Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 00:58:45.030 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42370 9 6412 1 2025-11-22 00:55:02.356 00:05:02.052 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 00:59:45.445 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49514 10 6452 1 2025-11-22 00:56:12.892 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2620 1 2025-11-22 01:01:02.610 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:57:01.932 00:05:02.416 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:01:02.669 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:01:56.620 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33096 1 40 1 2025-11-22 00:58:01.911 00:05:02.457 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 00:59:02.376 00:05:01.972 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:03:47.091 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35200 10 6452 1 2025-11-22 01:00:01.920 00:05:02.472 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:04:57.818 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37870 1 40 1 2025-11-22 01:01:02.356 00:05:02.053 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:01:32.897 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2912 1 2025-11-22 01:05:47.856 00:00:11.146 TCP 1.101.0.1:3000 -> 23.104.0.1:57948 10 6452 1 2025-11-22 01:06:02.710 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:06:02.782 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:03:01.932 00:05:02.417 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:07:49.440 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36934 9 6412 1 2025-11-22 01:04:01.913 00:05:02.457 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:09:00.211 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46938 1 40 1 2025-11-22 01:05:02.379 00:05:01.972 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:09:50.252 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36314 9 6412 1 2025-11-22 01:06:01.923 00:05:02.468 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:07:02.358 00:05:02.052 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:06:52.906 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-22 01:11:02.678 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:11:02.668 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:11:00.933 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52468 1 40 1 2025-11-22 01:12:51.349 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57146 9 6412 1 2025-11-22 01:09:01.934 00:05:02.416 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:10:01.924 00:05:02.446 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:14:02.981 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55198 1 40 1 2025-11-22 01:15:03.391 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59116 1 40 1 2025-11-22 01:11:02.380 00:05:01.971 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:16:02.931 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:16:02.760 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:15:53.428 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54898 9 6412 1 2025-11-22 01:12:01.926 00:05:02.466 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:12:12.915 00:05:00.532 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2720 1 2025-11-22 01:17:04.196 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57636 1 40 1 2025-11-22 01:13:02.361 00:05:02.050 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:18:04.556 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34006 1 40 1 2025-11-22 01:15:01.938 00:05:02.413 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:16:01.918 00:05:02.453 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:21:02.733 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:17:02.384 00:05:01.967 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:21:02.890 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:20:55.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46812 10 6452 1 2025-11-22 01:17:22.920 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-11-22 01:18:01.925 00:05:02.467 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:19:02.370 00:05:02.044 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:23:57.194 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34114 10 6452 1 2025-11-22 01:21:01.939 00:05:02.414 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:25:07.969 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55194 1 40 1 2025-11-22 01:26:03.440 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:26:03.438 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:22:01.920 00:05:02.454 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:26:08.375 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33580 1 40 1 2025-11-22 01:22:42.928 00:05:10.012 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2868 1 2025-11-22 01:23:02.391 00:05:01.964 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:27:08.780 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 1 40 1 2025-11-22 01:24:01.927 00:05:02.467 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:28:09.182 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58014 1 40 1 2025-11-22 01:25:02.370 00:05:02.043 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:29:59.624 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55406 10 6452 1 2025-11-22 01:31:03.184 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:27:01.942 00:05:02.413 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:31:03.301 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:28:01.921 00:05:02.453 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:28:02.941 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-11-22 01:32:00.445 00:00:23.227 TCP 1.101.0.1:3000 -> 23.104.0.1:52154 10 6452 1 2025-11-22 01:29:02.391 00:05:01.963 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:33:13.747 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51800 9 6412 1 2025-11-22 01:30:01.946 00:05:02.449 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:31:02.371 00:05:02.044 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:35:24.881 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49950 1 40 1 2025-11-22 01:36:03.889 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:36:03.886 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:36:14.920 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50466 12 6556 1 2025-11-22 01:33:01.952 00:05:02.402 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:37:15.339 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45150 9 6412 1 2025-11-22 01:33:22.948 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-22 01:34:01.933 00:05:02.442 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:35:02.392 00:05:01.962 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:39:16.166 00:00:11.135 TCP 1.101.0.1:3000 -> 23.104.0.1:41328 10 6452 1 2025-11-22 01:36:01.953 00:05:02.450 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:40:17.333 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36280 10 6452 1 2025-11-22 01:41:03.341 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:41:03.336 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:37:02.373 00:05:02.050 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:41:17.731 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 9 6412 1 2025-11-22 01:42:18.135 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 9 6412 1 2025-11-22 01:38:42.955 00:05:10.966 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-22 01:39:01.954 00:05:02.408 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:43:29.003 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49928 1 40 1 2025-11-22 01:40:01.934 00:05:02.448 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:44:19.041 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-11-22 01:41:02.392 00:05:01.970 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:45:29.819 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60352 1 40 1 2025-11-22 01:42:01.952 00:05:02.450 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:46:03.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:46:03.419 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:46:30.707 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60954 1 40 1 2025-11-22 01:43:02.373 00:05:02.052 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:47:20.745 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33020 9 6412 1 2025-11-22 01:44:02.964 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2964 1 2025-11-22 01:48:31.523 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51558 1 40 1 2025-11-22 01:45:01.955 00:05:02.408 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:49:31.929 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37936 1 40 1 2025-11-22 01:46:01.936 00:05:02.448 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:50:21.968 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60412 9 6412 1 2025-11-22 01:51:03.491 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:47:02.393 00:05:01.972 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:51:03.716 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:48:01.954 00:05:02.453 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:52:33.614 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38396 1 40 1 2025-11-22 01:49:02.379 00:05:02.047 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-22 01:49:22.979 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2688 1 2025-11-22 01:54:24.059 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51642 10 6452 1 2025-11-22 01:51:01.961 00:05:02.409 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-22 01:56:04.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:56:04.091 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:52:01.940 00:05:02.449 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-22 01:56:35.918 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33312 1 40 1 2025-11-22 01:53:02.403 00:05:01.973 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-22 01:57:36.345 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 1 40 1 2025-11-22 01:54:01.955 00:05:02.456 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-22 01:58:26.380 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36520 9 6412 1 Summary: total flows: 130, total bytes: 228116, total packets: 1341, avg bps: 474, avg pps: 0, avg bpp: 170 Time window: 2025-11-22 00:55:02 - 2025-11-22 01:59:04 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0041s User: 0.0020s Wall: 0.0021s flows/second: 62258.5 Runtime: 0.0021s