Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 11:59:51.985 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:59:51.998 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:00:11.619 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 1 40 1 2025-10-19 11:56:24.171 00:05:00.985 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3128 1 2025-10-19 11:56:43.758 00:05:02.959 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 11:56:45.835 00:05:00.944 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:01:01.674 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42390 9 6412 1 2025-10-19 11:57:45.853 00:05:00.864 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 11:57:44.568 00:05:02.189 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 11:57:46.737 00:05:57.007 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:03:02.444 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38674 10 6452 1 2025-10-19 12:04:02.810 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 9 6412 1 2025-10-19 12:04:51.969 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:04:52.012 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:05:03.224 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 9 6412 1 2025-10-19 12:01:34.177 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-19 12:02:43.759 00:05:02.959 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:02:45.835 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:03:45.854 00:05:00.864 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:03:44.571 00:05:02.188 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:08:04.582 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36388 10 6452 1 2025-10-19 12:03:46.738 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:09:05.005 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43736 9 6412 1 2025-10-19 12:09:52.110 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:09:52.001 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:10:05.373 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56366 10 6452 1 2025-10-19 12:06:54.182 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2692 1 2025-10-19 12:11:16.099 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48904 1 40 1 2025-10-19 12:12:16.499 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58502 1 40 1 2025-10-19 12:08:45.837 00:05:00.946 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:08:43.764 00:05:02.959 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:13:06.545 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42974 9 6412 1 2025-10-19 12:09:45.857 00:05:00.866 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:09:44.571 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:14:17.351 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49554 1 40 1 2025-10-19 12:09:46.742 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:14:51.938 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:14:52.180 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:16:07.790 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55038 9 6412 1 2025-10-19 12:12:14.197 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2624 1 2025-10-19 12:17:08.200 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38230 10 6452 1 2025-10-19 12:18:08.558 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34588 10 6452 1 2025-10-19 12:14:43.765 00:05:02.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:14:45.838 00:05:00.945 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:15:44.574 00:05:02.189 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:15:45.858 00:05:00.865 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:19:52.315 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:19:52.378 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:20:09.371 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 9 6412 1 2025-10-19 12:15:46.742 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:21:09.770 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60140 9 6412 1 2025-10-19 12:17:34.205 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2388 1 2025-10-19 12:22:10.171 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40382 9 6412 1 2025-10-19 12:23:20.902 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36762 1 40 1 2025-10-19 12:24:21.310 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42430 1 40 1 2025-10-19 12:20:43.766 00:05:02.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:20:45.841 00:05:00.944 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:24:52.475 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:24:52.293 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:25:11.343 00:00:10.776 TCP 1.101.0.1:3000 -> 23.104.0.1:39612 9 6412 1 2025-10-19 12:21:44.575 00:05:02.189 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:21:45.860 00:05:00.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:26:12.156 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36420 10 6452 1 2025-10-19 12:21:46.743 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:22:54.215 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3088 1 2025-10-19 12:27:12.565 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37894 10 6452 1 2025-10-19 12:28:12.980 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35864 9 6412 1 2025-10-19 12:29:23.750 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33590 1 40 1 2025-10-19 12:29:52.498 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:29:52.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:30:24.169 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51034 1 40 1 2025-10-19 12:26:45.842 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:26:43.768 00:05:02.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:27:44.577 00:05:02.188 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:27:45.862 00:05:00.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:28:14.228 00:05:10.396 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2816 1 2025-10-19 12:32:24.890 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 1 40 1 2025-10-19 12:27:46.745 00:05:57.003 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:33:14.928 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51170 9 6412 1 2025-10-19 12:34:15.291 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:42028 9 6412 1 2025-10-19 12:34:52.647 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:34:52.705 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:35:15.666 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:44428 9 6412 1 2025-10-19 12:36:16.069 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6452 1 2025-10-19 12:32:43.768 00:05:02.961 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:32:45.842 00:05:00.947 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:37:16.466 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 9 6412 1 2025-10-19 12:33:45.864 00:05:00.868 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:33:44.580 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:33:34.230 00:05:10.461 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2708 1 2025-10-19 12:33:46.744 00:05:57.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:39:27.734 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 1 40 1 2025-10-19 12:39:52.860 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:39:52.779 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:40:28.137 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 1 40 1 2025-10-19 12:41:18.176 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58392 10 6452 1 2025-10-19 12:42:28.947 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36010 1 40 1 2025-10-19 12:38:45.845 00:05:00.947 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:38:43.769 00:05:02.962 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:38:54.238 00:05:10.038 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-10-19 12:43:18.983 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35400 10 6452 1 2025-10-19 12:39:45.867 00:05:00.864 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:39:44.580 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:44:19.338 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 10 6452 1 2025-10-19 12:39:46.752 00:05:56.998 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:44:52.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:44:52.785 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:45:30.116 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47280 1 40 1 2025-10-19 12:46:20.154 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59482 9 6412 1 2025-10-19 12:47:20.562 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34820 9 6412 1 2025-10-19 12:44:04.756 00:05:09.500 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2448 1 2025-10-19 12:44:43.769 00:05:02.963 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:44:45.850 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:49:21.331 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47542 10 6452 1 2025-10-19 12:45:44.580 00:05:02.192 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:45:45.870 00:05:00.862 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:49:52.707 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:49:52.802 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:45:46.751 00:05:57.000 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:52:22.560 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44744 9 6412 1 2025-10-19 12:49:24.256 00:05:10.001 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2600 1 2025-10-19 12:53:22.923 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:41382 9 6412 1 2025-10-19 12:50:45.851 00:05:00.942 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 12:50:43.772 00:05:02.962 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 12:54:53.138 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:54:52.895 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:55:23.700 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 9 6412 1 2025-10-19 12:51:45.871 00:05:00.862 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 12:51:44.581 00:05:02.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 12:56:24.409 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57114 9 6412 1 2025-10-19 12:51:46.752 00:05:57.000 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 12:57:35.187 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47068 1 40 1 2025-10-19 12:58:25.227 00:00:10.680 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 Summary: total flows: 133, total bytes: 291680, total packets: 1420, avg bps: 625, avg pps: 0, avg bpp: 205 Time window: 2025-10-19 11:56:24 - 2025-10-19 12:58:35 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0032s User: 0.0011s Wall: 0.0022s flows/second: 61375.6 Runtime: 0.0022s