Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 08:58:40.771 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 10 6452 1 2025-10-19 08:55:13.884 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2696 1 2025-10-19 08:59:48.182 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:59:48.176 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:56:43.706 00:05:02.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 08:56:45.773 00:05:00.951 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:00:51.898 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48344 1 40 1 2025-10-19 08:57:44.510 00:05:02.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 08:57:45.795 00:05:00.870 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:01:41.936 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6452 1 2025-10-19 08:57:46.681 00:05:57.007 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:02:42.369 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53502 9 6412 1 2025-10-19 09:03:42.733 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:51942 9 6412 1 2025-10-19 09:00:33.886 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-19 09:04:48.256 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:04:48.262 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:04:43.160 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54038 10 6452 1 2025-10-19 09:05:53.942 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51874 1 40 1 2025-10-19 09:02:43.708 00:05:02.956 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:02:45.775 00:05:00.952 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:03:45.795 00:05:00.869 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:03:44.512 00:05:02.192 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:07:44.393 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39640 9 6412 1 2025-10-19 09:03:46.684 00:05:57.007 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:09:48.638 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:09:48.379 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:05:53.896 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 46 3484 1 2025-10-19 09:11:45.936 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53230 10 6452 1 2025-10-19 09:08:43.711 00:05:02.955 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:08:45.777 00:05:00.949 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:12:46.333 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36696 9 6412 1 2025-10-19 09:09:45.796 00:05:00.870 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:09:44.514 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:09:46.685 00:05:57.010 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:14:48.579 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:14:48.508 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:14:47.123 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50712 9 6412 1 2025-10-19 09:11:13.902 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2568 1 2025-10-19 09:15:47.486 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33474 10 6452 1 2025-10-19 09:14:45.779 00:05:00.948 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:14:43.715 00:05:02.952 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:18:48.646 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60538 9 6412 1 2025-10-19 09:15:44.515 00:05:02.192 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:19:48.723 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:15:45.799 00:05:00.868 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:19:48.493 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:19:49.015 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57058 10 6452 1 2025-10-19 09:16:33.911 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-10-19 09:15:46.686 00:05:57.012 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:21:49.742 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43632 10 6452 1 2025-10-19 09:23:01.301 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60372 1 40 1 2025-10-19 09:20:45.781 00:05:00.948 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:24:48.797 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:24:48.612 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:20:43.716 00:05:02.953 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:24:51.734 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46538 10 6452 1 2025-10-19 09:21:44.516 00:05:02.192 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:21:45.801 00:05:00.868 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:25:52.138 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56432 10 6452 1 2025-10-19 09:21:53.916 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-10-19 09:21:46.688 00:05:57.009 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:27:02.915 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 1 40 1 2025-10-19 09:28:03.333 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54234 1 40 1 2025-10-19 09:28:53.365 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 10 6452 1 2025-10-19 09:29:49.136 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:29:48.968 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:29:53.767 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40754 9 6412 1 2025-10-19 09:26:45.782 00:05:00.950 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:26:43.718 00:05:02.955 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:30:54.166 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34592 10 6452 1 2025-10-19 09:27:13.919 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-19 09:27:45.802 00:05:00.870 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:27:44.522 00:05:02.190 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:31:54.574 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40122 10 6452 1 2025-10-19 09:27:46.690 00:05:57.008 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:32:54.972 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57732 10 6452 1 2025-10-19 09:33:55.387 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49706 10 6452 1 2025-10-19 09:34:48.879 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:34:49.080 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:34:55.787 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35910 10 6452 1 2025-10-19 09:35:56.155 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53446 10 6452 1 2025-10-19 09:32:33.925 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2872 1 2025-10-19 09:32:45.783 00:05:00.952 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:32:43.719 00:05:02.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:33:44.525 00:05:02.190 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:33:45.804 00:05:00.872 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:33:46.693 00:05:57.006 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:38:57.360 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50362 9 6412 1 2025-10-19 09:39:49.170 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:39:48.984 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:40:08.147 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40342 1 40 1 2025-10-19 09:40:58.189 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59850 9 6412 1 2025-10-19 09:37:53.929 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2852 1 2025-10-19 09:41:58.594 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 10 6452 1 2025-10-19 09:38:45.784 00:05:00.952 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:38:43.719 00:05:02.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:39:44.527 00:05:02.189 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:39:45.805 00:05:00.872 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:39:46.697 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:44:48.939 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:44:49.124 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:45:10.192 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53754 1 40 1 2025-10-19 09:46:00.234 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43604 9 6412 1 2025-10-19 09:47:00.588 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36382 9 6412 1 2025-10-19 09:43:13.934 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2708 1 2025-10-19 09:48:11.374 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54398 1 40 1 2025-10-19 09:44:45.786 00:05:00.952 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:44:43.720 00:05:02.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:49:01.415 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32912 9 6412 1 2025-10-19 09:49:49.309 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:45:45.806 00:05:00.874 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:49:49.381 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:45:44.527 00:05:02.192 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:50:01.818 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53080 9 6412 1 2025-10-19 09:45:46.696 00:05:57.008 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:51:12.595 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42790 1 40 1 2025-10-19 09:48:33.939 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-19 09:53:13.402 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48274 1 40 1 2025-10-19 09:54:13.813 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59076 1 40 1 2025-10-19 09:50:45.787 00:05:00.960 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 09:54:49.445 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:50:43.723 00:05:02.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 09:54:49.156 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:55:03.852 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52160 10 6452 1 2025-10-19 09:51:45.807 00:05:00.873 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 09:51:44.530 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 09:56:04.278 00:00:16.756 TCP 1.101.0.1:3000 -> 23.104.0.1:41680 10 6452 1 2025-10-19 09:51:46.699 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 09:57:11.083 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58476 10 6452 1 2025-10-19 09:53:53.946 00:05:10.015 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2532 1 2025-10-19 09:58:11.440 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36482 9 6412 1 Summary: total flows: 131, total bytes: 294740, total packets: 1466, avg bps: 615, avg pps: 0, avg bpp: 201 Time window: 2025-10-19 08:55:13 - 2025-10-19 09:59:03 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0032s User: 0.0016s Wall: 0.0019s flows/second: 70280.6 Runtime: 0.0019s