Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 01:59:29.656 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40760 9 6412 1 2025-10-25 01:56:48.764 00:05:00.878 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 01:56:46.453 00:05:03.130 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 01:57:25.708 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-10-25 02:01:30.460 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36278 10 6452 1 2025-10-25 01:56:49.622 00:05:57.381 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 01:57:46.432 00:05:03.170 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:02:33.515 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:02:33.519 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:59:48.784 00:05:00.798 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:04:31.651 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6452 1 2025-10-25 02:05:32.054 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50722 9 6412 1 2025-10-25 02:06:32.463 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36388 10 6452 1 2025-10-25 02:02:46.453 00:05:03.130 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:02:48.766 00:05:00.878 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:02:45.711 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2732 1 2025-10-25 02:07:33.706 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:07:33.759 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:07:32.865 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:35334 9 6412 1 2025-10-25 02:02:49.623 00:06:00.002 TCP 23.154.0.1:179 -> 23.155.0.1:42089 13 790 1 2025-10-25 02:03:46.434 00:05:03.171 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:08:33.253 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38700 9 6412 1 2025-10-25 02:09:44.040 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34392 1 40 1 2025-10-25 02:05:48.788 00:05:00.799 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:10:44.437 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54052 1 40 1 2025-10-25 02:11:44.843 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41064 1 40 1 2025-10-25 02:08:05.717 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2780 1 2025-10-25 02:12:33.957 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:12:33.996 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:12:45.255 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54306 1 40 1 2025-10-25 02:08:48.766 00:05:00.885 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:08:46.455 00:05:03.135 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:13:45.677 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 1 40 1 2025-10-25 02:09:46.435 00:05:03.171 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:09:47.004 00:05:02.622 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 02:14:35.712 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57218 9 6412 1 2025-10-25 02:15:36.082 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60032 10 6452 1 2025-10-25 02:11:48.793 00:05:00.794 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:16:36.480 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57664 10 6452 1 2025-10-25 02:17:33.714 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:17:33.892 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:13:25.722 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2568 1 2025-10-25 02:17:47.169 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41932 1 40 1 2025-10-25 02:18:47.574 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37122 1 40 1 2025-10-25 02:14:48.771 00:05:00.876 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:14:46.457 00:05:03.131 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:15:47.005 00:05:02.627 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 02:15:46.437 00:05:03.175 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:19:47.930 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48992 1 40 1 2025-10-25 02:20:37.968 00:00:11.563 TCP 1.101.0.1:3000 -> 23.104.0.1:45108 9 6412 1 2025-10-25 02:17:48.793 00:05:00.796 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:22:33.998 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:22:34.204 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:22:39.965 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43776 10 6452 1 2025-10-25 02:18:45.729 00:05:10.027 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2740 1 2025-10-25 02:23:40.378 00:00:11.303 TCP 1.101.0.1:3000 -> 23.104.0.1:39370 11 6504 1 2025-10-25 02:20:48.773 00:05:00.876 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:20:46.457 00:05:03.131 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:24:41.723 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33276 9 6412 1 2025-10-25 02:25:42.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 10 6452 1 2025-10-25 02:21:47.006 00:05:02.624 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 02:21:46.440 00:05:03.170 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:26:52.896 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58272 1 40 1 2025-10-25 02:27:34.137 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:27:34.191 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:27:53.319 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48772 1 40 1 2025-10-25 02:23:48.792 00:05:00.797 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:24:05.733 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2816 1 2025-10-25 02:28:53.717 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56000 1 40 1 2025-10-25 02:29:43.756 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41280 10 6452 1 2025-10-25 02:26:48.775 00:05:00.875 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:26:46.458 00:05:03.131 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:30:44.158 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:37584 10 6452 1 2025-10-25 02:27:47.009 00:05:02.622 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 02:27:46.440 00:05:03.171 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:31:44.551 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35780 10 6452 1 2025-10-25 02:32:34.246 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:32:34.351 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:29:25.744 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2848 1 2025-10-25 02:29:48.795 00:05:00.798 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:33:45.329 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48740 10 6452 1 2025-10-25 02:34:45.755 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47848 9 6412 1 2025-10-25 02:35:57.061 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33540 1 40 1 2025-10-25 02:32:48.776 00:05:00.878 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:32:46.461 00:05:03.133 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:37:34.387 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:37:34.262 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:33:47.011 00:05:02.623 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 02:33:46.440 00:05:03.173 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:37:57.846 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34488 1 40 1 2025-10-25 02:34:45.752 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-10-25 02:38:47.884 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54922 9 6412 1 2025-10-25 02:35:48.800 00:05:00.794 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:40:48.694 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58068 10 6452 1 2025-10-25 02:42:34.226 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:42:34.519 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:38:48.779 00:05:00.877 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:38:46.463 00:05:03.133 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:42:49.531 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53412 9 6412 1 2025-10-25 02:39:47.012 00:05:02.624 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 02:39:46.442 00:05:03.174 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:40:05.765 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2492 1 2025-10-25 02:44:50.380 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58936 9 6412 1 2025-10-25 02:41:48.800 00:05:00.799 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:47:34.693 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:47:34.548 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:44:46.466 00:05:03.132 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:44:48.784 00:05:00.875 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:49:02.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51442 1 40 1 2025-10-25 02:45:25.776 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2868 1 2025-10-25 02:45:46.446 00:05:03.172 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:45:47.016 00:05:02.623 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 02:49:52.378 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38376 9 6412 1 2025-10-25 02:50:52.739 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:33494 12 10369 1 2025-10-25 02:47:48.804 00:05:00.794 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:51:53.221 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43258 9 6412 1 2025-10-25 02:52:34.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:52:34.536 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:52:53.629 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55162 10 6452 1 2025-10-25 02:50:48.785 00:05:00.879 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 02:50:46.467 00:05:03.132 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 02:50:45.780 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2880 1 2025-10-25 02:51:47.016 00:05:02.624 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 02:51:46.446 00:05:03.174 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 02:56:55.250 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38156 10 6452 1 2025-10-25 02:57:34.734 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 02:57:34.864 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 02:53:48.805 00:05:00.796 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-25 02:57:55.615 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57944 9 6412 1 Summary: total flows: 129, total bytes: 270253, total packets: 1393, avg bps: 580, avg pps: 0, avg bpp: 194 Time window: 2025-10-25 01:56:46 - 2025-10-25 02:58:49 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0025s User: 0.0025s Wall: 0.0020s flows/second: 63707.2 Runtime: 0.0020s