Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 14:59:10.161 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49058 1 40 1 2025-09-28 14:59:48.842 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 14:59:49.096 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:01:10.965 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46732 1 40 1 2025-09-28 15:02:01.006 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 9 6412 1 2025-09-28 14:58:33.788 00:05:02.475 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 14:58:34.682 00:05:01.621 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 14:58:41.742 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2728 1 2025-09-28 15:03:01.411 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35920 9 6412 1 2025-09-28 15:00:35.773 00:05:00.552 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:00:33.769 00:05:02.515 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:00:35.793 00:05:00.472 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:04:49.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:04:48.926 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:05:12.578 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48658 1 40 1 2025-09-28 15:07:13.350 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36908 1 40 1 2025-09-28 15:04:01.746 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2624 1 2025-09-28 15:04:34.685 00:05:01.620 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:04:33.788 00:05:02.476 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:09:04.212 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54860 9 6412 1 2025-09-28 15:09:49.333 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:09:49.353 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:10:15.028 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39870 1 40 1 2025-09-28 15:06:33.771 00:05:02.515 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:06:35.775 00:05:00.551 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:06:35.795 00:05:00.471 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:12:05.624 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60944 9 6412 1 2025-09-28 15:13:06.032 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46596 9 6412 1 2025-09-28 15:09:21.756 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2724 1 2025-09-28 15:10:34.687 00:05:01.619 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:10:33.793 00:05:02.473 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:14:49.233 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:14:49.315 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:16:17.521 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37906 1 40 1 2025-09-28 15:12:35.775 00:05:00.551 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:12:33.773 00:05:02.513 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:12:35.795 00:05:00.471 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:14:41.769 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2528 1 2025-09-28 15:19:08.329 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43418 9 6412 1 2025-09-28 15:19:49.299 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:19:49.303 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:20:19.093 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52268 1 40 1 2025-09-28 15:16:34.689 00:05:01.618 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:16:33.795 00:05:02.473 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:21:09.135 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42104 11 6516 1 2025-09-28 15:22:19.868 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45856 1 40 1 2025-09-28 15:18:35.775 00:05:00.552 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:18:33.773 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:18:35.796 00:05:00.471 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:23:09.899 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40246 9 6412 1 2025-09-28 15:20:01.774 00:05:00.832 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2744 1 2025-09-28 15:24:10.303 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33136 9 6412 1 2025-09-28 15:24:49.610 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:24:49.487 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:25:10.703 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33008 10 6452 1 2025-09-28 15:26:11.133 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47442 9 6412 1 2025-09-28 15:22:34.691 00:05:01.617 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:22:33.795 00:05:02.472 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:27:11.499 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60212 9 6412 1 2025-09-28 15:28:22.267 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53558 1 40 1 2025-09-28 15:24:35.776 00:05:00.551 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:24:33.775 00:05:02.512 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:24:35.797 00:05:00.471 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:25:11.774 00:05:00.905 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2832 1 2025-09-28 15:29:12.303 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40156 9 6412 1 2025-09-28 15:29:49.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:29:49.694 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:31:23.473 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49156 1 40 1 2025-09-28 15:32:13.509 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54722 10 6452 1 2025-09-28 15:28:34.693 00:05:01.616 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:28:33.797 00:05:02.472 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:33:13.916 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 11 6516 1 2025-09-28 15:30:21.779 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-28 15:30:35.777 00:05:00.553 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:30:33.776 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:30:35.798 00:05:00.473 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:34:49.800 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:34:49.991 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:35:14.741 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37458 10 6452 1 2025-09-28 15:36:15.127 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36974 9 6412 1 2025-09-28 15:37:25.906 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51186 1 40 1 2025-09-28 15:38:26.347 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39874 1 40 1 2025-09-28 15:34:34.697 00:05:01.614 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:34:33.798 00:05:02.473 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:39:16.381 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56706 9 6412 1 2025-09-28 15:39:49.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:39:50.203 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:35:41.785 00:05:11.053 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2896 1 2025-09-28 15:40:16.780 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:36188 9 6412 1 2025-09-28 15:36:35.779 00:05:00.552 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:36:33.777 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:36:35.799 00:05:00.472 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:42:17.555 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41666 9 6412 1 2025-09-28 15:43:17.971 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 9 6412 1 2025-09-28 15:44:28.718 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60426 1 40 1 2025-09-28 15:40:34.698 00:05:01.614 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:40:33.798 00:05:02.474 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:44:49.749 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:44:49.925 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:41:01.792 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2788 1 2025-09-28 15:45:29.128 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59318 1 40 1 2025-09-28 15:46:19.165 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59046 9 6412 1 2025-09-28 15:42:35.801 00:05:00.472 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:42:35.781 00:05:00.552 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:42:33.778 00:05:02.515 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:47:19.526 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54740 10 6452 1 2025-09-28 15:48:19.932 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49266 9 6412 1 2025-09-28 15:49:20.335 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58746 10 6452 1 2025-09-28 15:49:50.118 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:49:49.995 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:46:21.796 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2508 1 2025-09-28 15:50:20.737 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 9 6412 1 2025-09-28 15:46:33.800 00:05:02.474 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:46:34.699 00:05:01.614 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:51:21.155 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49174 9 6412 1 2025-09-28 15:52:31.953 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 1 40 1 2025-09-28 15:48:35.782 00:05:00.555 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:48:33.779 00:05:02.518 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:48:35.802 00:05:00.476 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-28 15:53:21.991 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54504 9 6412 1 2025-09-28 15:54:32.727 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59542 1 40 1 2025-09-28 15:54:50.012 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 15:54:50.001 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 15:55:22.772 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38616 9 6412 1 2025-09-28 15:51:41.811 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2980 1 2025-09-28 15:52:34.701 00:05:01.618 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-28 15:56:23.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52092 10 6452 1 2025-09-28 15:52:33.802 00:05:02.478 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-28 15:57:23.579 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48264 10 6452 1 2025-09-28 15:54:35.783 00:05:00.556 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-28 15:54:33.781 00:05:02.518 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-28 15:58:23.990 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44966 10 6452 1 2025-09-28 15:54:35.803 00:05:00.476 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 Summary: total flows: 133, total bytes: 279052, total packets: 1405, avg bps: 609, avg pps: 0, avg bpp: 198 Time window: 2025-09-28 14:58:33 - 2025-09-28 15:59:36 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0037s User: 0.0009s Wall: 0.0013s flows/second: 101851.8 Runtime: 0.0013s