Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 17:55:44.544 00:05:00.777 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:00:30.578 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40640 10 6452 1 2025-10-16 17:56:42.263 00:05:02.999 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:01:30.980 00:00:10.851 TCP 1.101.0.1:3000 -> 23.104.0.1:36242 9 6412 1 2025-10-16 17:57:45.301 00:05:57.904 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 17:59:18.724 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2688 1 2025-10-16 18:03:32.437 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:03:32.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 17:58:45.281 00:05:56.964 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:03:42.618 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59518 1 40 1 2025-10-16 17:59:44.565 00:05:00.699 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:04:43.021 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 1 40 1 2025-10-16 18:05:33.061 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60184 10 6452 1 2025-10-16 18:01:44.545 00:05:00.779 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:06:43.789 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 1 40 1 2025-10-16 18:02:42.264 00:05:03.003 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:08:32.683 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:08:32.782 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:03:45.305 00:05:57.902 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:08:34.229 00:00:11.003 TCP 1.101.0.1:3000 -> 23.104.0.1:52616 10 6452 1 2025-10-16 18:04:38.732 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-10-16 18:04:45.284 00:05:56.964 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:09:35.267 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51700 10 6452 1 2025-10-16 18:05:44.569 00:05:00.697 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:07:44.547 00:05:00.778 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:08:42.268 00:05:02.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:12:36.432 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50124 9 6412 1 2025-10-16 18:13:32.736 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:13:32.536 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:13:36.837 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 9 6412 1 2025-10-16 18:09:58.736 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3016 1 2025-10-16 18:09:45.304 00:05:57.904 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:14:37.241 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47060 9 6412 1 2025-10-16 18:10:45.284 00:05:56.966 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:11:44.569 00:05:00.698 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:15:37.642 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49122 10 6452 1 2025-10-16 18:16:38.042 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59682 10 6452 1 2025-10-16 18:13:44.549 00:05:00.778 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:17:38.398 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 9 6412 1 2025-10-16 18:18:33.028 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:18:33.310 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:14:42.270 00:05:02.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:18:38.796 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56770 10 6452 1 2025-10-16 18:15:18.747 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2708 1 2025-10-16 18:19:39.202 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57488 9 6412 1 2025-10-16 18:15:45.307 00:05:57.905 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:16:45.287 00:05:56.965 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:17:44.570 00:05:00.700 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:21:50.787 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33598 1 40 1 2025-10-16 18:22:40.822 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50440 9 6412 1 2025-10-16 18:23:32.926 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:23:32.874 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:19:44.552 00:05:00.778 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:20:42.271 00:05:02.999 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:20:38.753 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2504 1 2025-10-16 18:25:52.350 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46276 1 40 1 2025-10-16 18:21:45.310 00:05:57.904 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:26:42.388 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50604 10 6452 1 2025-10-16 18:22:45.290 00:05:56.963 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:23:44.573 00:05:00.699 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:27:42.795 00:00:10.783 TCP 1.101.0.1:3000 -> 23.104.0.1:55462 10 6452 1 2025-10-16 18:28:33.020 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:28:33.021 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:28:43.618 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33402 9 6412 1 2025-10-16 18:25:44.554 00:05:00.779 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:29:44.025 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56226 10 6452 1 2025-10-16 18:25:58.758 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2864 1 2025-10-16 18:26:42.272 00:05:03.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:31:45.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58824 10 6452 1 2025-10-16 18:27:45.309 00:05:57.905 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:33:33.091 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:33:32.940 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:28:45.291 00:05:56.963 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:29:44.577 00:05:00.696 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:33:46.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42342 10 6452 1 2025-10-16 18:34:46.591 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49892 10 6452 1 2025-10-16 18:31:18.765 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-16 18:31:44.561 00:05:00.773 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:35:47.004 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34036 10 6452 1 2025-10-16 18:32:42.275 00:05:02.999 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:36:47.411 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40674 9 6412 1 2025-10-16 18:37:47.811 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54676 9 6412 1 2025-10-16 18:38:33.300 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:38:33.203 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:33:45.313 00:05:57.902 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:34:45.293 00:05:56.966 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:35:44.581 00:05:00.694 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:39:48.617 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53834 9 6412 1 2025-10-16 18:36:38.777 00:05:00.852 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2820 1 2025-10-16 18:40:49.015 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36290 9 6412 1 2025-10-16 18:37:44.561 00:05:00.773 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:41:49.419 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 9 6412 1 2025-10-16 18:38:42.277 00:05:02.997 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:42:49.824 00:00:11.023 TCP 1.101.0.1:3000 -> 23.104.0.1:47044 10 6452 1 2025-10-16 18:43:33.685 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:43:33.517 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:39:45.314 00:05:57.903 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:45:01.665 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58782 1 40 1 2025-10-16 18:40:45.294 00:05:56.966 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:41:44.585 00:05:00.691 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:41:48.781 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-10-16 18:45:51.702 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45174 10 6452 1 2025-10-16 18:47:02.494 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41050 1 40 1 2025-10-16 18:43:44.565 00:05:00.772 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:48:03.436 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41822 1 40 1 2025-10-16 18:48:33.345 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:48:33.425 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:44:42.280 00:05:02.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:49:03.849 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 1 40 1 2025-10-16 18:45:45.316 00:05:57.904 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:50:54.294 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 9 6412 1 2025-10-16 18:47:08.790 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2604 1 2025-10-16 18:46:45.296 00:05:56.966 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:47:44.586 00:05:00.695 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:52:05.064 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34304 1 40 1 2025-10-16 18:53:33.449 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:53:33.643 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 18:49:44.566 00:05:00.775 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 18:54:05.852 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 1 40 1 2025-10-16 18:50:42.282 00:05:03.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 18:54:55.888 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-10-16 18:56:06.664 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48782 1 40 1 2025-10-16 18:52:28.797 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2944 1 2025-10-16 18:51:45.320 00:05:57.901 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 18:57:07.068 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47048 1 40 1 2025-10-16 18:52:45.300 00:05:56.962 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 18:53:44.588 00:05:00.695 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 18:57:57.124 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59168 9 6412 1 2025-10-16 18:58:33.471 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 18:58:33.649 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 130, total bytes: 279272, total packets: 1408, avg bps: 590, avg pps: 0, avg bpp: 198 Time window: 2025-10-16 17:55:44 - 2025-10-16 18:58:45 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0040s User: 0.0010s Wall: 0.0020s flows/second: 63915.1 Runtime: 0.0021s