Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 01:55:29.766 00:05:02.456 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 01:59:59.254 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46832 10 6452 1 2025-09-20 02:00:42.321 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:00:42.429 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:02:10.382 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48492 1 40 1 2025-09-20 01:58:31.623 00:05:00.580 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 01:58:30.716 00:05:01.528 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 01:58:34.510 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2632 1 2025-09-20 02:03:00.422 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53880 9 6412 1 2025-09-20 01:59:29.786 00:05:02.417 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 01:59:31.602 00:05:00.661 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:05:11.566 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33450 1 40 1 2025-09-20 02:01:29.766 00:05:02.457 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:05:42.549 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:05:42.459 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:07:12.373 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45556 1 40 1 2025-09-20 02:03:54.514 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2932 1 2025-09-20 02:04:31.624 00:05:00.589 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:04:30.717 00:05:01.535 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:09:13.153 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58092 1 40 1 2025-09-20 02:05:31.604 00:05:00.670 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:05:29.790 00:05:02.424 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:10:03.192 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:53698 10 6452 1 2025-09-20 02:10:42.454 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:10:42.450 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:11:03.608 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56372 10 6452 1 2025-09-20 02:07:29.770 00:05:02.464 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:13:14.763 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 1 40 1 2025-09-20 02:09:14.519 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-09-20 02:14:04.799 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46946 9 6412 1 2025-09-20 02:10:31.623 00:05:00.590 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:10:30.720 00:05:01.535 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:11:29.791 00:05:02.423 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:11:31.603 00:05:00.671 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:15:43.001 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:15:42.848 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:16:15.967 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 1 40 1 2025-09-20 02:17:06.005 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39958 10 6452 1 2025-09-20 02:13:29.772 00:05:02.462 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:14:34.522 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 33 2256 1 2025-09-20 02:19:06.812 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38118 10 6452 1 2025-09-20 02:20:07.221 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 9 6412 1 2025-09-20 02:16:30.720 00:05:01.534 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:16:31.625 00:05:00.590 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:20:42.639 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:20:42.865 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:21:07.628 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41830 10 6452 1 2025-09-20 02:17:31.605 00:05:00.671 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:17:29.791 00:05:02.424 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:22:08.030 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 9 6412 1 2025-09-20 02:23:18.799 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40216 1 40 1 2025-09-20 02:19:29.772 00:05:02.463 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:19:54.531 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2748 1 2025-09-20 02:24:19.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39752 1 40 1 2025-09-20 02:25:42.905 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:25:42.720 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:22:31.626 00:05:00.590 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:22:30.722 00:05:01.534 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:27:10.003 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34694 10 6452 1 2025-09-20 02:23:31.605 00:05:00.671 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:23:29.793 00:05:02.424 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:28:10.411 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 9 6412 1 2025-09-20 02:25:14.537 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3028 1 2025-09-20 02:29:21.130 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53760 1 40 1 2025-09-20 02:25:29.772 00:05:02.465 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:30:42.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:30:42.918 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:31:11.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52398 9 6412 1 2025-09-20 02:28:31.626 00:05:00.592 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:28:30.723 00:05:01.535 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:33:12.376 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 9 6412 1 2025-09-20 02:29:31.606 00:05:00.672 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:29:29.793 00:05:02.425 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:34:12.740 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51954 9 6412 1 2025-09-20 02:30:34.539 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2948 1 2025-09-20 02:35:13.136 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:49752 10 6452 1 2025-09-20 02:31:29.773 00:05:02.466 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:35:43.302 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:35:43.120 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:36:13.538 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 9 6412 1 2025-09-20 02:37:24.351 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59188 1 40 1 2025-09-20 02:38:24.713 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33046 1 40 1 2025-09-20 02:34:30.724 00:05:01.536 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:34:31.629 00:05:00.593 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:39:14.745 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-09-20 02:35:31.608 00:05:00.673 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:35:29.795 00:05:02.426 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:35:54.548 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2548 1 2025-09-20 02:40:15.127 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43428 9 6412 1 2025-09-20 02:40:42.939 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:40:43.158 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:41:15.492 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51338 11 6516 1 2025-09-20 02:37:29.775 00:05:02.466 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:43:26.628 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46810 1 40 1 2025-09-20 02:44:16.670 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41216 9 6412 1 2025-09-20 02:40:31.631 00:05:00.591 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:40:30.726 00:05:01.536 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:45:17.089 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57318 9 6412 1 2025-09-20 02:41:14.550 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-09-20 02:41:31.611 00:05:00.671 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:41:29.796 00:05:02.426 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:45:43.078 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:45:43.170 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:46:17.457 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60882 10 6452 1 2025-09-20 02:47:17.856 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:36022 9 6412 1 2025-09-20 02:43:29.776 00:05:02.471 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:48:18.251 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44804 10 6452 1 2025-09-20 02:49:18.618 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38542 9 6412 1 2025-09-20 02:50:19.021 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33100 10 6452 1 2025-09-20 02:46:30.729 00:05:01.546 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:46:31.633 00:05:00.602 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:50:43.263 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:50:43.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:46:34.557 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2608 1 2025-09-20 02:51:19.378 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45768 10 6452 1 2025-09-20 02:47:29.796 00:05:02.439 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:47:31.612 00:05:00.683 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-20 02:52:19.783 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:53600 10 6452 1 2025-09-20 02:49:29.789 00:05:02.466 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-20 02:53:30.531 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36838 1 40 1 2025-09-20 02:54:20.572 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38544 9 6412 1 2025-09-20 02:55:20.941 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60794 9 6412 1 2025-09-20 02:55:43.354 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:55:43.266 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:51:54.561 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3020 1 2025-09-20 02:52:30.732 00:05:01.543 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-20 02:52:31.633 00:05:00.602 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-20 02:53:29.809 00:05:02.427 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-20 02:57:33.570 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56288 1 40 1 2025-09-20 02:53:31.615 00:05:00.680 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 Summary: total flows: 130, total bytes: 272624, total packets: 1397, avg bps: 576, avg pps: 0, avg bpp: 195 Time window: 2025-09-20 01:55:29 - 2025-09-20 02:58:32 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0030s User: 0.0010s Wall: 0.0016s flows/second: 81455.0 Runtime: 0.0016s