Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 17:54:49.617 00:05:00.912 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 17:55:49.601 00:05:00.990 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:00:26.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2025-10-26 17:55:50.528 00:05:56.708 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 17:56:50.548 00:05:56.668 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 17:57:47.808 00:05:02.762 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:02:27.113 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56274 10 6452 1 2025-10-26 18:03:21.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:03:21.535 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 17:59:30.018 00:05:09.032 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2764 1 2025-10-26 18:00:49.621 00:05:00.910 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:01:49.602 00:05:00.989 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:01:50.531 00:05:56.711 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:07:29.332 00:00:11.222 TCP 1.101.0.1:3000 -> 23.104.0.1:54922 9 6412 1 2025-10-26 18:02:50.551 00:05:56.670 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:03:47.810 00:05:02.770 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:08:21.778 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:08:21.851 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:04:49.050 00:05:10.020 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2628 1 2025-10-26 18:10:31.412 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6452 1 2025-10-26 18:06:49.623 00:05:00.913 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:11:31.813 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38490 9 6412 1 2025-10-26 18:07:49.603 00:05:00.991 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:07:50.531 00:05:56.711 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:13:22.422 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:13:22.885 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:13:32.614 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57108 10 6452 1 2025-10-26 18:08:50.552 00:05:56.671 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:09:47.811 00:05:02.766 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:10:09.070 00:05:10.019 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2596 1 2025-10-26 18:14:43.388 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57110 1 40 1 2025-10-26 18:15:33.427 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41544 9 6412 1 2025-10-26 18:12:49.623 00:05:00.912 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:17:45.598 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42132 1 40 1 2025-10-26 18:13:49.605 00:05:00.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:18:21.973 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:18:21.967 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:13:50.534 00:05:56.710 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:18:35.633 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35114 10 6452 1 2025-10-26 18:15:29.084 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2908 1 2025-10-26 18:19:46.355 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 1 40 1 2025-10-26 18:14:50.557 00:05:56.667 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:15:47.815 00:05:02.764 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:20:36.393 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37410 10 6452 1 2025-10-26 18:21:36.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54622 9 6412 1 2025-10-26 18:22:37.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33944 10 6452 1 2025-10-26 18:18:49.624 00:05:00.914 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:23:22.128 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:23:22.078 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:23:47.966 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 1 40 1 2025-10-26 18:19:49.605 00:05:00.993 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:24:48.383 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47958 1 40 1 2025-10-26 18:19:50.539 00:05:56.707 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:20:49.096 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2752 1 2025-10-26 18:20:50.558 00:05:56.667 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:21:47.821 00:05:02.758 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:26:49.252 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37102 1 40 1 2025-10-26 18:27:39.291 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57656 10 6452 1 2025-10-26 18:28:22.200 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:28:22.200 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:24:49.627 00:05:00.915 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:25:49.608 00:05:00.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:26:09.101 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-26 18:25:50.538 00:05:56.708 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:30:51.260 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36802 1 40 1 2025-10-26 18:26:50.559 00:05:56.668 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:27:47.825 00:05:02.758 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:33:22.268 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:33:22.395 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:33:52.461 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39070 1 40 1 2025-10-26 18:30:49.628 00:05:00.921 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:31:29.102 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2844 1 2025-10-26 18:31:49.611 00:05:00.992 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:35:55.207 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 1 40 1 2025-10-26 18:31:50.542 00:05:56.706 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:36:55.619 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33672 1 40 1 2025-10-26 18:32:50.562 00:05:56.666 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:33:47.829 00:05:02.753 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:37:56.017 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54180 1 40 1 2025-10-26 18:38:22.494 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:38:22.431 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:39:56.822 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46810 1 40 1 2025-10-26 18:36:49.632 00:05:00.912 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:36:49.112 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2636 1 2025-10-26 18:37:49.612 00:05:00.993 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:37:50.543 00:05:56.708 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:42:58.013 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51012 1 40 1 2025-10-26 18:43:22.536 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:43:22.370 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:38:50.561 00:05:56.668 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:39:47.832 00:05:02.753 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:43:48.052 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45074 12 6556 1 2025-10-26 18:44:48.451 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41360 9 6412 1 2025-10-26 18:42:09.114 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2848 1 2025-10-26 18:42:49.632 00:05:00.912 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:46:49.278 00:00:10.777 TCP 1.101.0.1:3000 -> 23.104.0.1:60870 9 6412 1 2025-10-26 18:43:49.614 00:05:00.991 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:48:00.477 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 1 40 1 2025-10-26 18:48:22.593 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:48:22.598 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:43:50.544 00:05:56.707 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:48:50.533 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:52536 10 6464 1 2025-10-26 18:44:50.564 00:05:56.667 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:45:47.834 00:05:02.752 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:49:50.994 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37882 10 6452 1 2025-10-26 18:50:51.367 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 9 6412 1 2025-10-26 18:47:29.127 00:05:10.706 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2704 1 2025-10-26 18:52:02.157 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54722 1 40 1 2025-10-26 18:48:49.634 00:05:00.912 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 18:52:52.191 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39630 9 6412 1 2025-10-26 18:53:22.798 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:53:22.721 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:49:49.615 00:05:00.992 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 18:54:02.918 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46448 1 40 1 2025-10-26 18:49:50.547 00:05:56.708 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 18:50:50.566 00:05:56.668 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 18:51:47.836 00:05:02.751 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 18:52:49.131 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2624 1 2025-10-26 18:57:04.554 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43910 1 40 1 2025-10-26 18:57:54.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46722 10 6452 1 2025-10-26 18:58:22.851 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:58:22.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 122, total bytes: 202232, total packets: 1300, avg bps: 424, avg pps: 0, avg bpp: 155 Time window: 2025-10-26 17:54:49 - 2025-10-26 18:58:22 Total flows processed: 122, passed: 122, Blocks skipped: 0, Bytes read: 12752 Sys: 0.0043s User: 0.0011s Wall: 0.0019s flows/second: 63479.1 Runtime: 0.0019s