Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 22:55:01.826 00:05:02.034 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 22:59:15.110 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39274 1 40 1 2025-11-20 23:00:05.146 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53014 10 6452 1 2025-11-20 23:00:31.289 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:00:31.273 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 22:57:01.249 00:05:02.553 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 22:56:50.708 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-20 23:01:15.912 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39046 1 40 1 2025-11-20 22:58:01.229 00:05:02.594 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:02:05.957 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:36384 9 6412 1 2025-11-20 22:59:01.847 00:05:01.956 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:03:06.379 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37472 10 6452 1 2025-11-20 23:00:01.234 00:05:02.608 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:04:06.787 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56704 9 6412 1 2025-11-20 23:01:01.826 00:05:02.036 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:05:07.199 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40892 10 6452 1 2025-11-20 23:05:31.386 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:05:31.374 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:02:10.709 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2884 1 2025-11-20 23:03:01.250 00:05:02.552 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:07:18.378 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37530 1 40 1 2025-11-20 23:04:01.231 00:05:02.592 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:08:08.416 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33516 10 6452 1 2025-11-20 23:05:01.847 00:05:01.956 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:09:08.773 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 9 6412 1 2025-11-20 23:06:01.236 00:05:02.608 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:10:09.187 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 9 6412 1 2025-11-20 23:10:31.496 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:10:31.500 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:07:01.828 00:05:02.036 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:07:30.713 00:05:00.778 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2844 1 2025-11-20 23:12:31.082 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55486 1 40 1 2025-11-20 23:09:01.253 00:05:02.552 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:13:31.485 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39760 1 40 1 2025-11-20 23:10:01.232 00:05:02.592 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:14:31.842 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58848 1 40 1 2025-11-20 23:11:01.848 00:05:01.956 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:15:31.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:15:21.880 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51858 9 6412 1 2025-11-20 23:15:31.860 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:12:01.235 00:05:02.608 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:16:32.649 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38062 1 40 1 2025-11-20 23:12:40.716 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2580 1 2025-11-20 23:13:01.829 00:05:02.035 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:15:01.252 00:05:02.552 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:19:33.883 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55924 1 40 1 2025-11-20 23:16:01.232 00:05:02.592 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:20:31.765 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:20:31.840 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:20:23.919 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50886 10 6452 1 2025-11-20 23:17:01.852 00:05:01.954 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:21:24.334 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42254 9 6412 1 2025-11-20 23:18:01.238 00:05:02.608 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:18:00.720 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-11-20 23:22:35.101 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39824 1 40 1 2025-11-20 23:19:01.831 00:05:02.034 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:23:25.140 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 9 6412 1 2025-11-20 23:24:25.547 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53958 10 6452 1 2025-11-20 23:21:01.253 00:05:02.553 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:25:31.737 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:25:31.786 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:25:25.911 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58334 10 6452 1 2025-11-20 23:22:01.233 00:05:02.593 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:23:01.855 00:05:01.952 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:23:20.724 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-20 23:27:26.702 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40424 10 6452 1 2025-11-20 23:24:01.239 00:05:02.608 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:28:27.132 00:00:10.985 TCP 1.101.0.1:3000 -> 23.104.0.1:36994 10 6452 1 2025-11-20 23:25:01.835 00:05:02.032 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:30:31.765 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:30:31.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:30:28.554 00:00:10.532 TCP 1.101.0.1:3000 -> 23.104.0.1:49144 9 6412 1 2025-11-20 23:27:01.255 00:05:02.553 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:31:39.463 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60330 1 40 1 2025-11-20 23:28:01.234 00:05:02.593 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:32:29.515 00:00:10.510 TCP 1.101.0.1:3000 -> 23.104.0.1:35580 9 6412 1 2025-11-20 23:28:40.727 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2676 1 2025-11-20 23:29:01.857 00:05:01.950 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:33:30.072 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60158 10 6452 1 2025-11-20 23:30:01.242 00:05:02.605 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:34:30.477 00:00:15.522 TCP 1.101.0.1:3000 -> 23.104.0.1:33580 10 6452 1 2025-11-20 23:31:01.838 00:05:02.031 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:35:31.988 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:35:31.849 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:35:46.400 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39754 1 40 1 2025-11-20 23:36:36.441 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-11-20 23:33:01.257 00:05:02.552 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:37:36.840 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59622 10 6452 1 2025-11-20 23:34:01.238 00:05:02.591 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:34:00.729 00:05:10.015 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2672 1 2025-11-20 23:35:01.870 00:05:01.939 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:39:47.969 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33204 1 40 1 2025-11-20 23:36:01.245 00:05:02.605 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:40:31.950 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:40:31.854 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:37:01.851 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:41:38.424 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55710 9 6412 1 2025-11-20 23:39:01.259 00:05:02.551 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:39:20.744 00:05:10.021 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2948 1 2025-11-20 23:43:39.234 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40896 9 6412 1 2025-11-20 23:40:01.240 00:05:02.590 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:44:39.627 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57378 9 6412 1 2025-11-20 23:41:01.870 00:05:01.940 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:45:32.080 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:45:32.218 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:45:40.027 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42592 10 6452 1 2025-11-20 23:42:01.245 00:05:02.606 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:46:40.429 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41508 9 6412 1 2025-11-20 23:43:01.850 00:05:02.021 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:47:51.195 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39132 1 40 1 2025-11-20 23:44:40.767 00:05:00.237 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2684 1 2025-11-20 23:48:41.239 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 9 6412 1 2025-11-20 23:45:01.259 00:05:02.554 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:49:52.014 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46750 1 40 1 2025-11-20 23:46:01.240 00:05:02.595 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:50:32.363 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:50:32.123 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:47:01.872 00:05:01.943 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:48:01.248 00:05:02.606 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 23:52:43.604 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33132 9 6412 1 2025-11-20 23:49:01.852 00:05:02.023 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-20 23:49:50.770 00:05:00.313 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2536 1 2025-11-20 23:53:43.966 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52722 10 6452 1 2025-11-20 23:51:01.263 00:05:02.552 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-20 23:55:32.262 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 23:55:32.448 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 23:52:01.243 00:05:02.591 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-20 23:56:45.198 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 9 6412 1 2025-11-20 23:53:01.873 00:05:01.943 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-20 23:57:55.933 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45056 1 40 1 2025-11-20 23:54:01.251 00:05:02.605 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 Summary: total flows: 131, total bytes: 272688, total packets: 1397, avg bps: 567, avg pps: 0, avg bpp: 195 Time window: 2025-11-20 22:55:01 - 2025-11-20 23:59:03 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0057s User: 0.0008s Wall: 0.0023s flows/second: 56685.6 Runtime: 0.0023s