Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 09:59:06.202 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49950 10 6452 1 2025-09-24 09:55:31.737 00:05:02.526 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 09:56:03.218 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2756 1 2025-09-24 10:00:16.974 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39068 1 40 1 2025-09-24 10:02:07.377 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52134 10 6452 1 2025-09-24 09:58:32.700 00:05:01.584 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:02:47.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:02:47.839 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:03:07.786 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52662 9 6412 1 2025-09-24 09:59:31.759 00:05:02.485 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 09:59:33.708 00:05:00.596 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:04:18.536 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36770 1 40 1 2025-09-24 10:00:33.728 00:05:00.516 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:01:23.223 00:05:10.001 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2528 1 2025-09-24 10:01:31.739 00:05:02.527 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:06:19.410 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45654 1 40 1 2025-09-24 10:07:20.121 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44896 1 40 1 2025-09-24 10:07:47.672 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:07:47.678 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:08:10.158 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33290 9 6412 1 2025-09-24 10:04:32.703 00:05:01.583 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:09:20.931 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41352 1 40 1 2025-09-24 10:05:31.759 00:05:02.487 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:05:33.709 00:05:00.598 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:10:10.966 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:39382 9 6412 1 2025-09-24 10:06:33.732 00:05:00.515 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:06:43.224 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2384 1 2025-09-24 10:11:11.338 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49030 10 6452 1 2025-09-24 10:07:31.740 00:05:02.526 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:12:11.749 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:34336 10 6464 1 2025-09-24 10:12:47.872 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:12:47.806 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:14:22.988 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 1 40 1 2025-09-24 10:10:32.703 00:05:01.583 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:15:13.029 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33632 10 6452 1 2025-09-24 10:11:33.713 00:05:00.595 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:11:31.765 00:05:02.483 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:12:03.228 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2660 1 2025-09-24 10:16:13.444 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:53772 11 10327 1 2025-09-24 10:12:33.733 00:05:00.514 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:17:13.930 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48970 9 6412 1 2025-09-24 10:13:31.742 00:05:02.526 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:17:47.744 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:17:47.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:18:14.292 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46282 9 6412 1 2025-09-24 10:19:25.070 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 1 40 1 2025-09-24 10:20:25.509 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60434 1 40 1 2025-09-24 10:16:32.707 00:05:01.582 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:21:15.552 00:00:11.307 TCP 1.101.0.1:3000 -> 23.104.0.1:51278 9 6412 1 2025-09-24 10:17:31.763 00:05:02.486 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:17:33.715 00:05:00.596 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:17:23.234 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2976 1 2025-09-24 10:18:33.734 00:05:00.515 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:22:47.877 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:22:47.884 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:23:17.306 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57510 10 6452 1 2025-09-24 10:19:31.744 00:05:02.527 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:24:17.670 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36044 10 6452 1 2025-09-24 10:25:28.448 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 1 40 1 2025-09-24 10:26:18.483 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57700 10 6452 1 2025-09-24 10:22:32.708 00:05:01.586 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:22:43.238 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3064 1 2025-09-24 10:27:18.891 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48682 9 6412 1 2025-09-24 10:23:33.716 00:05:00.599 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:23:31.770 00:05:02.484 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:27:48.158 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:27:48.089 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:24:33.736 00:05:00.519 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:29:19.715 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43526 10 6452 1 2025-09-24 10:25:31.750 00:05:02.524 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:31:20.527 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:54422 12 10367 1 2025-09-24 10:28:03.243 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2644 1 2025-09-24 10:28:32.712 00:05:01.584 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:32:47.956 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:32:47.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:29:33.717 00:05:00.599 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:33:21.338 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56950 10 6452 1 2025-09-24 10:29:31.771 00:05:02.485 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:34:21.743 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33874 9 6412 1 2025-09-24 10:30:33.739 00:05:00.518 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:35:22.159 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33718 10 6452 1 2025-09-24 10:31:31.752 00:05:02.523 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:36:32.849 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35162 1 40 1 2025-09-24 10:33:23.254 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2384 1 2025-09-24 10:37:48.452 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:37:48.369 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:34:32.713 00:05:01.588 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:38:23.292 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58320 10 6452 1 2025-09-24 10:39:23.658 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51860 10 6452 1 2025-09-24 10:35:33.719 00:05:00.599 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:35:31.773 00:05:02.484 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:36:33.738 00:05:00.519 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:41:24.469 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42420 10 6452 1 2025-09-24 10:37:31.755 00:05:02.522 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:42:35.251 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54020 1 40 1 2025-09-24 10:42:48.348 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:42:48.436 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:38:43.259 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-09-24 10:43:25.289 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40598 9 6412 1 2025-09-24 10:40:32.715 00:05:01.582 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:44:25.698 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 9 6412 1 2025-09-24 10:41:33.719 00:05:00.599 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:41:31.775 00:05:02.482 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:45:26.073 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57402 10 6452 1 2025-09-24 10:42:33.741 00:05:00.518 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:43:31.755 00:05:02.522 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:47:48.375 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:47:48.476 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:44:03.267 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2724 1 2025-09-24 10:48:27.383 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58280 10 6452 1 2025-09-24 10:46:32.719 00:05:01.582 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:50:38.528 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54852 1 40 1 2025-09-24 10:47:31.776 00:05:02.484 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:47:33.723 00:05:00.599 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:51:28.562 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60234 9 6412 1 2025-09-24 10:48:33.742 00:05:00.518 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:52:39.338 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 1 40 1 2025-09-24 10:52:49.364 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:52:49.030 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:49:23.272 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 46 3452 1 2025-09-24 10:49:31.757 00:05:02.526 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-24 10:54:29.745 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37906 10 6452 1 2025-09-24 10:52:32.719 00:05:01.586 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-24 10:53:31.778 00:05:02.488 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-24 10:53:33.724 00:05:00.602 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-24 10:57:30.988 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54458 9 6412 1 2025-09-24 10:57:48.807 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 10:57:48.845 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 10:54:33.747 00:05:00.519 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-24 10:58:31.399 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34160 10 6452 1 Summary: total flows: 130, total bytes: 287242, total packets: 1416, avg bps: 598, avg pps: 0, avg bpp: 202 Time window: 2025-09-24 09:55:31 - 2025-09-24 10:59:34 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0033s User: 0.0022s Wall: 0.0018s flows/second: 73903.4 Runtime: 0.0018s