Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 01:59:01.493 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35870 9 6412 1 2025-10-17 01:55:44.710 00:05:00.791 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:00:01.895 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56290 10 6452 1 2025-10-17 01:56:42.432 00:05:03.009 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 01:57:49.363 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-10-17 01:57:45.477 00:05:57.907 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:03:41.927 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:03:42.042 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 01:58:45.458 00:05:56.955 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 01:59:44.730 00:05:00.715 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:04:03.486 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55468 10 6452 1 2025-10-17 02:05:14.255 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34702 1 40 1 2025-10-17 02:01:44.711 00:05:00.794 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:06:04.291 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40956 10 6452 1 2025-10-17 02:02:42.432 00:05:03.013 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:03:09.367 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2784 1 2025-10-17 02:07:04.691 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:36426 11 10335 1 2025-10-17 02:08:05.171 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37458 10 6452 1 2025-10-17 02:08:42.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:08:42.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:03:45.484 00:05:57.902 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:09:15.938 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52246 1 40 1 2025-10-17 02:04:45.464 00:05:56.949 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:05:44.734 00:05:00.714 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:10:05.972 00:00:10.523 TCP 1.101.0.1:3000 -> 23.104.0.1:46236 9 6412 1 2025-10-17 02:11:06.532 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51782 10 6452 1 2025-10-17 02:07:44.715 00:05:00.793 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:12:06.936 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46404 10 6452 1 2025-10-17 02:08:29.371 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-17 02:08:42.432 00:05:03.016 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:13:17.851 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49492 1 40 1 2025-10-17 02:13:42.346 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:13:42.347 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:14:07.888 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37584 10 6452 1 2025-10-17 02:09:45.485 00:05:57.906 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:10:45.468 00:05:56.946 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:11:44.736 00:05:00.715 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:16:08.782 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56958 10 6452 1 2025-10-17 02:17:19.574 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48358 1 40 1 2025-10-17 02:13:44.716 00:05:00.795 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:13:49.375 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-10-17 02:18:09.611 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51796 9 6412 1 2025-10-17 02:18:42.460 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:18:42.463 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:14:42.434 00:05:03.018 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:20:20.747 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36822 1 40 1 2025-10-17 02:15:45.490 00:05:57.902 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:16:45.470 00:05:56.945 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:17:44.738 00:05:00.717 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:22:21.548 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56576 1 40 1 2025-10-17 02:23:11.585 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36454 9 6412 1 2025-10-17 02:19:09.384 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 44 3244 1 2025-10-17 02:23:43.367 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:23:43.201 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:19:44.717 00:05:00.797 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:20:42.434 00:05:03.020 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:25:12.408 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35872 9 6412 1 2025-10-17 02:26:12.775 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 10 6452 1 2025-10-17 02:21:45.493 00:05:57.900 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:22:45.473 00:05:56.942 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:23:44.741 00:05:00.715 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:28:13.597 00:00:10.585 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-10-17 02:24:29.391 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2604 1 2025-10-17 02:28:42.645 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:28:42.694 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:25:44.719 00:05:00.798 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:30:14.621 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 10 6452 1 2025-10-17 02:26:42.436 00:05:03.021 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:31:15.037 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51614 10 6452 1 2025-10-17 02:32:25.760 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55722 1 40 1 2025-10-17 02:27:45.496 00:05:57.898 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:28:45.476 00:05:56.940 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:33:42.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:33:42.691 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:29:44.740 00:05:00.721 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:29:49.405 00:05:10.026 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2944 1 2025-10-17 02:34:16.209 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48288 10 6452 1 2025-10-17 02:35:16.609 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35144 10 6452 1 2025-10-17 02:31:44.721 00:05:00.800 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:36:31.463 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43058 1 40 1 2025-10-17 02:32:42.437 00:05:03.025 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:37:21.497 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41894 10 6452 1 2025-10-17 02:38:21.901 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41536 10 6452 1 2025-10-17 02:33:45.500 00:05:57.895 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:38:42.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:38:43.178 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:35:09.432 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-10-17 02:39:22.266 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48636 10 6452 1 2025-10-17 02:34:45.480 00:05:56.939 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:35:44.741 00:05:00.721 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:40:22.669 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43018 9 6412 1 2025-10-17 02:41:23.088 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51338 9 6412 1 2025-10-17 02:37:44.721 00:05:00.808 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:42:23.497 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60716 9 6412 1 2025-10-17 02:38:42.437 00:05:03.026 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:43:34.276 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52972 1 40 1 2025-10-17 02:43:42.782 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:43:43.071 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:44:34.644 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51698 1 40 1 2025-10-17 02:39:45.502 00:05:57.893 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:40:29.436 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2640 1 2025-10-17 02:45:35.049 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55228 1 40 1 2025-10-17 02:40:45.482 00:05:56.941 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:41:44.742 00:05:00.722 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:46:25.100 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59340 10 6452 1 2025-10-17 02:47:25.508 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 9 6412 1 2025-10-17 02:43:44.723 00:05:00.801 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:48:42.949 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:48:42.866 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:44:42.442 00:05:03.022 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:49:26.342 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43252 9 6412 1 2025-10-17 02:45:49.439 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3036 1 2025-10-17 02:50:37.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41846 1 40 1 2025-10-17 02:45:45.504 00:05:57.893 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:51:37.569 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40744 1 40 1 2025-10-17 02:46:45.485 00:05:56.939 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:47:44.742 00:05:00.722 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:53:27.975 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59380 9 6412 1 2025-10-17 02:53:43.017 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 02:53:43.017 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:49:44.726 00:05:00.799 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 02:54:38.741 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50960 1 40 1 2025-10-17 02:50:42.444 00:05:03.021 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 02:51:09.448 00:05:10.021 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2768 1 2025-10-17 02:55:39.158 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33004 1 40 1 2025-10-17 02:56:39.567 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59596 1 40 1 2025-10-17 02:51:45.505 00:05:57.892 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 02:57:29.606 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60096 9 6412 1 2025-10-17 02:52:45.484 00:05:56.941 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 02:53:44.744 00:05:00.721 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-17 02:58:43.514 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 02:58:40.373 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54264 1 40 1 2025-10-17 02:58:43.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 133, total bytes: 276927, total packets: 1406, avg bps: 585, avg pps: 0, avg bpp: 196 Time window: 2025-10-17 01:55:44 - 2025-10-17 02:58:45 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0047s User: 0.0008s Wall: 0.0020s flows/second: 65001.4 Runtime: 0.0021s