Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 01:54:58.112 00:05:01.770 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 01:55:56.711 00:05:03.151 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:00:14.048 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44834 9 6412 1 2025-11-13 02:01:24.836 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47874 1 40 1 2025-11-13 02:01:42.267 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:01:42.270 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:02:14.875 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 9 6412 1 2025-11-13 01:58:58.134 00:05:01.689 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 01:58:55.696 00:05:04.127 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:03:15.302 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33970 9 6412 1 2025-11-13 01:59:55.677 00:05:04.167 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 01:59:54.613 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3036 1 2025-11-13 02:04:26.034 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47912 1 40 1 2025-11-13 02:00:58.116 00:05:01.768 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:01:56.713 00:05:03.152 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:06:42.479 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:06:42.366 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:07:27.213 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39518 1 40 1 2025-11-13 02:08:17.253 00:00:11.047 TCP 1.101.0.1:3000 -> 23.104.0.1:33478 10 6452 1 2025-11-13 02:04:58.136 00:05:01.688 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:04:55.696 00:05:04.128 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:09:18.338 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:46772 12 10369 1 2025-11-13 02:05:14.618 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2568 1 2025-11-13 02:05:55.677 00:05:04.167 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:10:18.811 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46238 9 6412 1 2025-11-13 02:06:58.117 00:05:01.769 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:11:19.214 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43646 10 6452 1 2025-11-13 02:11:42.935 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:11:43.005 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:07:56.714 00:05:03.150 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:12:29.945 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34882 1 40 1 2025-11-13 02:13:30.355 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35066 1 40 1 2025-11-13 02:14:30.761 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 1 40 1 2025-11-13 02:10:34.629 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2448 1 2025-11-13 02:10:58.136 00:05:01.689 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:10:55.699 00:05:04.126 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:11:55.679 00:05:04.167 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:16:21.209 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54952 10 6452 1 2025-11-13 02:16:42.950 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:16:43.065 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:12:58.116 00:05:01.770 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:17:31.974 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40660 1 40 1 2025-11-13 02:13:56.718 00:05:03.149 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:19:32.731 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 1 40 1 2025-11-13 02:15:54.640 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2640 1 2025-11-13 02:20:22.775 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:47392 10 6452 1 2025-11-13 02:16:58.137 00:05:01.691 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:16:55.700 00:05:04.128 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:21:23.208 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36242 9 6412 1 2025-11-13 02:21:42.579 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:21:42.400 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:17:55.680 00:05:04.167 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:22:23.619 00:00:10.624 TCP 1.101.0.1:3000 -> 23.104.0.1:37704 9 6412 1 2025-11-13 02:18:58.119 00:05:01.771 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:23:24.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59628 10 6452 1 2025-11-13 02:19:56.721 00:05:03.148 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:24:35.057 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58150 1 40 1 2025-11-13 02:21:14.655 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2532 1 2025-11-13 02:25:25.125 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54576 10 6452 1 2025-11-13 02:26:35.855 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56096 1 40 1 2025-11-13 02:26:42.586 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:26:42.771 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:22:58.139 00:05:01.694 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:22:55.704 00:05:04.129 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:23:55.683 00:05:04.168 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:28:26.303 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6452 1 2025-11-13 02:24:58.118 00:05:01.773 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:25:56.722 00:05:03.150 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:26:34.660 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3116 1 2025-11-13 02:31:42.849 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:31:42.790 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:32:27.939 00:00:11.008 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 10 6452 1 2025-11-13 02:28:58.139 00:05:01.694 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:28:55.704 00:05:04.129 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:33:39.334 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 1 40 1 2025-11-13 02:29:55.684 00:05:04.172 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:30:58.119 00:05:01.776 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:35:29.847 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58780 10 6452 1 2025-11-13 02:31:56.724 00:05:03.151 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:31:54.667 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2604 1 2025-11-13 02:36:43.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:36:42.937 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:36:30.254 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46760 9 6412 1 2025-11-13 02:37:30.654 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39710 10 6452 1 2025-11-13 02:38:31.061 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50198 10 6452 1 2025-11-13 02:34:58.140 00:05:01.696 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:34:55.707 00:05:04.129 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:39:31.473 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45404 10 6452 1 2025-11-13 02:35:55.686 00:05:04.169 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:40:31.833 00:00:26.801 TCP 1.101.0.1:3000 -> 23.104.0.1:53722 10 6452 1 2025-11-13 02:36:58.120 00:05:01.777 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:37:14.675 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2776 1 2025-11-13 02:41:43.019 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:41:42.916 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:41:48.682 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57750 9 6412 1 2025-11-13 02:37:56.728 00:05:03.149 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:42:49.082 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49386 9 6412 1 2025-11-13 02:43:49.490 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55576 9 6412 1 2025-11-13 02:44:49.892 00:00:10.737 TCP 1.101.0.1:3000 -> 23.104.0.1:46384 9 6412 1 2025-11-13 02:40:58.142 00:05:01.706 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:40:55.709 00:05:04.139 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:46:01.035 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45910 1 40 1 2025-11-13 02:41:55.688 00:05:04.174 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:46:42.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:46:43.121 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:42:34.686 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-11-13 02:42:58.120 00:05:01.783 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:46:51.086 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41264 10 6452 1 2025-11-13 02:43:56.731 00:05:03.153 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:47:51.493 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60536 10 6452 1 2025-11-13 02:48:51.900 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35206 9 6412 1 2025-11-13 02:49:52.300 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 9 6412 1 2025-11-13 02:46:58.150 00:05:01.693 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:46:55.708 00:05:04.134 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:50:52.716 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38778 9 6412 1 2025-11-13 02:51:43.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:51:43.095 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:47:55.689 00:05:04.175 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:51:53.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47496 10 6452 1 2025-11-13 02:47:54.696 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2660 1 2025-11-13 02:48:58.127 00:05:01.776 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 02:52:53.537 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2025-11-13 02:49:56.730 00:05:03.153 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 02:54:04.265 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 1 40 1 2025-11-13 02:55:04.675 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55974 1 40 1 2025-11-13 02:55:54.712 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39832 9 6412 1 2025-11-13 02:56:43.569 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 02:56:43.574 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:52:58.147 00:05:01.696 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 02:52:55.709 00:05:04.134 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 02:57:05.494 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36910 1 40 1 2025-11-13 02:53:14.700 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2908 1 2025-11-13 02:53:55.689 00:05:04.174 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 02:58:05.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56540 1 40 1 Summary: total flows: 134, total bytes: 289669, total packets: 1424, avg bps: 603, avg pps: 0, avg bpp: 203 Time window: 2025-11-13 01:54:58 - 2025-11-13 02:58:59 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0027s User: 0.0027s Wall: 0.0019s flows/second: 71697.5 Runtime: 0.0019s