Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 07:58:40.645 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56596 9 6412 1 2025-10-22 07:55:47.283 00:05:00.881 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 07:59:51.413 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43302 1 40 1 2025-10-22 07:56:45.139 00:05:03.024 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:00:41.449 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50072 9 6412 1 2025-10-22 08:01:13.761 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:01:13.612 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 07:57:45.788 00:05:02.416 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 07:57:45.119 00:05:03.065 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:02:42.252 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 9 6412 1 2025-10-22 08:03:42.651 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46874 9 6412 1 2025-10-22 07:59:50.073 00:05:10.590 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2504 1 2025-10-22 08:00:47.266 00:05:00.959 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:01:47.285 00:05:00.879 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:05:43.454 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49824 10 6452 1 2025-10-22 08:06:14.116 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:06:14.081 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:02:45.139 00:05:03.025 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:03:45.120 00:05:03.064 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:03:45.789 00:05:02.415 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:07:44.214 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58534 10 6452 1 2025-10-22 08:05:10.058 00:05:10.020 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2884 1 2025-10-22 08:06:47.266 00:05:00.962 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:10:55.814 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58778 1 40 1 2025-10-22 08:11:14.067 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:11:14.121 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:07:47.286 00:05:00.881 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:11:45.845 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44660 9 6412 1 2025-10-22 08:08:45.147 00:05:03.020 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:12:46.208 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46654 9 6412 1 2025-10-22 08:09:45.791 00:05:02.417 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:09:45.128 00:05:03.060 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:13:46.610 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36304 9 6412 1 2025-10-22 08:10:30.079 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2856 1 2025-10-22 08:14:46.982 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39036 9 6412 1 2025-10-22 08:15:57.916 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49958 1 40 1 2025-10-22 08:16:13.937 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:16:14.004 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:12:47.267 00:05:00.962 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:16:47.956 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54778 10 6452 1 2025-10-22 08:13:47.292 00:05:00.877 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:14:45.149 00:05:03.020 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:18:59.236 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34690 1 40 1 2025-10-22 08:15:45.792 00:05:02.417 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:15:45.129 00:05:03.060 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:19:49.277 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44828 9 6412 1 2025-10-22 08:15:50.085 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2876 1 2025-10-22 08:21:00.015 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 1 40 1 2025-10-22 08:21:14.394 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:21:14.381 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:18:47.270 00:05:00.959 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:22:50.798 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44298 9 6412 1 2025-10-22 08:19:47.290 00:05:00.880 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:23:51.204 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 9 6412 1 2025-10-22 08:20:45.150 00:05:03.020 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:25:01.938 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33086 1 40 1 2025-10-22 08:21:10.088 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2548 1 2025-10-22 08:21:45.794 00:05:02.417 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:21:45.130 00:05:03.060 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:26:14.187 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:26:14.189 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:27:52.795 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49518 10 6452 1 2025-10-22 08:24:47.272 00:05:00.959 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:28:53.165 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38216 9 6412 1 2025-10-22 08:25:47.291 00:05:00.880 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:26:30.094 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 32 2176 1 2025-10-22 08:26:45.152 00:05:03.020 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:30:53.970 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60138 10 6452 1 2025-10-22 08:31:14.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:31:14.393 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:27:45.795 00:05:02.417 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:27:45.132 00:05:03.060 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:32:04.746 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60400 1 40 1 2025-10-22 08:32:54.782 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40712 9 6412 1 2025-10-22 08:30:47.275 00:05:00.958 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:31:47.296 00:05:00.877 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:31:50.101 00:05:10.001 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3180 1 2025-10-22 08:35:55.998 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35888 10 6452 1 2025-10-22 08:36:14.503 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:36:14.654 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:32:45.151 00:05:03.021 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:36:56.409 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38592 9 6412 1 2025-10-22 08:33:45.133 00:05:03.061 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:33:45.797 00:05:02.417 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:37:56.765 00:00:17.218 TCP 1.101.0.1:3000 -> 23.104.0.1:43836 9 6412 1 2025-10-22 08:39:04.020 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:44218 10 6452 1 2025-10-22 08:40:14.781 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 1 40 1 2025-10-22 08:36:47.276 00:05:00.959 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:41:14.479 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:41:14.616 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:41:04.818 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 9 6412 1 2025-10-22 08:37:10.103 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2752 1 2025-10-22 08:37:47.297 00:05:00.877 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:42:15.548 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46414 1 40 1 2025-10-22 08:38:45.153 00:05:03.020 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:43:05.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55170 10 6452 1 2025-10-22 08:39:45.798 00:05:02.418 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:39:45.133 00:05:03.063 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:44:05.995 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60354 10 6452 1 2025-10-22 08:45:16.736 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 1 40 1 2025-10-22 08:46:14.450 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:46:14.570 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:46:17.157 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48394 1 40 1 2025-10-22 08:42:30.106 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2664 1 2025-10-22 08:42:47.280 00:05:00.958 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:47:07.191 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52384 9 6412 1 2025-10-22 08:43:47.298 00:05:00.879 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:48:07.598 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47118 9 6412 1 2025-10-22 08:44:45.155 00:05:03.023 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:49:07.960 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60594 10 6452 1 2025-10-22 08:45:45.799 00:05:02.418 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:45:45.134 00:05:03.063 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:50:18.738 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58164 1 40 1 2025-10-22 08:51:14.662 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:51:14.780 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:51:19.164 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49358 1 40 1 2025-10-22 08:47:50.110 00:05:10.001 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2652 1 2025-10-22 08:52:09.201 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47098 9 6412 1 2025-10-22 08:48:47.278 00:05:00.959 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-22 08:49:47.299 00:05:00.879 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-22 08:54:10.018 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 10 6452 1 2025-10-22 08:50:45.158 00:05:03.021 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-22 08:55:20.813 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49696 1 40 1 2025-10-22 08:51:45.801 00:05:02.417 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-22 08:51:45.137 00:05:03.061 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-22 08:56:14.916 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:56:14.960 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:56:10.847 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:38014 10 6452 1 2025-10-22 08:57:21.594 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33220 1 40 1 2025-10-22 08:53:10.110 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2612 1 2025-10-22 08:58:11.631 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41134 10 6452 1 2025-10-22 08:54:47.281 00:05:00.959 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 Summary: total flows: 132, total bytes: 278956, total packets: 1405, avg bps: 581, avg pps: 0, avg bpp: 198 Time window: 2025-10-22 07:55:47 - 2025-10-22 08:59:48 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0022s User: 0.0022s Wall: 0.0019s flows/second: 68639.7 Runtime: 0.0019s