Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 22:58:42.328 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45098 10 6452 1 2025-11-18 22:55:00.895 00:05:01.933 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 22:59:31.902 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:59:31.769 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:56:26.712 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-11-18 23:00:43.598 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48550 10 6452 1 2025-11-18 22:56:59.783 00:05:02.986 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:01:44.000 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44632 9 6412 1 2025-11-18 22:57:59.763 00:05:03.027 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 22:59:00.915 00:05:01.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:03:55.179 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 1 40 1 2025-11-18 22:59:59.779 00:05:03.030 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:04:31.690 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:04:32.073 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:01:00.897 00:05:01.933 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:05:45.623 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59552 10 6452 1 2025-11-18 23:01:46.719 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-18 23:06:45.987 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33650 9 6412 1 2025-11-18 23:02:59.787 00:05:02.986 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:03:59.767 00:05:03.026 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:08:46.753 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:50058 9 6412 1 2025-11-18 23:05:00.919 00:05:01.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:09:31.866 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:09:31.767 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:05:59.780 00:05:03.033 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:07:00.901 00:05:01.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:07:06.723 00:05:10.016 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3236 1 2025-11-18 23:11:48.009 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60726 10 6452 1 2025-11-18 23:08:59.787 00:05:02.986 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:13:48.810 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36048 9 6412 1 2025-11-18 23:09:59.768 00:05:03.026 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:14:32.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:14:32.051 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:14:59.575 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51286 1 40 1 2025-11-18 23:11:00.921 00:05:01.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:15:59.988 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37046 1 40 1 2025-11-18 23:11:59.781 00:05:03.035 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:12:26.741 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2688 1 2025-11-18 23:13:00.900 00:05:01.936 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:17:50.384 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40244 9 6412 1 2025-11-18 23:14:59.788 00:05:02.993 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:19:32.011 00:00:00.052 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:19:32.135 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:15:59.770 00:05:03.032 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:20:01.538 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47918 1 40 1 2025-11-18 23:17:00.922 00:05:01.860 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:20:51.578 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33348 9 6412 1 2025-11-18 23:17:46.744 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2732 1 2025-11-18 23:17:59.783 00:05:03.041 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:21:51.938 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 10 6452 1 2025-11-18 23:19:00.903 00:05:01.940 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:23:52.743 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37394 10 6452 1 2025-11-18 23:24:32.175 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:24:32.189 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:20:59.793 00:05:02.992 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:24:53.157 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47850 9 6412 1 2025-11-18 23:21:59.774 00:05:03.033 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:26:53.930 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 9 6412 1 2025-11-18 23:23:00.925 00:05:01.860 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:23:06.754 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2740 1 2025-11-18 23:27:54.333 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35708 10 6452 1 2025-11-18 23:23:59.796 00:05:03.030 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:25:00.905 00:05:01.941 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:28:54.732 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39698 9 6412 1 2025-11-18 23:29:32.382 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:29:32.337 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:29:55.141 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42990 9 6412 1 2025-11-18 23:26:59.795 00:05:02.992 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:30:55.539 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37914 10 6452 1 2025-11-18 23:27:59.776 00:05:03.032 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:28:26.757 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-18 23:29:00.925 00:05:01.861 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:29:59.797 00:05:03.031 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:34:18.602 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57906 1 40 1 2025-11-18 23:34:32.525 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:34:32.390 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:31:00.906 00:05:01.941 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:35:18.990 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35492 1 40 1 2025-11-18 23:36:09.031 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46136 12 6556 1 2025-11-18 23:32:59.795 00:05:02.992 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:37:09.448 00:00:11.080 TCP 1.101.0.1:3000 -> 23.104.0.1:57502 9 6412 1 2025-11-18 23:33:46.761 00:05:10.017 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3220 1 2025-11-18 23:33:59.781 00:05:03.027 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:38:10.567 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38428 9 6412 1 2025-11-18 23:35:00.927 00:05:01.862 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:39:21.269 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58362 1 40 1 2025-11-18 23:39:32.623 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:39:32.631 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:35:59.802 00:05:03.027 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:40:21.671 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57416 1 40 1 2025-11-18 23:37:00.907 00:05:01.941 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:42:12.133 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55562 12 6556 1 2025-11-18 23:38:59.800 00:05:02.988 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:39:06.778 00:05:10.020 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-18 23:43:22.864 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56982 1 40 1 2025-11-18 23:39:59.781 00:05:03.028 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:44:12.904 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52128 10 6452 1 2025-11-18 23:44:32.816 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:44:32.735 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:41:00.929 00:05:01.861 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:45:23.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54238 1 40 1 2025-11-18 23:41:59.803 00:05:03.026 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:46:24.074 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52652 1 40 1 2025-11-18 23:43:00.909 00:05:01.941 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:48:24.857 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55036 1 40 1 2025-11-18 23:44:26.798 00:05:00.310 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2620 1 2025-11-18 23:44:59.802 00:05:02.988 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:49:14.897 00:00:10.848 TCP 1.101.0.1:3000 -> 23.104.0.1:56296 9 6412 1 2025-11-18 23:49:32.834 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:49:33.112 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:45:59.781 00:05:03.028 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:47:00.930 00:05:01.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:51:16.205 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48378 9 6412 1 2025-11-18 23:47:59.805 00:05:03.027 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:52:16.603 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53550 10 6452 1 2025-11-18 23:49:00.910 00:05:01.942 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-18 23:53:17.007 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60820 10 6452 1 2025-11-18 23:49:36.806 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2800 1 2025-11-18 23:54:27.771 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 1 40 1 2025-11-18 23:54:32.889 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:54:32.978 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:50:59.805 00:05:02.989 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-18 23:55:17.810 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60680 10 6452 1 2025-11-18 23:51:59.785 00:05:03.029 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-18 23:56:28.586 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34168 1 40 1 2025-11-18 23:53:00.932 00:05:01.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-18 23:57:28.987 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35106 1 40 1 2025-11-18 23:53:59.807 00:05:03.027 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 23:58:19.024 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57114 9 6412 1 Summary: total flows: 129, total bytes: 260304, total packets: 1387, avg bps: 542, avg pps: 0, avg bpp: 187 Time window: 2025-11-18 22:55:00 - 2025-11-18 23:59:02 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0023s User: 0.0023s Wall: 0.0022s flows/second: 59451.2 Runtime: 0.0022s