Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 03:59:05.479 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50324 10 6452 1 2025-10-21 04:00:05.881 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54066 10 6452 1 2025-10-21 04:00:39.849 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:00:39.756 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 03:56:44.522 00:05:03.004 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:01:16.668 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45918 1 40 1 2025-10-21 03:57:45.314 00:05:02.253 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 03:57:46.643 00:05:00.944 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 03:57:44.503 00:05:03.044 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:02:06.701 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53028 9 6412 1 2025-10-21 03:58:37.684 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 46 3444 1 2025-10-21 04:03:07.134 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48152 10 6452 1 2025-10-21 03:59:46.664 00:05:00.864 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:04:07.541 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:51946 12 10375 1 2025-10-21 04:05:18.348 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55276 1 40 1 2025-10-21 04:05:39.955 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:05:40.208 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:02:44.528 00:05:03.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:07:19.073 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 1 40 1 2025-10-21 04:03:45.318 00:05:02.251 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:03:46.646 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:03:44.511 00:05:03.038 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:03:57.698 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 33 2240 1 2025-10-21 04:08:19.443 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48974 1 40 1 2025-10-21 04:09:09.482 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35730 10 6452 1 2025-10-21 04:05:46.665 00:05:00.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:10:09.896 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40270 9 6412 1 2025-10-21 04:10:40.058 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:10:40.358 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:11:10.257 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:35580 9 6412 1 2025-10-21 04:08:44.530 00:05:02.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:13:11.132 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39756 9 6412 1 2025-10-21 04:09:17.708 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3076 1 2025-10-21 04:09:45.318 00:05:02.253 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:09:46.647 00:05:00.944 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:09:44.510 00:05:03.041 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:14:11.552 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41478 9 6412 1 2025-10-21 04:15:11.979 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52360 9 6412 1 2025-10-21 04:15:40.484 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:15:40.574 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:11:46.667 00:05:00.865 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:16:12.381 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35742 9 6412 1 2025-10-21 04:18:13.631 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:59912 11 10335 1 2025-10-21 04:14:44.536 00:05:02.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:14:37.711 00:05:10.001 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-10-21 04:15:45.320 00:05:02.254 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:15:46.650 00:05:00.944 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:15:44.518 00:05:03.036 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:20:14.500 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 10 6452 1 2025-10-21 04:20:40.380 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:20:40.452 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:21:14.900 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36142 10 6452 1 2025-10-21 04:17:46.671 00:05:00.864 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:22:15.307 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40580 9 6412 1 2025-10-21 04:23:15.708 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56504 9 6412 1 2025-10-21 04:19:57.712 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2468 1 2025-10-21 04:24:26.490 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 1 40 1 2025-10-21 04:20:44.538 00:05:02.997 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:25:40.603 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:25:40.437 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:21:45.319 00:05:02.256 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:21:46.650 00:05:00.945 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:21:44.518 00:05:03.037 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:26:22.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35200 10 6452 1 2025-10-21 04:23:46.671 00:05:00.866 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:28:22.916 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:35790 12 10369 1 2025-10-21 04:25:17.717 00:05:10.093 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3096 1 2025-10-21 04:30:23.758 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43664 10 6452 1 2025-10-21 04:30:40.477 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:30:40.571 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:26:44.542 00:05:02.997 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:31:24.165 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50096 9 6412 1 2025-10-21 04:27:45.321 00:05:02.258 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:27:46.655 00:05:00.944 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:27:44.523 00:05:03.036 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:32:34.927 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45558 1 40 1 2025-10-21 04:29:46.674 00:05:00.865 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:30:37.729 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2772 1 2025-10-21 04:35:25.801 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37804 9 6412 1 2025-10-21 04:35:40.798 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:35:40.795 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:36:26.209 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58512 10 6452 1 2025-10-21 04:32:44.541 00:05:02.997 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:37:26.607 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38182 10 6452 1 2025-10-21 04:33:45.321 00:05:02.259 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:33:46.655 00:05:00.945 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:33:44.521 00:05:03.039 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:38:27.009 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 10 6452 1 2025-10-21 04:39:27.418 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38806 9 6412 1 2025-10-21 04:35:46.676 00:05:00.865 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:35:57.737 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2520 1 2025-10-21 04:40:40.766 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:40:40.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:41:38.574 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55490 1 40 1 2025-10-21 04:42:38.987 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33410 1 40 1 2025-10-21 04:38:44.542 00:05:03.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:39:45.328 00:05:02.255 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:39:46.660 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:39:44.522 00:05:03.041 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:41:17.740 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2796 1 2025-10-21 04:45:40.942 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:45:40.889 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:45:29.843 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51704 9 6412 1 2025-10-21 04:41:46.680 00:05:00.862 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:46:30.244 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46350 9 6412 1 2025-10-21 04:48:31.010 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48662 10 6452 1 2025-10-21 04:44:44.546 00:05:02.999 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:49:31.422 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50188 9 6412 1 2025-10-21 04:45:46.661 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:45:44.525 00:05:03.039 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:45:45.328 00:05:02.256 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:50:41.231 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:50:42.166 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49114 1 40 1 2025-10-21 04:50:41.293 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:46:37.749 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-10-21 04:51:32.202 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58906 10 6452 1 2025-10-21 04:47:46.682 00:05:00.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:52:32.565 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51986 10 6452 1 2025-10-21 04:53:32.977 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56470 9 6412 1 2025-10-21 04:54:44.397 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 1 40 1 2025-10-21 04:50:44.546 00:05:02.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-21 04:55:41.193 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 04:55:40.994 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 04:51:46.662 00:05:00.944 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-21 04:51:44.527 00:05:03.039 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-21 04:51:45.330 00:05:02.256 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-21 04:51:57.759 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2792 1 2025-10-21 04:56:45.213 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39040 1 40 1 2025-10-21 04:53:46.682 00:05:00.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-21 04:57:45.620 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33154 1 40 1 2025-10-21 04:58:45.986 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 1 40 1 Summary: total flows: 131, total bytes: 297667, total packets: 1427, avg bps: 639, avg pps: 0, avg bpp: 208 Time window: 2025-10-21 03:56:44 - 2025-10-21 04:58:47 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0040s User: 0.0024s Wall: 0.0027s flows/second: 47807.7 Runtime: 0.0028s