Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 16:59:21.386 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43218 10 6452 1 2025-10-19 16:59:57.989 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:59:57.893 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:00:21.799 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:58618 9 6412 1 2025-10-19 16:56:43.847 00:05:02.955 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 16:56:45.938 00:05:00.925 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:01:22.294 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32996 9 6412 1 2025-10-19 16:57:45.967 00:05:00.836 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 16:57:44.664 00:05:02.181 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:02:33.021 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 1 40 1 2025-10-19 16:57:46.826 00:05:57.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:03:33.504 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46242 1 40 1 2025-10-19 16:59:44.574 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-10-19 17:04:57.818 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:04:58.120 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:05:23.961 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:56792 9 6412 1 2025-10-19 17:06:24.339 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34216 10 6452 1 2025-10-19 17:02:43.850 00:05:02.955 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:02:45.947 00:05:00.917 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:07:24.702 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 9 6412 1 2025-10-19 17:03:44.665 00:05:02.180 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:03:45.967 00:05:00.837 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:08:35.506 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60110 1 40 1 2025-10-19 17:03:46.824 00:05:57.007 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:05:04.580 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-19 17:09:58.131 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:09:58.222 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:10:25.947 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 10 6452 1 2025-10-19 17:11:26.369 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59520 9 6412 1 2025-10-19 17:12:26.735 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43870 9 6412 1 2025-10-19 17:08:45.950 00:05:00.916 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:08:43.851 00:05:02.954 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:13:27.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36196 9 6412 1 2025-10-19 17:09:44.665 00:05:02.181 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:09:45.970 00:05:00.836 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:14:37.871 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 1 40 1 2025-10-19 17:10:24.590 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 44 3360 1 2025-10-19 17:09:46.825 00:05:57.011 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:14:58.382 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:14:58.005 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:15:27.909 00:00:10.717 TCP 1.101.0.1:3000 -> 23.104.0.1:51116 9 6412 1 2025-10-19 17:17:29.074 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39816 9 6412 1 2025-10-19 17:14:45.950 00:05:00.918 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:14:43.855 00:05:02.954 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:15:44.666 00:05:02.184 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:15:45.972 00:05:00.839 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:19:58.134 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:19:58.338 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:15:44.601 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-19 17:15:46.827 00:05:57.010 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:21:30.657 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56932 9 6412 1 2025-10-19 17:22:41.436 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45118 1 40 1 2025-10-19 17:23:31.476 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 9 6412 1 2025-10-19 17:24:42.218 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36202 1 40 1 2025-10-19 17:20:43.857 00:05:02.953 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:20:45.951 00:05:00.920 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:24:58.746 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:24:58.700 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:21:04.608 00:05:10.537 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2692 1 2025-10-19 17:21:44.667 00:05:02.183 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:25:32.252 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59970 10 6452 1 2025-10-19 17:21:45.972 00:05:00.840 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:21:46.830 00:05:57.007 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:26:32.655 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53576 10 6452 1 2025-10-19 17:27:33.055 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43826 10 6452 1 2025-10-19 17:28:33.464 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-10-19 17:29:33.904 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:42164 9 6412 1 2025-10-19 17:29:58.601 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:29:58.536 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:26:24.623 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-10-19 17:30:44.668 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37540 1 40 1 2025-10-19 17:26:45.952 00:05:00.919 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:26:43.859 00:05:02.952 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:27:45.973 00:05:00.838 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:31:34.704 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6452 1 2025-10-19 17:27:44.669 00:05:02.183 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:27:46.831 00:05:57.010 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:33:35.541 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43770 10 6452 1 2025-10-19 17:34:35.957 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52686 10 6452 1 2025-10-19 17:34:58.553 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:34:58.559 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:31:44.631 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-10-19 17:32:43.860 00:05:02.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:36:47.101 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56310 1 40 1 2025-10-19 17:32:45.954 00:05:00.924 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:33:44.670 00:05:02.190 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:33:45.975 00:05:00.844 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:37:48.074 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40640 1 40 1 2025-10-19 17:33:46.833 00:05:57.008 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:38:38.130 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:59640 11 10335 1 2025-10-19 17:39:48.982 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57764 1 40 1 2025-10-19 17:39:58.787 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:39:58.823 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:37:04.641 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2808 1 2025-10-19 17:38:45.956 00:05:00.923 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:38:43.861 00:05:02.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:42:39.791 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37288 10 6452 1 2025-10-19 17:39:44.670 00:05:02.190 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:39:45.978 00:05:00.842 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:43:40.210 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40260 9 6412 1 2025-10-19 17:39:46.840 00:05:57.002 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:44:58.822 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:44:58.912 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:45:51.410 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60046 1 40 1 2025-10-19 17:42:24.648 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2996 1 2025-10-19 17:46:51.791 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48538 1 40 1 2025-10-19 17:44:45.959 00:05:00.922 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:44:43.861 00:05:02.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:48:42.232 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41590 9 6412 1 2025-10-19 17:45:44.670 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:45:45.979 00:05:00.842 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:49:42.637 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34808 9 6412 1 2025-10-19 17:49:58.979 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:49:58.889 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:45:46.840 00:05:57.002 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:50:43.036 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55912 10 6452 1 2025-10-19 17:51:53.811 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 1 40 1 2025-10-19 17:47:44.653 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2772 1 2025-10-19 17:52:43.849 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37474 9 6412 1 2025-10-19 17:53:44.251 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 9 6412 1 2025-10-19 17:50:45.961 00:05:00.922 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:50:43.862 00:05:02.961 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:54:59.028 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:54:59.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:54:55.021 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 1 40 1 2025-10-19 17:51:45.981 00:05:00.842 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:51:44.672 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:51:46.841 00:05:57.002 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:56:45.893 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41572 10 6452 1 2025-10-19 17:53:04.655 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2464 1 Summary: total flows: 130, total bytes: 276655, total packets: 1400, avg bps: 599, avg pps: 0, avg bpp: 197 Time window: 2025-10-19 16:56:43 - 2025-10-19 17:58:14 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0047s User: 0.0000s Wall: 0.0024s flows/second: 53720.1 Runtime: 0.0024s