Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 03:59:25.083 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50162 1 40 1 2025-09-28 03:59:36.192 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 03:59:35.936 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:00:15.124 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:40822 9 6412 1 2025-09-28 04:01:25.816 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 1 40 1 2025-09-28 03:58:10.862 00:05:01.055 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2976 1 2025-09-28 03:58:33.585 00:05:02.491 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 03:58:34.487 00:05:01.630 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:04:26.986 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51584 1 40 1 2025-09-28 04:04:35.947 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:00:35.569 00:05:00.510 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:04:35.788 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:00:35.551 00:05:00.591 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:00:33.567 00:05:02.534 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:05:27.400 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50676 1 40 1 2025-09-28 04:07:17.845 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44776 10 6452 1 2025-09-28 04:03:20.877 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-28 04:08:18.210 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51842 9 6412 1 2025-09-28 04:04:34.487 00:05:01.634 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:04:33.585 00:05:02.495 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:09:18.610 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39484 10 6452 1 2025-09-28 04:09:36.173 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:09:35.695 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:10:29.345 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42180 1 40 1 2025-09-28 04:06:35.551 00:05:00.591 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:06:33.566 00:05:02.535 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:06:35.571 00:05:00.511 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:11:19.391 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55274 10 6452 1 2025-09-28 04:12:19.796 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 12 10367 1 2025-09-28 04:08:40.886 00:05:00.177 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2748 1 2025-09-28 04:13:30.646 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40834 1 40 1 2025-09-28 04:14:31.047 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41050 1 40 1 2025-09-28 04:14:35.972 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:10:33.587 00:05:02.495 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:14:36.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:10:34.487 00:05:01.634 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:12:35.553 00:05:00.590 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:12:33.570 00:05:02.533 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:12:35.573 00:05:00.511 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:17:32.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49298 1 40 1 2025-09-28 04:13:50.896 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2724 1 2025-09-28 04:18:22.378 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 9 6412 1 2025-09-28 04:19:22.781 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59354 9 6412 1 2025-09-28 04:19:36.490 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:19:36.558 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:20:23.147 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49156 10 6452 1 2025-09-28 04:16:34.491 00:05:01.633 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:16:33.589 00:05:02.494 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:18:35.572 00:05:00.510 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:18:35.553 00:05:00.590 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:18:33.569 00:05:02.533 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:19:10.906 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2448 1 2025-09-28 04:23:34.706 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54630 1 40 1 2025-09-28 04:24:36.462 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:24:36.312 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:25:35.525 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41850 1 40 1 2025-09-28 04:22:34.491 00:05:01.634 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:26:35.935 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57064 1 40 1 2025-09-28 04:22:33.590 00:05:02.495 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:27:25.970 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34724 10 6452 1 2025-09-28 04:24:35.579 00:05:00.507 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:28:26.379 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50576 10 6452 1 2025-09-28 04:24:35.559 00:05:00.588 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:24:33.575 00:05:02.532 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:24:30.917 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3064 1 2025-09-28 04:29:36.317 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:29:26.782 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:44186 10 6452 1 2025-09-28 04:29:36.232 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:30:37.531 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57510 1 40 1 2025-09-28 04:31:27.568 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-09-28 04:32:27.970 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40748 10 6452 1 2025-09-28 04:28:33.595 00:05:02.491 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:28:34.493 00:05:01.633 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:33:38.744 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58386 1 40 1 2025-09-28 04:29:50.925 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2664 1 2025-09-28 04:34:28.785 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 10 6452 1 2025-09-28 04:34:36.493 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:30:35.581 00:05:00.505 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:34:36.488 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:30:35.560 00:05:00.585 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:30:33.574 00:05:02.531 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:36:40.657 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 1 40 1 2025-09-28 04:34:33.595 00:05:02.491 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:34:34.494 00:05:01.632 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:35:10.940 00:05:00.439 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2604 1 2025-09-28 04:39:36.709 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:39:36.662 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:36:35.561 00:05:00.587 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:36:33.576 00:05:02.532 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:36:35.581 00:05:00.507 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:40:42.252 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58216 1 40 1 2025-09-28 04:40:20.949 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2804 1 2025-09-28 04:40:34.496 00:05:01.633 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:44:36.577 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:40:33.596 00:05:02.492 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:44:36.744 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:44:33.532 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34532 10 6452 1 2025-09-28 04:45:44.300 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41688 1 40 1 2025-09-28 04:42:35.565 00:05:00.584 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:42:33.577 00:05:02.532 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:42:35.585 00:05:00.504 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:46:44.705 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49486 1 40 1 2025-09-28 04:47:45.118 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58634 1 40 1 2025-09-28 04:48:45.490 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51118 1 40 1 2025-09-28 04:49:36.706 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:49:36.596 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:45:40.957 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2464 1 2025-09-28 04:46:34.496 00:05:01.633 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:46:33.599 00:05:02.490 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:50:46.432 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55908 1 40 1 2025-09-28 04:51:36.468 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 10 6452 1 2025-09-28 04:48:35.566 00:05:00.584 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:48:33.580 00:05:02.530 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:48:35.585 00:05:00.504 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:54:36.937 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:54:36.991 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:54:37.938 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 10 6452 1 2025-09-28 04:51:00.961 00:05:00.655 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2928 1 2025-09-28 04:55:38.341 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40588 9 6412 1 2025-09-28 04:52:34.499 00:05:01.633 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 04:52:33.601 00:05:02.490 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 04:56:38.750 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 10 6452 1 2025-09-28 04:54:33.583 00:05:02.531 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 04:54:35.567 00:05:00.587 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 04:54:35.586 00:05:00.506 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 04:58:49.839 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55924 1 40 1 Summary: total flows: 126, total bytes: 206367, total packets: 1308, avg bps: 447, avg pps: 0, avg bpp: 157 Time window: 2025-09-28 03:58:10 - 2025-09-28 04:59:36 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0037s User: 0.0009s Wall: 0.0023s flows/second: 55067.4 Runtime: 0.0023s