Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 19:59:32.453 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 19:59:32.604 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 19:59:50.341 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51766 1 40 1 2025-10-18 19:56:43.410 00:05:02.975 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 19:56:45.527 00:05:00.919 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:00:40.375 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:38976 10 6452 1 2025-10-18 19:57:44.279 00:05:02.146 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 19:57:45.548 00:05:00.838 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:01:51.147 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57026 1 40 1 2025-10-18 19:58:02.764 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-18 19:57:46.405 00:05:56.987 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:02:51.622 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48022 1 40 1 2025-10-18 20:04:32.992 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:04:32.991 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:04:42.074 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35288 10 6452 1 2025-10-18 20:02:45.528 00:05:00.919 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:02:43.413 00:05:02.975 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:06:53.131 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57568 1 40 1 2025-10-18 20:03:22.766 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2532 1 2025-10-18 20:03:45.547 00:05:00.841 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:03:44.281 00:05:02.148 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:07:43.170 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 10 6452 1 2025-10-18 20:03:46.405 00:05:56.990 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:08:53.899 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54292 1 40 1 2025-10-18 20:09:33.476 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:09:33.479 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:09:43.938 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40980 10 6452 1 2025-10-18 20:10:44.307 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52640 10 6452 1 2025-10-18 20:11:44.741 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39212 10 6452 1 2025-10-18 20:08:43.417 00:05:02.972 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:08:45.528 00:05:00.922 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:08:42.770 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-10-18 20:09:44.281 00:05:02.148 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:09:45.547 00:05:00.842 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:13:45.481 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55728 10 6452 1 2025-10-18 20:14:32.901 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:14:32.900 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:09:46.408 00:05:56.989 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:14:45.891 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50702 9 6412 1 2025-10-18 20:15:46.303 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-10-18 20:16:46.711 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47860 9 6412 1 2025-10-18 20:17:47.130 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50720 10 6452 1 2025-10-18 20:14:02.771 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 46 3484 1 2025-10-18 20:14:43.417 00:05:02.973 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:14:45.529 00:05:00.922 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:18:57.858 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44272 1 40 1 2025-10-18 20:19:32.692 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:19:33.026 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:15:44.299 00:05:02.134 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:15:45.549 00:05:00.844 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:19:58.268 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55664 1 40 1 2025-10-18 20:15:46.409 00:05:56.989 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:20:58.677 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40334 1 40 1 2025-10-18 20:21:48.713 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34122 10 6452 1 2025-10-18 20:19:22.778 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2488 1 2025-10-18 20:23:59.897 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46242 1 40 1 2025-10-18 20:24:33.481 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:24:33.321 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:20:45.530 00:05:00.923 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:20:43.418 00:05:02.975 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:24:49.933 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57662 10 6452 1 2025-10-18 20:21:44.299 00:05:02.135 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:21:45.550 00:05:00.843 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:25:50.348 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55842 9 6412 1 2025-10-18 20:21:46.413 00:05:56.986 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:27:51.132 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42688 9 6412 1 2025-10-18 20:24:42.782 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2604 1 2025-10-18 20:28:51.537 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 9 6412 1 2025-10-18 20:29:33.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:29:33.379 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:30:02.335 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 1 40 1 2025-10-18 20:26:45.531 00:05:00.923 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:26:43.418 00:05:02.976 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:30:52.371 00:00:14.824 TCP 1.101.0.1:3000 -> 23.104.0.1:41534 10 6452 1 2025-10-18 20:27:45.551 00:05:00.843 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:27:44.301 00:05:02.134 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:31:57.234 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58704 9 6412 1 2025-10-18 20:27:46.413 00:05:56.987 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:32:57.631 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39166 10 6452 1 2025-10-18 20:34:08.405 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58212 1 40 1 2025-10-18 20:30:02.787 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2740 1 2025-10-18 20:34:33.171 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:34:33.178 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:34:58.447 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51680 9 6412 1 2025-10-18 20:36:09.212 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59318 1 40 1 2025-10-18 20:32:45.532 00:05:00.926 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:32:43.420 00:05:02.979 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:37:09.615 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55700 1 40 1 2025-10-18 20:33:44.302 00:05:02.139 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:33:45.553 00:05:00.848 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:38:10.024 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45288 1 40 1 2025-10-18 20:33:46.418 00:05:56.984 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:39:00.062 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47472 10 6452 1 2025-10-18 20:35:22.791 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-10-18 20:39:33.685 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:39:33.857 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:40:00.422 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50892 9 6412 1 2025-10-18 20:41:00.831 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49818 9 6412 1 2025-10-18 20:42:01.236 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44618 9 6412 1 2025-10-18 20:38:43.422 00:05:02.979 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:38:45.534 00:05:00.928 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:43:01.634 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38460 9 6412 1 2025-10-18 20:39:44.303 00:05:02.139 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:39:45.553 00:05:00.849 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:44:01.988 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51274 10 6452 1 2025-10-18 20:44:33.499 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:44:33.592 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:39:46.421 00:05:56.985 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:40:42.796 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2728 1 2025-10-18 20:45:12.723 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40248 1 40 1 2025-10-18 20:47:13.534 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44984 1 40 1 2025-10-18 20:44:45.534 00:05:00.928 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:44:43.427 00:05:02.976 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:49:14.346 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59256 1 40 1 2025-10-18 20:49:33.613 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:49:33.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:45:44.305 00:05:02.138 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:45:45.555 00:05:00.848 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:50:04.386 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35576 10 6452 1 2025-10-18 20:46:02.803 00:05:10.960 OSPF 23.0.7.1:0 -> 224.0.0.5:0 45 3308 1 2025-10-18 20:45:46.422 00:05:56.984 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:52:05.163 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48038 9 6412 1 2025-10-18 20:53:05.587 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57512 9 6412 1 2025-10-18 20:54:33.826 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:54:33.663 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:50:45.535 00:05:00.930 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-18 20:50:43.426 00:05:02.978 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-18 20:55:06.394 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59124 10 6452 1 2025-10-18 20:51:22.805 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-10-18 20:51:44.305 00:05:02.139 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-18 20:51:45.556 00:05:00.849 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-18 20:51:46.423 00:05:56.984 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-18 20:57:17.532 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 1 40 1 Summary: total flows: 133, total bytes: 266412, total packets: 1394, avg bps: 582, avg pps: 0, avg bpp: 191 Time window: 2025-10-18 19:56:43 - 2025-10-18 20:57:43 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0027s User: 0.0027s Wall: 0.0017s flows/second: 77596.7 Runtime: 0.0017s