1 2025-09-18 14:16:30.022 00:05:01.460 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:20:55.295 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37658 9 6412 1 2025-09-18 14:17:30.940 00:05:00.502 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:17:29.161 00:05:02.281 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:22:06.026 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 1 40 1 2025-09-18 14:18:01.636 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3224 1 2025-09-18 14:19:29.142 00:05:02.321 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:23:56.492 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 10 6464 1 2025-09-18 14:24:59.565 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:24:59.519 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:24:56.953 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54336 10 6452 1 2025-09-18 14:21:30.921 00:05:00.582 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:26:07.700 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50860 1 40 1 2025-09-18 14:22:30.023 00:05:01.461 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:27:08.119 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45818 1 40 1 2025-09-18 14:23:30.942 00:05:00.502 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:23:29.171 00:05:02.273 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:23:21.640 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2448 1 2025-09-18 14:28:58.572 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39792 10 6452 1 2025-09-18 14:25:29.143 00:05:02.322 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:29:59.728 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:29:59.725 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:30:09.356 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48354 1 40 1 2025-09-18 14:27:30.924 00:05:00.582 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:31:59.764 00:00:15.021 TCP 1.101.0.1:3000 -> 23.104.0.1:55544 10 6452 1 2025-09-18 14:28:30.025 00:05:01.462 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:28:41.646 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2496 1 2025-09-18 14:33:15.166 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52514 1 40 1 2025-09-18 14:29:30.945 00:05:00.502 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:29:29.163 00:05:02.283 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:34:05.202 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39722 9 6412 1 2025-09-18 14:34:59.698 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:34:59.819 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:35:15.969 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56712 1 40 1 2025-09-18 14:31:29.144 00:05:02.322 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:37:16.826 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33966 1 40 1 2025-09-18 14:33:30.927 00:05:00.581 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:34:01.654 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2400 1 2025-09-18 14:34:30.026 00:05:01.462 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:39:07.291 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57010 9 6412 1 2025-09-18 14:35:30.948 00:05:00.500 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:35:29.166 00:05:02.282 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:39:59.511 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:39:59.835 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:40:07.653 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34422 10 6452 1 2025-09-18 14:37:29.147 00:05:02.322 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:42:08.479 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42868 9 6412 1 2025-09-18 14:43:19.257 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39150 1 40 1 2025-09-18 14:39:30.930 00:05:00.580 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:39:21.658 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3100 1 2025-09-18 14:44:09.294 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51554 9 6412 1 2025-09-18 14:40:30.027 00:05:01.462 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:45:00.295 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:45:00.112 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:45:09.707 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53006 9 6412 1 2025-09-18 14:41:30.949 00:05:00.501 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:41:29.168 00:05:02.282 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:46:21.123 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58104 1 40 1 2025-09-18 14:43:29.149 00:05:02.321 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:44:41.664 00:05:00.964 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2944 1 2025-09-18 14:45:30.929 00:05:00.581 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:50:00.121 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:50:00.030 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:50:12.334 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 10 6452 1 2025-09-18 14:46:30.029 00:05:01.463 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:51:12.735 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41374 9 6412 1 2025-09-18 14:47:30.949 00:05:00.502 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:47:29.169 00:05:02.282 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:52:13.138 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 9 6412 1 2025-09-18 14:49:29.148 00:05:02.323 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 14:49:51.673 00:05:01.034 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2592 1 2025-09-18 14:54:13.952 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:36292 9 6412 1 2025-09-18 14:55:00.262 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 14:55:00.082 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 14:55:14.379 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6452 1 2025-09-18 14:51:30.930 00:05:00.582 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 14:52:30.059 00:05:01.435 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 14:57:25.490 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 1 40 1 2025-09-18 14:53:30.949 00:05:00.503 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 14:53:29.168 00:05:02.284 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 14:58:15.523 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50192 10 6452 1 Summary: total flows: 131, total bytes: 260068, total packets: 1385, avg bps: 550, avg pps: 0, avg bpp: 187 Time window: 2025-09-18 13:55:29 - 2025-09-18 14:58:31 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0039s User: 0.0010s Wall: 0.0019s flows/second: 68408.1 Runtime: 0.0019s