Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 01:55:02.850 00:05:02.037 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 01:59:10.091 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37544 9 6412 1 2025-11-23 01:57:02.490 00:05:02.337 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:01:21.271 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34442 1 40 1 2025-11-23 02:01:32.752 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:01:32.649 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:57:44.950 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-11-23 01:58:02.473 00:05:02.376 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:02:11.308 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47512 9 6412 1 2025-11-23 01:59:02.871 00:05:01.957 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:00:02.484 00:05:02.385 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:04:22.481 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42048 1 40 1 2025-11-23 02:01:02.852 00:05:02.037 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:06:12.924 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46698 10 6452 1 2025-11-23 02:06:32.662 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:06:32.647 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:03:02.494 00:05:02.334 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:03:04.955 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2660 1 2025-11-23 02:04:02.474 00:05:02.375 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:08:24.102 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59002 1 40 1 2025-11-23 02:05:02.875 00:05:01.954 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:09:14.141 00:00:10.722 TCP 1.101.0.1:3000 -> 23.104.0.1:49554 10 6452 1 2025-11-23 02:06:02.486 00:05:02.383 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:10:14.903 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49190 10 6452 1 2025-11-23 02:07:02.857 00:05:02.032 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:11:15.305 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59432 10 6452 1 2025-11-23 02:11:32.874 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:11:32.819 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:08:24.955 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2948 1 2025-11-23 02:09:02.497 00:05:02.334 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:13:16.129 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33588 10 6452 1 2025-11-23 02:10:02.475 00:05:02.374 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:14:26.900 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49752 1 40 1 2025-11-23 02:11:02.877 00:05:01.952 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:12:02.486 00:05:02.383 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:16:17.356 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47590 9 6412 1 2025-11-23 02:16:32.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:16:32.915 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:13:02.858 00:05:02.031 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:13:44.962 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-11-23 02:18:18.159 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 9 6412 1 2025-11-23 02:15:02.496 00:05:02.334 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:19:18.517 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48340 10 6452 1 2025-11-23 02:16:02.476 00:05:02.374 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:17:02.879 00:05:01.952 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:21:19.342 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39236 9 6412 1 2025-11-23 02:21:32.998 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:21:32.918 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:18:02.487 00:05:02.384 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:19:02.859 00:05:02.032 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:19:04.950 00:05:10.423 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-23 02:23:20.162 00:00:10.862 TCP 1.101.0.1:3000 -> 23.104.0.1:35840 9 6412 1 2025-11-23 02:24:21.080 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60146 10 6452 1 2025-11-23 02:21:02.496 00:05:02.335 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:25:31.856 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54326 1 40 1 2025-11-23 02:22:02.477 00:05:02.374 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:26:33.050 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:26:33.075 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:23:02.882 00:05:01.955 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:27:32.716 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50678 1 40 1 2025-11-23 02:24:02.488 00:05:02.387 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:28:22.752 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55684 9 6412 1 2025-11-23 02:24:24.973 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-23 02:25:02.863 00:05:02.033 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:27:02.497 00:05:02.338 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:31:23.963 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:57754 9 6412 1 2025-11-23 02:31:33.232 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:31:33.238 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:28:02.478 00:05:02.378 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:32:24.338 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36586 10 6452 1 2025-11-23 02:29:02.890 00:05:01.945 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:33:24.740 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56840 10 6452 1 2025-11-23 02:29:44.989 00:05:09.991 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2948 1 2025-11-23 02:30:02.491 00:05:02.384 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:34:25.151 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50966 9 6412 1 2025-11-23 02:31:02.870 00:05:02.026 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:35:25.559 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 11 10329 1 2025-11-23 02:36:33.277 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:36:33.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:36:26.039 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57396 10 6452 1 2025-11-23 02:33:02.500 00:05:02.338 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:37:26.442 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55248 9 6412 1 2025-11-23 02:34:02.481 00:05:02.378 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:38:26.848 00:00:10.470 TCP 1.101.0.1:3000 -> 23.104.0.1:53654 9 6412 1 2025-11-23 02:35:02.895 00:05:01.944 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:35:04.978 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2908 1 2025-11-23 02:36:02.493 00:05:02.386 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:40:27.760 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:40002 11 10335 1 2025-11-23 02:37:02.875 00:05:02.024 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:41:33.112 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:41:33.263 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:41:28.245 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60114 9 6412 1 2025-11-23 02:42:39.018 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49278 1 40 1 2025-11-23 02:39:02.502 00:05:02.339 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:40:02.482 00:05:02.379 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:40:24.986 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2748 1 2025-11-23 02:41:02.895 00:05:01.946 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:42:02.494 00:05:02.387 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:46:33.737 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:46:33.740 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:46:40.625 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54088 1 40 1 2025-11-23 02:43:02.876 00:05:02.025 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:47:30.672 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44850 10 6452 1 2025-11-23 02:48:31.084 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57986 10 6452 1 2025-11-23 02:45:02.502 00:05:02.340 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:49:31.486 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48228 9 6412 1 2025-11-23 02:45:44.991 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-23 02:46:02.482 00:05:02.379 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:50:42.243 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 1 40 1 2025-11-23 02:47:02.898 00:05:01.944 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:51:33.578 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:51:33.726 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:48:02.495 00:05:02.387 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:52:43.053 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45018 1 40 1 2025-11-23 02:49:02.880 00:05:02.024 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 02:53:33.119 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42466 9 6412 1 2025-11-23 02:54:43.811 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51172 1 40 1 2025-11-23 02:51:04.996 00:05:00.845 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2600 1 2025-11-23 02:51:02.504 00:05:02.340 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 02:52:02.485 00:05:02.379 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 02:56:34.077 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 02:56:34.020 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 02:56:34.248 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56864 9 6412 1 2025-11-23 02:53:02.901 00:05:01.945 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 02:57:34.619 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46418 9 6412 1 2025-11-23 02:54:02.496 00:05:02.388 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 02:58:45.385 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43934 1 40 1 Summary: total flows: 127, total bytes: 274052, total packets: 1390, avg bps: 570, avg pps: 0, avg bpp: 197 Time window: 2025-11-23 01:55:02 - 2025-11-23 02:59:04 Total flows processed: 127, passed: 127, Blocks skipped: 0, Bytes read: 13272 Sys: 0.0047s User: 0.0019s Wall: 0.0026s flows/second: 48214.8 Runtime: 0.0027s