Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 10:54:58.275 00:05:01.798 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 10:55:56.861 00:05:03.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:01:52.995 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:01:53.078 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:01:40.728 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54856 10 6452 1 2025-11-13 10:58:25.435 00:05:10.015 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2924 1 2025-11-13 11:02:41.132 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43144 10 6452 1 2025-11-13 10:58:58.296 00:05:01.718 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 10:58:55.878 00:05:04.136 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 10:59:55.858 00:05:04.178 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:04:41.934 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40118 11 6504 1 2025-11-13 11:00:58.278 00:05:01.799 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:05:42.351 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37174 9 6412 1 2025-11-13 11:01:56.863 00:05:03.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:06:53.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:06:52.878 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:06:42.756 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34816 10 6452 1 2025-11-13 11:07:43.127 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54844 9 6412 1 2025-11-13 11:03:45.452 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2828 1 2025-11-13 11:04:58.299 00:05:01.719 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:04:55.880 00:05:04.138 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:09:43.935 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34262 9 6412 1 2025-11-13 11:05:55.861 00:05:04.176 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:10:44.351 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33878 9 6412 1 2025-11-13 11:06:58.280 00:05:01.797 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:11:53.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:11:53.349 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:11:55.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43554 1 40 1 2025-11-13 11:07:56.869 00:05:03.187 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:12:45.162 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59934 10 6452 1 2025-11-13 11:09:05.460 00:05:10.803 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2696 1 2025-11-13 11:10:58.302 00:05:01.748 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:10:55.882 00:05:04.168 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:15:46.338 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33814 11 6516 1 2025-11-13 11:11:55.860 00:05:04.206 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:16:53.337 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:16:53.337 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:16:46.743 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36272 9 6412 1 2025-11-13 11:12:58.281 00:05:01.827 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:17:47.126 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60162 9 6412 1 2025-11-13 11:13:56.872 00:05:03.216 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:14:25.474 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-11-13 11:18:47.529 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55356 9 6412 1 2025-11-13 11:19:58.379 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55366 1 40 1 2025-11-13 11:20:58.783 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54678 1 40 1 2025-11-13 11:16:58.301 00:05:01.747 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:16:55.883 00:05:04.165 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:21:53.508 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:21:53.512 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:21:48.822 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34562 10 6452 1 2025-11-13 11:17:55.864 00:05:04.206 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:22:59.601 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 1 40 1 2025-11-13 11:18:58.281 00:05:01.828 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:19:45.483 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-11-13 11:19:56.872 00:05:03.219 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:24:50.042 00:00:17.664 TCP 1.101.0.1:3000 -> 23.104.0.1:59298 9 6412 1 2025-11-13 11:25:57.748 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42884 9 6412 1 2025-11-13 11:26:53.324 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:26:53.424 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:22:58.303 00:05:01.749 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:22:55.885 00:05:04.167 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:27:08.522 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36154 1 40 1 2025-11-13 11:23:55.864 00:05:04.208 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:27:58.558 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34170 10 6452 1 2025-11-13 11:24:58.284 00:05:01.831 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:29:10.484 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39442 1 40 1 2025-11-13 11:25:05.490 00:05:11.052 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2912 1 2025-11-13 11:25:56.875 00:05:03.218 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:30:10.887 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56326 1 40 1 2025-11-13 11:31:00.928 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46738 10 6452 1 2025-11-13 11:31:53.885 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:31:53.808 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:28:58.304 00:05:01.758 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:28:55.885 00:05:04.177 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:33:01.694 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 10 6452 1 2025-11-13 11:29:55.866 00:05:04.216 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:34:02.120 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40070 9 6412 1 2025-11-13 11:30:25.502 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2868 1 2025-11-13 11:30:58.283 00:05:01.839 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:35:02.481 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50002 9 6412 1 2025-11-13 11:31:56.876 00:05:03.226 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:36:53.766 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:36:53.722 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:37:03.287 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38626 9 6412 1 2025-11-13 11:38:14.016 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55218 1 40 1 2025-11-13 11:34:58.305 00:05:01.759 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:34:55.886 00:05:04.178 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:39:04.054 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55486 10 6452 1 2025-11-13 11:35:45.512 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2816 1 2025-11-13 11:35:55.868 00:05:04.217 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:40:14.824 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39286 1 40 1 2025-11-13 11:36:58.287 00:05:01.839 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:41:15.254 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40492 1 40 1 2025-11-13 11:41:53.903 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:41:53.848 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:37:56.887 00:05:03.219 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:42:05.298 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48508 9 6412 1 2025-11-13 11:44:06.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39536 9 6412 1 2025-11-13 11:40:58.306 00:05:01.759 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:40:55.888 00:05:04.177 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:41:05.522 00:05:10.017 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2384 1 2025-11-13 11:41:55.869 00:05:04.217 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:46:17.255 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 1 40 1 2025-11-13 11:46:53.899 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:46:53.949 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:42:58.287 00:05:01.839 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:47:17.660 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38416 1 40 1 2025-11-13 11:43:56.887 00:05:03.219 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:48:07.701 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38986 10 6452 1 2025-11-13 11:49:08.126 00:00:11.122 TCP 1.101.0.1:3000 -> 23.104.0.1:47690 10 6452 1 2025-11-13 11:50:09.284 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:52070 12 10369 1 2025-11-13 11:46:25.527 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-11-13 11:46:58.312 00:05:01.755 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:46:55.890 00:05:04.177 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:51:20.132 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 1 40 1 2025-11-13 11:51:53.921 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:51:53.996 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:47:55.869 00:05:04.219 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:52:20.489 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58044 1 40 1 2025-11-13 11:48:58.291 00:05:01.837 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 11:53:20.897 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49026 1 40 1 2025-11-13 11:49:56.889 00:05:03.220 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 11:54:21.301 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38950 1 40 1 2025-11-13 11:55:11.343 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48936 10 6452 1 2025-11-13 11:51:45.539 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2532 1 2025-11-13 11:56:22.074 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45710 1 40 1 2025-11-13 11:56:54.090 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 11:56:54.081 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 11:52:58.317 00:05:01.753 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 11:52:55.893 00:05:04.177 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 11:53:55.878 00:05:04.212 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 11:58:12.621 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:55538 9 6412 1 Summary: total flows: 132, total bytes: 270101, total packets: 1391, avg bps: 562, avg pps: 0, avg bpp: 194 Time window: 2025-11-13 10:54:58 - 2025-11-13 11:59:00 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0019s User: 0.0029s Wall: 0.0016s flows/second: 80777.4 Runtime: 0.0016s