Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 07:59:46.919 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 07:59:46.921 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:00:16.707 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53086 10 6452 1 2025-10-19 07:56:45.754 00:05:00.946 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 07:56:43.681 00:05:02.959 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 07:56:43.806 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2740 1 2025-10-19 08:01:27.503 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59706 1 40 1 2025-10-19 07:57:45.775 00:05:00.865 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 07:57:44.494 00:05:02.186 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:02:17.540 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51298 9 6412 1 2025-10-19 07:57:46.659 00:05:57.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:03:17.942 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-10-19 08:04:18.356 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47266 10 6452 1 2025-10-19 08:04:46.936 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:04:47.042 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:02:03.808 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-10-19 08:06:19.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52442 9 6412 1 2025-10-19 08:02:43.682 00:05:02.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:02:45.756 00:05:00.948 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:07:19.532 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56876 9 6412 1 2025-10-19 08:03:44.496 00:05:02.194 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:03:45.776 00:05:00.874 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:03:46.660 00:05:57.008 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:09:47.305 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:09:47.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:10:31.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38062 1 40 1 2025-10-19 08:07:23.817 00:05:10.709 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3196 1 2025-10-19 08:08:45.759 00:05:00.953 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:08:43.688 00:05:02.963 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:13:22.086 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57926 9 6412 1 2025-10-19 08:09:44.498 00:05:02.194 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:09:45.779 00:05:00.873 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:14:22.445 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52578 10 6452 1 2025-10-19 08:09:46.670 00:05:56.998 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:14:47.402 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:14:47.402 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:15:22.855 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50614 9 6412 1 2025-10-19 08:16:33.599 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38470 1 40 1 2025-10-19 08:12:43.821 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-19 08:18:24.553 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51100 9 6412 1 2025-10-19 08:14:45.759 00:05:00.953 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:14:43.689 00:05:02.963 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:19:35.339 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56880 1 40 1 2025-10-19 08:19:47.412 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:15:45.779 00:05:00.874 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:19:47.333 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:15:44.499 00:05:02.195 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:20:25.377 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58278 9 6412 1 2025-10-19 08:15:46.672 00:05:56.999 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:21:36.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 1 40 1 2025-10-19 08:18:03.832 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2708 1 2025-10-19 08:24:26.975 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35326 9 6412 1 2025-10-19 08:20:45.761 00:05:00.953 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:24:47.404 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:20:43.692 00:05:02.963 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:24:47.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:25:37.751 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60872 1 40 1 2025-10-19 08:21:44.499 00:05:02.195 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:21:45.781 00:05:00.874 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:21:46.673 00:05:57.003 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:23:23.838 00:05:00.895 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2620 1 2025-10-19 08:27:28.163 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37316 9 6412 1 2025-10-19 08:28:28.564 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50442 10 6452 1 2025-10-19 08:29:28.970 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33264 9 6412 1 2025-10-19 08:29:47.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:29:47.647 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:30:29.330 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45904 9 6412 1 2025-10-19 08:26:43.695 00:05:02.961 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:26:45.762 00:05:00.954 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:31:29.738 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39718 10 6452 1 2025-10-19 08:27:45.785 00:05:00.871 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:27:44.503 00:05:02.195 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:27:46.674 00:05:57.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:28:33.842 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2468 1 2025-10-19 08:32:30.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50162 10 6452 1 2025-10-19 08:33:30.551 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40696 10 6452 1 2025-10-19 08:34:30.954 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:49126 10 6452 1 2025-10-19 08:34:47.878 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:34:47.818 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:35:31.338 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40234 10 6452 1 2025-10-19 08:36:31.739 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-10-19 08:32:45.765 00:05:00.952 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:32:43.698 00:05:02.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:37:32.127 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43540 9 6412 1 2025-10-19 08:33:44.501 00:05:02.196 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:33:45.786 00:05:00.871 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:33:53.847 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2808 1 2025-10-19 08:38:32.546 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:36882 12 10375 1 2025-10-19 08:33:46.677 00:05:57.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:39:43.394 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44446 1 40 1 2025-10-19 08:39:47.601 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:39:47.810 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:38:45.768 00:05:00.951 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:38:43.701 00:05:02.959 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:39:13.854 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2996 1 2025-10-19 08:39:45.789 00:05:00.870 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:43:34.688 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46194 10 6452 1 2025-10-19 08:39:44.505 00:05:02.195 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:39:46.677 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:44:47.845 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:44:47.912 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:44:45.444 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51984 1 40 1 2025-10-19 08:45:45.850 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56326 1 40 1 2025-10-19 08:46:35.891 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50580 10 6452 1 2025-10-19 08:47:46.664 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57772 1 40 1 2025-10-19 08:44:33.862 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2504 1 2025-10-19 08:48:36.701 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41330 10 6452 1 2025-10-19 08:44:43.702 00:05:02.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:44:45.769 00:05:00.952 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:45:44.506 00:05:02.195 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:49:48.836 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:45:45.789 00:05:00.872 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:49:48.153 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:45:46.678 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:51:37.907 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:39632 10 6452 1 2025-10-19 08:52:38.278 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49002 10 6452 1 2025-10-19 08:53:38.688 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60376 10 6452 1 2025-10-19 08:49:53.870 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-10-19 08:54:48.066 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:54:39.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38196 10 6452 1 2025-10-19 08:50:43.703 00:05:02.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:54:47.930 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:50:45.772 00:05:00.950 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 08:55:39.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54804 9 6412 1 2025-10-19 08:51:45.794 00:05:00.869 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 08:51:44.509 00:05:02.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:51:46.680 00:05:57.006 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 08:56:39.926 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56386 10 6452 1 2025-10-19 08:57:40.292 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:51744 11 10335 1 Summary: total flows: 129, total bytes: 299574, total packets: 1427, avg bps: 653, avg pps: 0, avg bpp: 209 Time window: 2025-10-19 07:56:43 - 2025-10-19 08:57:50 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0041s User: 0.0008s Wall: 0.0017s flows/second: 74007.0 Runtime: 0.0018s