Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 17:54:58.422 00:05:01.819 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 17:55:00.221 00:05:56.786 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:00:31.782 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52750 9 6412 1 2025-11-13 18:01:32.202 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 10 6452 1 2025-11-13 18:02:01.428 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:02:01.580 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 17:58:58.443 00:05:01.738 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 17:58:56.082 00:05:04.099 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 17:59:16.099 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2624 1 2025-11-13 18:03:33.019 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60558 9 6412 1 2025-11-13 17:59:00.201 00:05:55.864 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:00:58.424 00:05:01.817 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:01:00.222 00:05:56.786 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:06:34.222 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 9 6412 1 2025-11-13 18:07:01.571 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:07:01.267 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:07:44.980 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46394 1 40 1 2025-11-13 18:08:45.346 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53804 1 40 1 2025-11-13 18:04:36.101 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2612 1 2025-11-13 18:04:58.445 00:05:01.739 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:04:56.085 00:05:04.099 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:09:35.382 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36226 10 6452 1 2025-11-13 18:05:00.202 00:05:55.864 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:10:35.792 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2025-11-13 18:06:58.425 00:05:01.820 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:07:00.223 00:05:56.785 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:12:01.577 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:12:01.520 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:12:46.978 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34744 1 40 1 2025-11-13 18:13:37.018 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48948 10 6452 1 2025-11-13 18:09:56.110 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3056 1 2025-11-13 18:14:37.417 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60276 9 6412 1 2025-11-13 18:10:58.446 00:05:01.739 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:10:56.085 00:05:04.100 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:15:37.819 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:51882 10 6452 1 2025-11-13 18:11:00.204 00:05:55.865 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:16:38.200 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55656 9 6412 1 2025-11-13 18:17:01.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:17:01.769 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:12:58.426 00:05:01.820 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:17:48.969 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54582 1 40 1 2025-11-13 18:13:00.226 00:05:56.786 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:18:39.013 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57160 10 6452 1 2025-11-13 18:15:16.116 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2952 1 2025-11-13 18:19:39.370 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:57178 11 10335 1 2025-11-13 18:20:39.848 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37496 9 6412 1 2025-11-13 18:16:58.447 00:05:01.740 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:16:56.089 00:05:04.098 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:21:40.264 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:60210 10 6452 1 2025-11-13 18:17:00.206 00:05:55.866 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:22:01.879 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:22:01.882 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:18:58.429 00:05:01.820 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:23:41.094 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35950 9 6412 1 2025-11-13 18:19:00.227 00:05:56.786 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:20:36.118 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2384 1 2025-11-13 18:26:52.617 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55816 1 40 1 2025-11-13 18:27:01.846 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:22:58.451 00:05:01.737 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:22:56.090 00:05:04.098 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:27:01.842 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:27:53.020 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42084 1 40 1 2025-11-13 18:23:00.208 00:05:55.863 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:28:43.076 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45758 9 6412 1 2025-11-13 18:24:58.432 00:05:01.817 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:25:00.229 00:05:56.785 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:25:56.135 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-11-13 18:31:44.858 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:42962 10 6452 1 2025-11-13 18:32:01.996 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:32:02.079 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:32:45.284 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40470 10 6452 1 2025-11-13 18:28:58.454 00:05:01.737 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:28:56.093 00:05:04.098 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:29:00.210 00:05:55.865 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:33:56.049 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54708 1 40 1 2025-11-13 18:34:46.113 00:00:10.513 TCP 1.101.0.1:3000 -> 23.104.0.1:38418 14 14292 1 2025-11-13 18:30:58.433 00:05:01.818 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:31:16.136 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2596 1 2025-11-13 18:31:00.229 00:05:56.786 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:36:47.085 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 9 6412 1 2025-11-13 18:37:02.234 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:37:02.235 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:38:47.895 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:49286 10 6464 1 2025-11-13 18:34:58.454 00:05:01.741 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:34:56.095 00:05:04.100 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:35:00.211 00:05:55.865 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:36:36.142 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2908 1 2025-11-13 18:40:48.758 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47346 9 6412 1 2025-11-13 18:36:58.435 00:05:01.819 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:41:49.163 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-11-13 18:37:00.231 00:05:56.787 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:42:02.371 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:42:02.373 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:42:59.930 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59214 1 40 1 2025-11-13 18:40:58.455 00:05:01.740 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:40:56.096 00:05:04.099 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:41:00.215 00:05:55.862 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:41:56.154 00:05:00.996 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3152 1 2025-11-13 18:42:58.437 00:05:01.820 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:47:02.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:47:02.338 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:43:00.235 00:05:56.786 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:49:03.004 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32810 1 40 1 2025-11-13 18:46:56.097 00:05:04.102 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:50:53.473 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35022 9 6412 1 2025-11-13 18:46:58.457 00:05:01.742 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:47:06.158 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2304 1 2025-11-13 18:47:00.217 00:05:55.861 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:52:01.749 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:52:04.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36288 1 40 1 2025-11-13 18:52:02.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:48:58.437 00:05:01.823 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 18:49:00.236 00:05:56.789 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 18:53:54.703 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44114 9 6412 1 2025-11-13 18:54:55.130 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59956 9 6412 1 2025-11-13 18:55:55.533 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44760 9 6412 1 2025-11-13 18:52:26.168 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2624 1 2025-11-13 18:52:56.098 00:05:04.109 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 18:57:02.517 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 18:57:02.337 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 18:52:58.461 00:05:01.746 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 18:56:55.940 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43280 12 6556 1 2025-11-13 18:53:00.220 00:05:55.859 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 18:57:56.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 9 6412 1 Summary: total flows: 124, total bytes: 271467, total packets: 1381, avg bps: 565, avg pps: 0, avg bpp: 196 Time window: 2025-11-13 17:54:58 - 2025-11-13 18:58:56 Total flows processed: 124, passed: 124, Blocks skipped: 0, Bytes read: 12960 Sys: 0.0051s User: 0.0013s Wall: 0.0019s flows/second: 67022.4 Runtime: 0.0019s