Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 02:59:45.053 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32824 1 40 1 2025-10-14 02:55:43.241 00:06:00.689 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 02:57:40.914 00:05:02.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:02:16.812 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:02:16.755 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 02:58:41.915 00:05:01.998 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:02:46.288 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33250 1 40 1 2025-10-14 02:58:53.457 00:05:09.999 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-10-14 02:59:40.893 00:05:02.999 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:00:43.263 00:06:00.610 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 03:05:37.390 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42032 9 6412 1 2025-10-14 03:06:37.784 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:37972 9 6412 1 2025-10-14 03:07:16.845 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:07:16.856 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:02:43.243 00:06:00.690 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 03:03:40.921 00:05:02.952 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:07:48.522 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60110 1 40 1 2025-10-14 03:04:13.457 00:05:10.020 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3088 1 2025-10-14 03:04:41.915 00:05:01.999 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:08:38.558 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43196 9 6412 1 2025-10-14 03:05:40.902 00:05:02.994 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:09:49.298 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52308 1 40 1 2025-10-14 03:10:39.333 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37800 9 6412 1 2025-10-14 03:11:39.728 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33462 10 6452 1 2025-10-14 03:12:17.014 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:12:16.888 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:07:43.267 00:06:00.610 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 03:12:40.120 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-10-14 03:09:40.922 00:05:02.953 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:09:33.467 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-10-14 03:10:41.917 00:05:01.998 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:09:43.246 00:06:00.689 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 03:14:51.297 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48044 1 40 1 2025-10-14 03:11:40.902 00:05:02.994 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:15:41.336 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36488 9 6412 1 2025-10-14 03:16:41.733 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49744 10 6452 1 2025-10-14 03:17:17.062 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:17:16.916 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:18:42.542 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55456 9 6412 1 2025-10-14 03:14:53.476 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-10-14 03:14:43.267 00:06:00.609 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 03:15:40.922 00:05:02.954 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:19:53.226 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 1 40 1 2025-10-14 03:16:41.922 00:05:01.995 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:20:43.263 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37064 9 6412 1 2025-10-14 03:16:43.248 00:06:00.689 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 03:17:40.903 00:05:02.994 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:22:17.083 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:22:17.124 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:22:43.986 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59232 10 6452 1 2025-10-14 03:23:44.386 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35786 10 6452 1 2025-10-14 03:20:13.483 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3012 1 2025-10-14 03:21:40.923 00:05:02.954 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:22:41.925 00:05:01.991 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:21:43.270 00:06:00.608 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 03:26:45.606 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:42988 10 6452 1 2025-10-14 03:27:17.390 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:27:17.390 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:23:40.904 00:05:02.992 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:23:43.249 00:06:00.689 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 03:28:46.382 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36356 10 6452 1 2025-10-14 03:25:33.490 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2688 1 2025-10-14 03:29:46.785 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58436 9 6412 1 2025-10-14 03:30:47.201 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49092 9 6412 1 2025-10-14 03:27:40.926 00:05:02.953 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:31:57.951 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42570 1 40 1 2025-10-14 03:32:17.303 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:32:17.309 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:28:41.926 00:05:01.994 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:28:43.273 00:06:00.606 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 03:29:40.905 00:05:02.994 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:33:48.408 00:00:11.086 TCP 1.101.0.1:3000 -> 23.104.0.1:59638 10 6452 1 2025-10-14 03:34:49.529 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46124 10 6452 1 2025-10-14 03:30:53.492 00:05:10.491 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3008 1 2025-10-14 03:30:43.254 00:06:00.686 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 03:35:49.933 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50038 12 6556 1 2025-10-14 03:37:00.707 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46266 1 40 1 2025-10-14 03:37:17.375 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:37:17.478 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:33:40.926 00:05:02.956 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:38:01.116 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52314 1 40 1 2025-10-14 03:34:41.926 00:05:02.005 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:38:51.156 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43814 10 6452 1 2025-10-14 03:35:40.908 00:05:03.000 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:39:51.556 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57384 10 6452 1 2025-10-14 03:36:13.496 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-14 03:35:43.275 00:06:00.613 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 03:40:51.911 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55008 10 6452 1 2025-10-14 03:41:52.324 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47274 10 6452 1 2025-10-14 03:42:17.250 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:42:17.497 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:37:43.255 00:06:00.691 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 03:42:52.688 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49034 9 6412 1 2025-10-14 03:39:40.931 00:05:02.956 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:43:53.050 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34554 10 6452 1 2025-10-14 03:40:41.928 00:05:01.999 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:44:53.455 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56110 10 6452 1 2025-10-14 03:41:40.910 00:05:02.998 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:41:33.503 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-14 03:45:53.861 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:58826 9 6412 1 2025-10-14 03:47:17.569 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:47:17.572 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:42:43.277 00:06:00.612 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 03:47:54.710 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49210 9 6412 1 2025-10-14 03:48:55.131 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 9 6412 1 2025-10-14 03:44:43.256 00:06:00.695 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 03:45:40.931 00:05:02.961 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:49:55.546 00:00:10.697 TCP 1.101.0.1:3000 -> 23.104.0.1:54302 10 6452 1 2025-10-14 03:46:41.930 00:05:02.002 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:46:53.511 00:05:10.017 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2976 1 2025-10-14 03:51:06.647 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40316 1 40 1 2025-10-14 03:47:40.911 00:05:03.001 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 03:52:18.018 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:52:17.652 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:52:57.117 00:00:10.463 TCP 1.101.0.1:3000 -> 23.104.0.1:57070 9 6412 1 2025-10-14 03:53:57.627 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56502 9 6412 1 2025-10-14 03:49:43.301 00:06:00.592 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 03:54:58.029 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47536 9 6412 1 2025-10-14 03:51:40.936 00:05:02.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 03:52:04.245 00:05:09.280 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2680 1 2025-10-14 03:52:41.929 00:05:02.003 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 03:51:43.281 00:06:00.671 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-14 03:57:17.606 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 03:57:17.691 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 03:53:40.914 00:05:02.998 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 Summary: total flows: 125, total bytes: 285449, total packets: 1415, avg bps: 604, avg pps: 0, avg bpp: 201 Time window: 2025-10-14 02:55:43 - 2025-10-14 03:58:43 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0039s User: 0.0000s Wall: 0.0026s flows/second: 47871.4 Runtime: 0.0026s