Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 12:58:50.209 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55738 9 6412 1 2025-10-14 12:56:43.462 00:05:00.651 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 12:57:43.444 00:05:00.730 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 12:57:41.154 00:05:02.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:02:01.807 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 1 40 1 2025-10-14 13:02:28.600 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:02:28.506 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 12:58:42.111 00:05:02.042 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:02:51.844 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-10-14 12:59:24.209 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2440 1 2025-10-14 12:59:41.134 00:05:02.999 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:03:52.246 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45688 9 6412 1 2025-10-14 13:05:53.076 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42174 9 6412 1 2025-10-14 13:02:43.464 00:05:00.651 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:06:53.482 00:00:10.481 TCP 1.101.0.1:3000 -> 23.104.0.1:57808 9 6412 1 2025-10-14 13:07:28.586 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:07:28.759 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:03:41.156 00:05:02.961 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:03:43.445 00:05:00.731 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:07:53.998 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38422 10 6452 1 2025-10-14 13:04:42.112 00:05:02.049 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:04:44.223 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3108 1 2025-10-14 13:05:41.134 00:05:03.001 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:09:54.813 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49900 9 6412 1 2025-10-14 13:11:05.584 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45206 1 40 1 2025-10-14 13:11:55.622 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54544 9 6412 1 2025-10-14 13:12:28.880 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:12:28.600 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:08:43.468 00:05:00.648 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:09:43.448 00:05:00.728 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:09:41.160 00:05:02.956 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:13:56.447 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37776 9 6412 1 2025-10-14 13:10:04.230 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 33 2256 1 2025-10-14 13:10:42.112 00:05:02.044 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:11:41.140 00:05:02.997 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:16:57.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52154 10 6452 1 2025-10-14 13:17:29.030 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:17:29.110 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:14:43.469 00:05:00.648 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:18:58.398 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44614 9 6412 1 2025-10-14 13:15:24.237 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2624 1 2025-10-14 13:15:41.159 00:05:02.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:15:43.449 00:05:00.728 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:19:58.810 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45782 9 6412 1 2025-10-14 13:16:42.115 00:05:02.043 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:20:59.216 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41750 9 6412 1 2025-10-14 13:17:41.144 00:05:02.993 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:22:29.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:22:29.095 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:24:00.427 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41688 10 6452 1 2025-10-14 13:20:43.471 00:05:00.646 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:20:44.245 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3196 1 2025-10-14 13:25:11.172 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35632 1 40 1 2025-10-14 13:21:41.160 00:05:02.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:21:43.451 00:05:00.726 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:22:42.117 00:05:02.042 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:27:01.616 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46574 9 6412 1 2025-10-14 13:27:29.450 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:27:29.390 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:23:41.140 00:05:02.998 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:28:12.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47186 1 40 1 2025-10-14 13:29:13.036 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59882 1 40 1 2025-10-14 13:26:04.250 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2440 1 2025-10-14 13:30:03.083 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49010 10 6452 1 2025-10-14 13:26:43.473 00:05:00.645 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:31:03.493 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:44458 11 10329 1 2025-10-14 13:27:43.452 00:05:00.726 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:27:41.162 00:05:02.956 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:32:29.386 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:32:29.388 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:28:42.118 00:05:02.041 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:33:04.296 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-10-14 13:29:41.143 00:05:02.996 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:34:15.066 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 1 40 1 2025-10-14 13:35:05.127 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60320 9 6412 1 2025-10-14 13:31:24.253 00:05:10.852 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2928 1 2025-10-14 13:36:15.891 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37298 1 40 1 2025-10-14 13:32:43.473 00:05:00.646 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:37:05.926 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48970 11 6516 1 2025-10-14 13:37:29.531 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:37:29.477 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:33:43.452 00:05:00.727 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:33:41.164 00:05:02.956 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:38:16.707 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44400 1 40 1 2025-10-14 13:34:42.119 00:05:02.040 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:39:06.743 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45520 9 6412 1 2025-10-14 13:35:41.144 00:05:02.996 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:40:17.515 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58226 1 40 1 2025-10-14 13:36:44.255 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-14 13:42:07.951 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:51418 9 6412 1 2025-10-14 13:42:29.468 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:42:29.630 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:38:43.478 00:05:00.644 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:43:08.390 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41276 10 6452 1 2025-10-14 13:39:43.457 00:05:00.724 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:39:41.165 00:05:02.955 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:44:08.746 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44060 9 6412 1 2025-10-14 13:40:42.122 00:05:02.039 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:45:09.130 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60868 10 6452 1 2025-10-14 13:41:41.147 00:05:02.995 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:42:04.263 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-14 13:46:09.537 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39000 10 6452 1 2025-10-14 13:47:20.305 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58500 1 40 1 2025-10-14 13:47:29.838 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:47:29.743 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:48:10.345 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36162 9 6412 1 2025-10-14 13:44:43.479 00:05:00.644 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:49:21.121 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55468 1 40 1 2025-10-14 13:45:41.167 00:05:02.955 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:45:43.458 00:05:00.724 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:50:21.530 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46776 1 40 1 2025-10-14 13:46:42.126 00:05:02.038 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:51:11.569 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54078 9 6412 1 2025-10-14 13:47:24.270 00:05:10.114 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3080 1 2025-10-14 13:47:41.148 00:05:02.993 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:52:11.979 00:00:11.051 TCP 1.101.0.1:3000 -> 23.104.0.1:57918 10 6452 1 2025-10-14 13:52:29.704 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:52:29.634 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:53:13.077 00:00:10.889 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 9 6412 1 2025-10-14 13:54:24.367 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43896 1 40 1 2025-10-14 13:50:43.481 00:05:00.642 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-14 13:55:14.407 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 9 6412 1 2025-10-14 13:51:41.168 00:05:02.954 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 13:51:43.461 00:05:00.722 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 13:56:25.180 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58404 1 40 1 2025-10-14 13:52:42.126 00:05:02.037 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 13:52:44.276 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2644 1 2025-10-14 13:57:29.900 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 13:57:15.212 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:46378 10 6452 1 2025-10-14 13:57:29.891 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:53:41.149 00:05:02.994 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 13:58:15.580 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54808 10 6452 1 Summary: total flows: 132, total bytes: 289201, total packets: 1414, avg bps: 621, avg pps: 0, avg bpp: 204 Time window: 2025-10-14 12:56:43 - 2025-10-14 13:58:44 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0038s User: 0.0019s Wall: 0.0025s flows/second: 52508.4 Runtime: 0.0025s