Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 01:54:49.298 00:05:00.868 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 01:58:52.702 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6452 1 2025-10-26 01:55:49.278 00:05:00.948 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:00:03.498 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33818 1 40 1 2025-10-26 01:56:07.676 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2568 1 2025-10-26 01:56:46.903 00:05:03.263 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:00:53.538 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35112 10 6452 1 2025-10-26 01:57:47.488 00:05:02.719 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 01:57:46.884 00:05:03.303 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:01:53.941 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45606 9 6412 1 2025-10-26 02:03:02.477 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:02:54.347 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6452 1 2025-10-26 02:03:02.641 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:03:54.751 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 9 6412 1 2025-10-26 02:00:49.299 00:05:00.870 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:05:05.497 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 1 40 1 2025-10-26 02:01:27.680 00:05:10.908 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2844 1 2025-10-26 02:01:49.279 00:05:00.949 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:02:46.904 00:05:03.265 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:06:55.891 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57576 9 6412 1 2025-10-26 02:03:47.488 00:05:02.721 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:03:46.884 00:05:03.305 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:08:02.651 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:08:02.479 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:08:56.672 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-10-26 02:09:57.035 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38994 9 6412 1 2025-10-26 02:06:49.301 00:05:00.869 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:06:47.687 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2968 1 2025-10-26 02:10:57.398 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:38506 11 10335 1 2025-10-26 02:07:49.280 00:05:00.950 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:11:57.873 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:43000 10 6452 1 2025-10-26 02:08:46.906 00:05:03.264 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:13:02.534 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:13:02.430 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:12:58.254 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46490 9 6412 1 2025-10-26 02:09:47.490 00:05:02.720 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:09:46.885 00:05:03.305 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:15:09.425 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57592 1 40 1 2025-10-26 02:15:59.461 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56264 10 6452 1 2025-10-26 02:12:07.691 00:05:11.041 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-26 02:12:49.303 00:05:00.869 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:17:10.190 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54614 1 40 1 2025-10-26 02:13:49.283 00:05:00.950 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:18:02.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:18:02.713 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:18:00.227 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49960 9 6412 1 2025-10-26 02:14:46.906 00:05:03.266 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:19:00.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36892 10 6452 1 2025-10-26 02:15:47.491 00:05:02.721 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:15:46.886 00:05:03.306 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:20:11.348 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56446 1 40 1 2025-10-26 02:21:01.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43830 10 6452 1 2025-10-26 02:17:27.700 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2892 1 2025-10-26 02:18:49.304 00:05:00.870 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:23:02.870 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:23:02.990 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:19:49.285 00:05:00.950 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:24:02.597 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35260 9 6412 1 2025-10-26 02:20:46.911 00:05:03.263 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:25:03.004 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59806 9 6412 1 2025-10-26 02:21:47.492 00:05:02.723 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:21:46.890 00:05:03.305 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:26:03.371 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-10-26 02:22:47.713 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2424 1 2025-10-26 02:27:14.154 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54406 1 40 1 2025-10-26 02:28:02.905 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:28:02.842 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:24:49.304 00:05:00.870 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:29:04.605 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52412 9 6412 1 2025-10-26 02:25:49.285 00:05:00.950 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:30:15.384 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 1 40 1 2025-10-26 02:26:46.913 00:05:03.262 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:27:47.495 00:05:02.720 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:27:46.893 00:05:03.302 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:28:07.731 00:05:10.001 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2532 1 2025-10-26 02:33:02.966 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:33:03.206 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:33:06.236 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38698 9 6412 1 2025-10-26 02:30:49.305 00:05:00.883 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:35:07.043 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6452 1 2025-10-26 02:31:49.285 00:05:00.963 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:36:07.441 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45992 10 6452 1 2025-10-26 02:32:46.915 00:05:03.272 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:37:07.848 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:60126 9 6412 1 2025-10-26 02:33:27.733 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2844 1 2025-10-26 02:33:47.494 00:05:02.733 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:33:46.894 00:05:03.312 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:38:03.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:38:03.153 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:39:19.029 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49684 1 40 1 2025-10-26 02:36:49.306 00:05:00.881 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:41:19.802 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 1 40 1 2025-10-26 02:37:49.286 00:05:00.962 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:42:20.205 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38434 1 40 1 2025-10-26 02:38:46.916 00:05:03.272 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:38:47.742 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2816 1 2025-10-26 02:43:03.150 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:43:03.152 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:43:20.611 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42792 1 40 1 2025-10-26 02:39:47.497 00:05:02.732 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:39:46.897 00:05:03.312 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:44:10.645 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54372 9 6412 1 2025-10-26 02:42:49.309 00:05:00.880 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:47:22.370 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42306 1 40 1 2025-10-26 02:43:49.287 00:05:00.962 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:48:03.246 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:48:03.395 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:44:07.746 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2624 1 2025-10-26 02:48:12.408 00:00:10.716 TCP 1.101.0.1:3000 -> 23.104.0.1:50078 10 6452 1 2025-10-26 02:44:46.917 00:05:03.272 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:45:46.897 00:05:03.312 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:45:47.497 00:05:02.733 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:50:13.574 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50534 9 6412 1 2025-10-26 02:51:13.976 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36418 10 6452 1 2025-10-26 02:52:14.385 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:45202 10 6452 1 2025-10-26 02:48:49.309 00:05:00.884 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 02:53:03.579 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:53:03.456 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:53:14.780 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41496 9 6412 1 2025-10-26 02:49:27.751 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2732 1 2025-10-26 02:49:49.289 00:05:00.963 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 02:54:25.534 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35368 1 40 1 2025-10-26 02:50:46.921 00:05:03.270 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 02:55:15.590 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54248 10 6452 1 2025-10-26 02:51:47.500 00:05:02.732 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 02:51:46.901 00:05:03.310 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 02:56:26.340 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38752 1 40 1 2025-10-26 02:58:03.423 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:58:03.406 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:58:16.784 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:49778 9 6412 1 Summary: total flows: 130, total bytes: 276655, total packets: 1401, avg bps: 579, avg pps: 0, avg bpp: 197 Time window: 2025-10-26 01:54:49 - 2025-10-26 02:58:27 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0040s User: 0.0020s Wall: 0.0018s flows/second: 70803.7 Runtime: 0.0019s