Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 04:54:48.963 00:05:03.197 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 04:59:12.037 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36130 10 6452 1 2025-10-30 04:55:48.943 00:05:03.237 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 04:55:51.347 00:05:00.813 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:00:01.420 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:00:01.482 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:00:12.436 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:51766 10 6452 1 2025-10-30 04:56:49.541 00:05:02.659 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 04:57:26.124 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2852 1 2025-10-30 04:57:51.328 00:05:00.894 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:02:23.558 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56052 1 40 1 2025-10-30 05:03:13.604 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45822 10 6452 1 2025-10-30 05:04:14.007 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33490 9 6412 1 2025-10-30 05:00:48.966 00:05:03.196 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:05:01.678 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:05:01.575 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:05:14.372 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60356 10 6452 1 2025-10-30 05:01:48.945 00:05:03.237 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:01:51.348 00:05:00.814 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:06:14.786 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:47674 10 6452 1 2025-10-30 05:02:49.541 00:05:02.661 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:02:46.127 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2636 1 2025-10-30 05:07:15.159 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55204 10 6452 1 2025-10-30 05:03:51.333 00:05:00.889 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:08:26.736 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 1 40 1 2025-10-30 05:10:01.829 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:10:01.671 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:06:48.966 00:05:03.198 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:07:51.354 00:05:00.810 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:07:48.945 00:05:03.238 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:08:06.133 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2464 1 2025-10-30 05:12:18.053 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35442 10 6452 1 2025-10-30 05:08:49.542 00:05:02.661 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:13:18.458 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 10 6452 1 2025-10-30 05:09:51.334 00:05:00.889 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:14:18.863 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:57248 10 6452 1 2025-10-30 05:15:01.966 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:15:01.846 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:16:30.015 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57814 1 40 1 2025-10-30 05:12:48.966 00:05:03.199 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:17:20.055 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59206 9 6412 1 2025-10-30 05:13:26.141 00:05:10.916 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2868 1 2025-10-30 05:13:48.945 00:05:03.239 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:13:51.355 00:05:00.809 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:18:20.456 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 9 6412 1 2025-10-30 05:14:49.543 00:05:02.662 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:19:31.211 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36024 1 40 1 2025-10-30 05:15:51.335 00:05:00.890 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:20:01.155 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:20:01.193 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:20:21.260 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38194 9 6412 1 2025-10-30 05:21:21.673 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:41054 9 6412 1 2025-10-30 05:18:48.966 00:05:03.198 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:18:46.153 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2752 1 2025-10-30 05:23:22.517 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40880 10 6452 1 2025-10-30 05:19:48.954 00:05:03.231 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:19:51.357 00:05:00.809 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:20:49.549 00:05:02.657 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:25:01.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:25:01.979 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:25:23.288 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32886 10 6452 1 2025-10-30 05:21:51.336 00:05:00.890 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:27:24.119 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33546 10 6452 1 2025-10-30 05:24:06.165 00:05:09.998 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2624 1 2025-10-30 05:28:24.519 00:00:11.280 TCP 1.101.0.1:3000 -> 23.104.0.1:33710 10 6452 1 2025-10-30 05:24:48.970 00:05:03.196 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:29:36.170 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49776 1 40 1 2025-10-30 05:25:51.357 00:05:00.809 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:25:48.951 00:05:03.236 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:30:02.237 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:30:02.308 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:30:26.208 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50896 10 6452 1 2025-10-30 05:26:49.551 00:05:02.655 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:27:51.338 00:05:00.889 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:32:37.373 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36796 1 40 1 2025-10-30 05:29:26.162 00:05:10.039 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2904 1 2025-10-30 05:33:37.864 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43478 1 40 1 2025-10-30 05:30:48.971 00:05:03.196 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:35:02.247 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:35:02.126 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:35:28.610 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36236 9 6412 1 2025-10-30 05:31:48.950 00:05:03.236 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:31:51.359 00:05:00.808 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:36:39.386 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52608 1 40 1 2025-10-30 05:32:49.553 00:05:02.655 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:37:29.422 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 9 6412 1 2025-10-30 05:33:51.341 00:05:00.887 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:38:29.822 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45226 9 6412 1 2025-10-30 05:34:46.174 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2712 1 2025-10-30 05:39:30.225 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43236 9 6412 1 2025-10-30 05:40:02.344 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:40:02.346 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:40:30.597 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60766 9 6412 1 2025-10-30 05:36:48.974 00:05:03.196 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:37:48.952 00:05:03.236 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:37:51.364 00:05:00.806 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:38:49.556 00:05:02.661 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:43:32.282 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:60164 10 6452 1 2025-10-30 05:39:51.343 00:05:00.892 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:40:06.182 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2724 1 2025-10-30 05:44:42.990 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58518 1 40 1 2025-10-30 05:45:02.313 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:45:02.395 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:46:43.791 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51978 1 40 1 2025-10-30 05:42:48.972 00:05:03.205 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:47:33.831 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50788 10 6452 1 2025-10-30 05:43:48.955 00:05:03.243 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:43:51.365 00:05:00.812 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:48:34.238 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55460 10 6452 1 2025-10-30 05:44:49.557 00:05:02.664 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:45:26.189 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2816 1 2025-10-30 05:49:34.637 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46468 10 6452 1 2025-10-30 05:45:51.345 00:05:00.897 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:50:03.374 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:50:03.306 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:50:45.421 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35718 1 40 1 2025-10-30 05:51:35.464 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43716 10 6452 1 2025-10-30 05:52:35.870 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40496 9 6412 1 2025-10-30 05:48:48.976 00:05:03.207 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 05:49:51.365 00:05:00.818 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:49:48.957 00:05:03.246 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 05:50:49.560 00:05:02.663 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 05:50:46.198 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-10-30 05:55:02.741 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:55:02.684 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 05:55:47.418 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55294 1 40 1 2025-10-30 05:51:51.347 00:05:00.896 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 05:57:37.857 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 Summary: total flows: 128, total bytes: 272912, total packets: 1403, avg bps: 577, avg pps: 0, avg bpp: 194 Time window: 2025-10-30 04:54:48 - 2025-10-30 05:57:48 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0043s User: 0.0017s Wall: 0.0015s flows/second: 87552.3 Runtime: 0.0015s