Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 13:58:50.088 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53616 9 6412 1 2025-10-18 13:59:25.500 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:59:25.569 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:55:42.274 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2336 1 2025-10-18 13:59:50.496 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45444 9 6412 1 2025-10-18 13:56:45.407 00:05:00.909 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 13:56:43.222 00:05:03.035 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:00:50.858 00:00:10.661 TCP 1.101.0.1:3000 -> 23.104.0.1:40514 9 6412 1 2025-10-18 13:57:45.427 00:05:00.830 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 13:57:44.110 00:05:02.187 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:01:51.555 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34936 9 6412 1 2025-10-18 13:57:46.277 00:05:56.927 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:02:51.960 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50954 9 6412 1 2025-10-18 14:03:52.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43446 10 6452 1 2025-10-18 14:04:25.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:04:25.421 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:04:52.779 00:00:11.029 TCP 1.101.0.1:3000 -> 23.104.0.1:45316 9 6412 1 2025-10-18 14:01:02.287 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 45 3436 1 2025-10-18 14:05:53.849 00:00:10.566 TCP 1.101.0.1:3000 -> 23.104.0.1:43992 9 6412 1 2025-10-18 14:02:45.410 00:05:00.908 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:02:43.223 00:05:03.034 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:03:45.431 00:05:00.827 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:03:44.111 00:05:02.187 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:08:05.254 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40480 1 40 1 2025-10-18 14:03:46.278 00:05:56.947 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:08:55.294 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56618 10 6452 1 2025-10-18 14:09:25.616 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:09:25.719 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:09:55.700 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49716 10 6452 1 2025-10-18 14:06:22.300 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2632 1 2025-10-18 14:11:06.493 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 1 40 1 2025-10-18 14:12:06.947 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59164 1 40 1 2025-10-18 14:08:45.414 00:05:00.905 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:08:43.245 00:05:03.014 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:12:56.985 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58696 10 6452 1 2025-10-18 14:09:44.111 00:05:02.188 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:09:45.434 00:05:00.826 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:14:07.716 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33820 1 40 1 2025-10-18 14:14:25.680 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:14:25.680 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:09:46.277 00:05:56.948 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:14:57.754 00:00:10.987 TCP 1.101.0.1:3000 -> 23.104.0.1:51998 10 6452 1 2025-10-18 14:11:42.303 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-10-18 14:15:58.778 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57110 10 6452 1 2025-10-18 14:16:59.194 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38226 10 6452 1 2025-10-18 14:17:59.595 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52848 9 6412 1 2025-10-18 14:14:43.245 00:05:03.017 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:14:45.413 00:05:00.909 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:19:00.003 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33262 10 6452 1 2025-10-18 14:19:25.773 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:19:25.859 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:15:44.114 00:05:02.189 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:15:45.436 00:05:00.827 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:20:00.410 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44548 10 6452 1 2025-10-18 14:15:46.279 00:05:56.947 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:17:02.313 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2840 1 2025-10-18 14:21:11.184 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45484 1 40 1 2025-10-18 14:22:11.589 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52808 1 40 1 2025-10-18 14:23:01.629 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38032 10 6452 1 2025-10-18 14:24:12.398 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55882 1 40 1 2025-10-18 14:24:25.721 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:24:25.809 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:20:45.416 00:05:00.907 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:20:43.246 00:05:03.016 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:25:02.439 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59362 9 6412 1 2025-10-18 14:21:45.437 00:05:00.827 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:21:44.125 00:05:02.179 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:26:02.801 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50620 10 6452 1 2025-10-18 14:22:22.326 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2336 1 2025-10-18 14:21:46.283 00:05:56.946 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:27:13.585 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55434 1 40 1 2025-10-18 14:28:03.625 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:38248 11 10335 1 2025-10-18 14:29:04.144 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39496 10 6452 1 2025-10-18 14:29:25.909 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:29:26.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:30:04.549 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41430 10 6452 1 2025-10-18 14:26:43.253 00:05:03.011 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:26:45.423 00:05:00.901 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:31:15.327 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50964 1 40 1 2025-10-18 14:27:45.440 00:05:00.824 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:27:44.127 00:05:02.177 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:27:42.331 00:05:10.015 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2888 1 2025-10-18 14:27:46.284 00:05:56.945 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:34:06.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53650 10 6452 1 2025-10-18 14:34:26.280 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:34:26.226 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:35:06.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58368 10 6452 1 2025-10-18 14:36:06.946 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40660 10 6452 1 2025-10-18 14:32:45.422 00:05:00.903 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:32:43.250 00:05:03.016 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:33:02.338 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2852 1 2025-10-18 14:37:18.228 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45072 1 40 1 2025-10-18 14:33:45.442 00:05:00.823 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:33:44.130 00:05:02.175 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:38:18.600 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54610 1 40 1 2025-10-18 14:33:46.284 00:05:56.946 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:39:08.638 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43902 12 6556 1 2025-10-18 14:39:26.635 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:39:26.548 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:40:09.043 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38512 10 6452 1 2025-10-18 14:41:09.447 00:00:10.503 TCP 1.101.0.1:3000 -> 23.104.0.1:36364 10 6452 1 2025-10-18 14:38:22.341 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2772 1 2025-10-18 14:38:43.249 00:05:03.016 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:38:45.422 00:05:00.904 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:43:20.710 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49350 1 40 1 2025-10-18 14:39:45.443 00:05:00.824 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:39:44.133 00:05:02.173 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:44:10.746 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53626 10 6452 1 2025-10-18 14:44:26.277 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:44:26.106 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:39:46.284 00:05:56.948 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:45:21.473 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58028 1 40 1 2025-10-18 14:46:11.511 00:00:10.756 TCP 1.101.0.1:3000 -> 23.104.0.1:33610 10 6452 1 2025-10-18 14:47:12.303 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55742 9 6412 1 2025-10-18 14:43:42.349 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2452 1 2025-10-18 14:48:12.713 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49138 9 6412 1 2025-10-18 14:44:45.423 00:05:00.904 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:44:43.251 00:05:03.015 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:49:13.072 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49772 10 6452 1 2025-10-18 14:49:26.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:49:26.291 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:45:44.135 00:05:02.172 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:45:45.443 00:05:00.824 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:45:46.286 00:05:56.947 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:51:13.879 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44062 9 6412 1 2025-10-18 14:52:24.613 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33952 1 40 1 2025-10-18 14:49:02.357 00:05:10.029 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2688 1 2025-10-18 14:53:14.652 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47794 9 6412 1 2025-10-18 14:54:26.483 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 14:54:15.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34380 9 6412 1 2025-10-18 14:54:26.611 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 14:50:43.252 00:05:03.016 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 14:50:45.425 00:05:00.903 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 14:51:45.446 00:05:00.824 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 14:51:44.137 00:05:02.174 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 14:51:46.286 00:05:56.947 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 14:57:26.614 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37824 1 40 1 2025-10-18 14:58:27.022 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40416 1 40 1 2025-10-18 14:54:22.367 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2544 1 Summary: total flows: 139, total bytes: 318039, total packets: 1500, avg bps: 664, avg pps: 0, avg bpp: 212 Time window: 2025-10-18 13:55:42 - 2025-10-18 14:59:32 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0025s User: 0.0025s Wall: 0.0023s flows/second: 59248.8 Runtime: 0.0024s