Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 17:59:01.454 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:58:54.003 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52934 10 6452 1 2025-10-17 17:59:01.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:55:44.991 00:05:00.883 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 18:00:05.162 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 1 40 1 2025-10-17 17:56:42.734 00:05:03.079 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 17:56:50.630 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-17 18:01:55.551 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44298 9 6412 1 2025-10-17 17:57:45.854 00:05:57.834 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 17:58:45.834 00:05:56.884 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:04:01.351 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:04:01.432 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:59:45.013 00:06:00.804 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-17 18:05:07.066 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39112 1 40 1 2025-10-17 18:01:44.998 00:05:00.879 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 18:05:57.127 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60068 9 6412 1 2025-10-17 18:02:10.639 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 46 3484 1 2025-10-17 18:02:42.737 00:05:03.079 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:07:07.896 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50282 1 40 1 2025-10-17 18:03:45.855 00:05:57.837 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:09:01.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:09:01.533 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:08:58.352 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38784 9 6412 1 2025-10-17 18:04:45.839 00:05:56.882 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:09:58.757 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 9 6412 1 2025-10-17 18:11:09.537 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53906 1 40 1 2025-10-17 18:07:30.643 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2488 1 2025-10-17 18:07:44.998 00:05:00.882 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 18:06:45.019 00:06:00.801 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-17 18:11:59.572 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36266 10 6452 1 2025-10-17 18:08:42.738 00:05:03.082 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:12:59.933 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57668 9 6412 1 2025-10-17 18:14:01.713 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:14:01.590 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:14:00.340 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44478 10 6452 1 2025-10-17 18:09:45.858 00:05:57.836 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:15:11.032 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37632 1 40 1 2025-10-17 18:10:45.839 00:05:56.886 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:16:11.442 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50460 1 40 1 2025-10-17 18:12:50.648 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2668 1 2025-10-17 18:17:01.485 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48838 10 6452 1 2025-10-17 18:13:44.999 00:05:00.883 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-17 18:13:45.020 00:06:00.802 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-17 18:14:42.743 00:05:03.079 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:19:01.625 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:19:01.527 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:19:02.258 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42156 9 6412 1 2025-10-17 18:15:45.863 00:05:57.847 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:21:13.387 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35070 1 40 1 2025-10-17 18:16:45.843 00:05:56.888 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:22:13.790 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35724 1 40 1 2025-10-17 18:18:10.651 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2740 1 2025-10-17 18:23:03.828 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54904 10 6452 1 2025-10-17 18:24:01.692 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:24:01.901 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:24:14.603 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35096 1 40 1 2025-10-17 18:20:42.748 00:05:03.075 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:19:45.001 00:06:00.883 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-17 18:25:04.641 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59732 10 6452 1 2025-10-17 18:20:45.021 00:06:00.803 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-17 18:26:15.370 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55400 1 40 1 2025-10-17 18:21:45.864 00:05:57.837 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:27:15.771 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39250 1 40 1 2025-10-17 18:22:45.843 00:05:56.890 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:23:30.656 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2336 1 2025-10-17 18:28:05.807 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 9 6412 1 2025-10-17 18:29:02.217 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:29:02.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:29:06.224 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 9 6412 1 2025-10-17 18:26:42.752 00:05:03.073 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:26:45.002 00:06:00.885 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-17 18:27:45.865 00:05:57.839 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:27:45.022 00:06:00.806 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-17 18:28:50.659 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3160 1 2025-10-17 18:33:07.788 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:36678 10 6452 1 2025-10-17 18:28:45.844 00:05:56.889 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:34:01.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:34:02.131 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:34:18.550 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55660 1 40 1 2025-10-17 18:35:18.951 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52624 1 40 1 2025-10-17 18:36:08.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48798 9 6412 1 2025-10-17 18:32:42.754 00:05:03.077 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:37:09.392 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55532 10 6452 1 2025-10-17 18:38:09.796 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50882 10 6452 1 2025-10-17 18:34:10.667 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2708 1 2025-10-17 18:33:45.868 00:05:57.838 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:33:45.004 00:06:00.884 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-17 18:39:02.190 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:39:02.195 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:39:10.205 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38788 9 6412 1 2025-10-17 18:34:45.848 00:05:56.888 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:34:45.025 00:06:00.805 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-17 18:38:42.754 00:05:03.075 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:43:11.801 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41312 10 6452 1 2025-10-17 18:39:30.675 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2772 1 2025-10-17 18:44:02.134 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:44:02.197 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:39:45.869 00:05:57.837 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:45:12.612 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47268 10 6452 1 2025-10-17 18:40:45.849 00:05:56.889 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:40:45.005 00:06:00.885 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-17 18:46:13.012 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54646 9 6412 1 2025-10-17 18:41:45.026 00:06:00.804 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-17 18:47:23.741 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40762 1 40 1 2025-10-17 18:48:13.778 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:50916 9 6412 1 2025-10-17 18:44:42.759 00:05:03.073 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:44:50.686 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2532 1 2025-10-17 18:49:02.382 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:49:02.290 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:49:14.202 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37648 10 6452 1 2025-10-17 18:45:45.870 00:05:57.838 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:51:15.009 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 9 6412 1 2025-10-17 18:46:45.849 00:05:56.890 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:52:25.780 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40188 1 40 1 2025-10-17 18:47:45.009 00:06:00.883 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-17 18:53:15.816 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45654 10 6452 1 2025-10-17 18:48:45.027 00:06:00.805 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-17 18:54:02.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:54:02.560 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:50:10.692 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-17 18:54:16.220 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51680 9 6412 1 2025-10-17 18:50:42.759 00:05:03.071 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-17 18:55:16.622 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 10 6452 1 2025-10-17 18:51:45.871 00:05:57.838 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-17 18:52:45.852 00:05:56.890 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-17 18:58:28.207 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 1 40 1 Summary: total flows: 126, total bytes: 252837, total packets: 1362, avg bps: 535, avg pps: 0, avg bpp: 185 Time window: 2025-10-17 17:55:44 - 2025-10-17 18:58:42 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0018s User: 0.0018s Wall: 0.0012s flows/second: 103786.8 Runtime: 0.0012s