Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 12:55:01.650 00:05:02.008 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 12:54:59.873 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2604 1 2025-11-20 13:00:02.910 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:41588 10 6452 1 2025-11-20 13:00:19.045 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:00:19.390 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 12:57:00.914 00:05:02.684 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 12:58:00.892 00:05:02.724 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 12:59:01.671 00:05:01.926 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:03:04.121 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:50354 9 6412 1 2025-11-20 13:00:00.899 00:05:02.739 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:00:19.879 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2820 1 2025-11-20 13:01:01.650 00:05:02.007 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:05:19.330 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:05:04.891 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39950 9 6412 1 2025-11-20 13:05:19.391 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:06:05.299 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37214 9 6412 1 2025-11-20 13:03:00.920 00:05:02.677 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:07:16.087 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42638 1 40 1 2025-11-20 13:04:00.901 00:05:02.717 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:08:06.132 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45162 10 6452 1 2025-11-20 13:05:01.671 00:05:01.927 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:05:39.886 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-20 13:06:00.899 00:05:02.738 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:10:07.274 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 9 6412 1 2025-11-20 13:10:19.363 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:10:19.573 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:07:01.651 00:05:02.008 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:12:08.120 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57016 10 6452 1 2025-11-20 13:09:00.921 00:05:02.678 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:10:00.901 00:05:02.718 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:14:08.932 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 10 6452 1 2025-11-20 13:11:01.672 00:05:01.927 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:10:59.887 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3220 1 2025-11-20 13:15:19.594 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:15:19.589 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:15:19.677 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 1 40 1 2025-11-20 13:12:00.910 00:05:02.730 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:13:01.659 00:05:02.000 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:17:10.141 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58884 9 6412 1 2025-11-20 13:18:10.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49184 9 6412 1 2025-11-20 13:15:00.921 00:05:02.678 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:19:10.927 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39698 9 6412 1 2025-11-20 13:16:00.902 00:05:02.718 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:20:19.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:20:19.676 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:20:11.330 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48682 9 6412 1 2025-11-20 13:16:19.893 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-20 13:17:01.677 00:05:01.922 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:21:22.094 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58368 1 40 1 2025-11-20 13:18:00.911 00:05:02.728 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:22:22.509 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33658 1 40 1 2025-11-20 13:19:01.657 00:05:02.005 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:23:12.552 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38906 9 6412 1 2025-11-20 13:21:00.921 00:05:02.678 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:25:19.716 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:25:19.500 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:25:23.747 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35868 1 40 1 2025-11-20 13:21:39.903 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2604 1 2025-11-20 13:22:00.901 00:05:02.719 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:26:13.787 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35008 10 6452 1 2025-11-20 13:23:01.678 00:05:01.923 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:24:00.914 00:05:02.727 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:28:14.607 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46138 9 6412 1 2025-11-20 13:25:01.659 00:05:02.002 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:29:15.008 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36032 10 6452 1 2025-11-20 13:30:19.688 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:30:19.777 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:27:00.922 00:05:02.679 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:26:59.907 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2676 1 2025-11-20 13:28:00.904 00:05:02.718 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:32:26.585 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44232 1 40 1 2025-11-20 13:29:01.678 00:05:01.923 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:33:16.624 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38398 9 6412 1 2025-11-20 13:30:00.914 00:05:02.728 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:34:16.987 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 9 6412 1 2025-11-20 13:31:01.659 00:05:02.003 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:35:19.969 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:35:20.164 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:35:27.783 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38422 1 40 1 2025-11-20 13:32:19.913 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-20 13:33:00.923 00:05:02.679 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:37:18.234 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47682 10 6452 1 2025-11-20 13:34:00.905 00:05:02.718 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:35:01.680 00:05:01.923 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:36:00.923 00:05:02.721 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:40:20.283 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:40:20.284 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:40:19.882 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52648 9 6412 1 2025-11-20 13:37:01.659 00:05:02.004 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:41:30.616 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50858 1 40 1 2025-11-20 13:37:39.917 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-20 13:42:20.653 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38244 9 6412 1 2025-11-20 13:39:00.924 00:05:02.680 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:43:21.051 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54126 10 6452 1 2025-11-20 13:40:00.906 00:05:02.719 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:44:21.456 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57106 9 6412 1 2025-11-20 13:41:01.682 00:05:01.923 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:45:20.200 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:45:20.281 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:45:21.828 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37130 9 6412 1 2025-11-20 13:42:00.916 00:05:02.729 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:46:22.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37422 10 6452 1 2025-11-20 13:43:01.663 00:05:02.005 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:42:59.926 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3196 1 2025-11-20 13:48:23.036 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47024 10 6452 1 2025-11-20 13:45:00.928 00:05:02.680 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:49:33.760 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42366 1 40 1 2025-11-20 13:46:00.907 00:05:02.720 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:50:20.397 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:50:20.303 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:50:23.804 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35790 10 6452 1 2025-11-20 13:47:01.683 00:05:01.924 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:51:34.538 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52652 1 40 1 2025-11-20 13:48:00.926 00:05:02.723 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:48:19.929 00:05:00.234 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2600 1 2025-11-20 13:52:24.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60994 9 6412 1 2025-11-20 13:49:01.663 00:05:02.005 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 13:53:24.988 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36462 10 6452 1 2025-11-20 13:54:25.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36864 9 6412 1 2025-11-20 13:51:00.936 00:05:02.672 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 13:55:20.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:55:20.176 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 13:55:25.795 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52138 10 6452 1 2025-11-20 13:52:00.926 00:05:02.703 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 13:53:01.684 00:05:01.925 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 13:57:36.966 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59746 1 40 1 2025-11-20 13:53:29.943 00:05:10.041 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 13:54:00.928 00:05:02.722 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 13:58:27.009 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35296 10 6452 1 Summary: total flows: 129, total bytes: 281516, total packets: 1439, avg bps: 585, avg pps: 0, avg bpp: 195 Time window: 2025-11-20 12:54:59 - 2025-11-20 13:59:03 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0053s User: 0.0000s Wall: 0.0018s flows/second: 71503.3 Runtime: 0.0018s