Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 16:59:28.640 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:59:28.641 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:00:25.067 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52210 1 40 1 2025-10-18 16:56:43.327 00:05:02.994 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 16:56:45.469 00:05:00.913 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 16:56:52.494 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2852 1 2025-10-18 17:01:15.119 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58616 10 6452 1 2025-10-18 16:57:44.214 00:05:02.148 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 16:57:45.489 00:05:00.833 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 16:57:46.339 00:05:56.971 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:03:26.399 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 1 40 1 2025-10-18 17:04:29.153 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:04:28.895 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:04:26.803 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49518 1 40 1 2025-10-18 17:05:16.838 00:00:10.623 TCP 1.101.0.1:3000 -> 23.104.0.1:45878 10 6452 1 2025-10-18 17:02:12.506 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2708 1 2025-10-18 17:06:17.499 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59136 9 6412 1 2025-10-18 17:02:45.470 00:05:00.912 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:02:43.331 00:05:02.993 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:03:44.216 00:05:02.149 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:03:45.490 00:05:00.834 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:08:18.325 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 9 6412 1 2025-10-18 17:03:46.341 00:05:56.970 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:09:29.389 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:09:29.294 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:09:18.688 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48146 10 6452 1 2025-10-18 17:11:19.482 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38646 10 6452 1 2025-10-18 17:07:32.514 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2596 1 2025-10-18 17:08:43.331 00:05:02.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:08:45.470 00:05:00.918 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:13:30.627 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44584 1 40 1 2025-10-18 17:09:45.490 00:05:00.838 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:09:44.217 00:05:02.152 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:14:29.297 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:14:29.375 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:09:46.345 00:05:56.968 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:15:21.027 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43856 10 6452 1 2025-10-18 17:16:21.429 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48426 9 6412 1 2025-10-18 17:12:52.520 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-18 17:17:21.837 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42650 10 6452 1 2025-10-18 17:18:22.238 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48044 10 6452 1 2025-10-18 17:14:43.334 00:05:02.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:14:45.471 00:05:00.918 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:19:29.496 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:19:29.448 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:19:22.599 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56708 10 6452 1 2025-10-18 17:15:45.491 00:05:00.838 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:15:44.218 00:05:02.152 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:20:33.366 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 1 40 1 2025-10-18 17:15:46.349 00:05:56.965 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:18:12.534 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-10-18 17:23:34.591 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33870 1 40 1 2025-10-18 17:24:29.518 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:24:29.353 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:20:45.482 00:05:00.911 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:20:43.333 00:05:02.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:25:25.037 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58128 10 6452 1 2025-10-18 17:21:44.218 00:05:02.154 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:21:45.495 00:05:00.838 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:26:35.817 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60890 1 40 1 2025-10-18 17:21:46.349 00:05:56.964 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:23:32.545 00:05:10.216 OSPF 23.0.7.1:0 -> 224.0.0.5:0 44 3296 1 2025-10-18 17:28:26.288 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50370 9 6412 1 2025-10-18 17:29:29.957 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:29:29.905 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:29:26.701 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46902 10 6452 1 2025-10-18 17:30:27.121 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40298 10 6452 1 2025-10-18 17:26:45.475 00:05:00.918 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:26:43.333 00:05:03.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:31:27.525 00:00:18.837 TCP 1.101.0.1:3000 -> 23.104.0.1:50104 10 6452 1 2025-10-18 17:27:45.496 00:05:00.837 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:27:44.220 00:05:02.154 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:27:46.352 00:05:56.963 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:28:52.555 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2424 1 2025-10-18 17:33:47.163 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49898 1 40 1 2025-10-18 17:34:29.415 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:34:29.525 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:35:37.568 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38348 10 6452 1 2025-10-18 17:36:37.972 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50804 9 6412 1 2025-10-18 17:32:43.335 00:05:03.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:32:45.478 00:05:00.916 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:33:44.221 00:05:02.154 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:33:45.498 00:05:00.837 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:34:12.562 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2668 1 2025-10-18 17:33:46.354 00:05:56.965 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:39:29.673 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:39:29.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:39:39.130 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43376 10 6452 1 2025-10-18 17:40:39.530 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52610 10 6452 1 2025-10-18 17:41:39.938 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49824 10 6452 1 2025-10-18 17:38:45.479 00:05:00.917 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:38:43.335 00:05:03.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:42:50.741 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46180 1 40 1 2025-10-18 17:39:32.572 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-10-18 17:39:44.227 00:05:02.149 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:39:45.499 00:05:00.837 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:43:40.782 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33686 10 6452 1 2025-10-18 17:44:30.351 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:44:30.358 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:39:46.355 00:05:56.965 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:44:51.556 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50236 1 40 1 2025-10-18 17:45:41.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37060 9 6412 1 2025-10-18 17:46:42.001 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33842 9 6412 1 2025-10-18 17:47:52.775 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56524 1 40 1 2025-10-18 17:44:45.479 00:05:00.919 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:44:43.340 00:05:02.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:44:52.578 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-10-18 17:49:30.071 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:49:30.076 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:45:44.230 00:05:02.149 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:45:45.500 00:05:00.839 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:49:53.573 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32826 1 40 1 2025-10-18 17:45:46.357 00:05:56.969 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:50:53.984 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 1 40 1 2025-10-18 17:51:44.019 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50624 10 6452 1 2025-10-18 17:50:12.585 00:05:10.015 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3132 1 2025-10-18 17:54:29.960 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 17:54:30.099 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 17:50:45.486 00:05:00.913 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 17:50:43.346 00:05:02.994 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 17:54:45.213 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 10 6452 1 2025-10-18 17:51:44.230 00:05:02.149 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 17:51:45.507 00:05:00.832 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 17:55:55.979 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58596 1 40 1 2025-10-18 17:51:46.359 00:05:56.971 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 17:57:46.416 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34060 9 6412 1 Summary: total flows: 126, total bytes: 247184, total packets: 1364, avg bps: 538, avg pps: 0, avg bpp: 181 Time window: 2025-10-18 16:56:43 - 2025-10-18 17:57:56 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0047s User: 0.0009s Wall: 0.0017s flows/second: 73862.0 Runtime: 0.0017s