Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 12:58:51.941 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 1 40 1 2025-11-24 12:55:03.670 00:05:01.976 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 12:55:17.986 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2688 1 2025-11-24 12:59:41.985 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35418 9 6412 1 2025-11-24 13:00:42.385 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59148 10 6452 1 2025-11-24 12:56:05.583 00:05:57.535 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 12:58:03.095 00:05:02.515 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 12:58:03.688 00:05:01.901 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:02:14.800 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:02:14.709 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:03:53.932 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 1 40 1 2025-11-24 13:00:03.199 00:05:02.431 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:00:37.995 00:05:00.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2844 1 2025-11-24 13:04:43.976 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59970 10 6452 1 2025-11-24 13:01:03.669 00:05:01.981 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:05:44.381 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 9 6412 1 2025-11-24 13:06:55.131 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33178 1 40 1 2025-11-24 13:02:05.586 00:05:57.532 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:07:14.827 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:07:14.830 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:07:45.167 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-11-24 13:04:03.692 00:05:01.900 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:04:03.098 00:05:02.513 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:08:45.535 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40518 10 6452 1 2025-11-24 13:05:48.004 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-24 13:09:56.262 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 1 40 1 2025-11-24 13:06:03.200 00:05:02.431 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:10:46.300 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45108 9 6412 1 2025-11-24 13:07:03.670 00:05:01.980 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:11:46.659 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55054 10 6452 1 2025-11-24 13:12:15.029 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:12:15.042 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:08:05.589 00:05:57.529 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:13:47.428 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45304 9 6412 1 2025-11-24 13:10:03.691 00:05:01.901 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:10:03.098 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:14:58.205 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 1 40 1 2025-11-24 13:11:08.014 00:05:10.033 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 3008 1 2025-11-24 13:15:58.629 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58196 1 40 1 2025-11-24 13:12:03.203 00:05:02.429 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:13:03.671 00:05:01.981 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:17:15.102 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:17:15.184 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:17:49.084 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56690 10 6452 1 2025-11-24 13:18:49.490 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 9 6412 1 2025-11-24 13:14:05.592 00:05:57.527 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:20:00.299 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 1 40 1 2025-11-24 13:16:03.098 00:05:02.515 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:16:03.691 00:05:01.902 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:16:28.047 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2672 1 2025-11-24 13:18:03.205 00:05:02.430 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:22:15.024 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:22:15.216 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:19:03.673 00:05:01.982 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:20:05.592 00:05:57.529 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:25:02.328 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 1 40 1 2025-11-24 13:21:48.056 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2580 1 2025-11-24 13:22:03.099 00:05:02.516 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:26:02.740 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 1 40 1 2025-11-24 13:22:03.694 00:05:01.901 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:26:52.780 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37092 9 6412 1 2025-11-24 13:27:15.138 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:27:15.135 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:27:53.174 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55198 10 6452 1 2025-11-24 13:24:03.206 00:05:02.429 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:29:03.947 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37722 1 40 1 2025-11-24 13:25:03.674 00:05:01.981 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:26:05.595 00:05:57.527 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:27:08.067 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3056 1 2025-11-24 13:28:03.102 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:31:54.793 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53988 10 6452 1 2025-11-24 13:28:03.697 00:05:01.900 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:32:15.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:32:15.478 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:32:55.215 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-11-24 13:30:03.210 00:05:02.434 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:33:55.645 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53668 9 6412 1 2025-11-24 13:31:03.699 00:05:01.959 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:32:28.073 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-11-24 13:32:05.595 00:05:57.528 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:36:56.822 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:40078 10 6452 1 2025-11-24 13:37:15.515 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:37:15.524 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:34:03.102 00:05:02.515 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:34:03.727 00:05:01.870 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:37:57.193 00:00:19.703 TCP 1.101.0.1:3000 -> 23.104.0.1:33736 10 6452 1 2025-11-24 13:39:06.960 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35462 10 6452 1 2025-11-24 13:36:03.211 00:05:02.427 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:37:03.708 00:05:01.952 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:41:07.745 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35748 10 6452 1 2025-11-24 13:37:48.080 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-24 13:42:15.842 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:42:18.532 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 1 40 1 2025-11-24 13:42:15.743 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:38:05.597 00:05:57.533 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:43:08.566 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39364 10 6452 1 2025-11-24 13:40:03.109 00:05:02.511 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:40:03.728 00:05:01.872 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:42:03.214 00:05:02.430 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:43:03.708 00:05:01.954 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:43:08.086 00:05:10.865 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3092 1 2025-11-24 13:47:15.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:47:15.649 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:47:10.134 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:49854 10 6452 1 2025-11-24 13:44:05.601 00:05:57.532 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:46:03.729 00:05:01.877 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:46:03.111 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:51:22.074 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39520 1 40 1 2025-11-24 13:48:03.218 00:05:02.430 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:52:15.803 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:52:15.788 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:52:22.496 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40848 1 40 1 2025-11-24 13:48:28.093 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2564 1 2025-11-24 13:49:03.710 00:05:01.957 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 13:53:12.530 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-11-24 13:50:05.609 00:05:57.527 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 13:55:13.319 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46350 9 6412 1 2025-11-24 13:52:03.730 00:05:01.877 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 13:52:03.111 00:05:02.515 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 13:57:16.179 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:57:16.179 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:57:14.547 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53196 10 6452 1 2025-11-24 13:53:48.095 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-11-24 13:54:03.215 00:05:02.433 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:58:14.913 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48128 9 6412 1 Summary: total flows: 125, total bytes: 243376, total packets: 1393, avg bps: 506, avg pps: 0, avg bpp: 174 Time window: 2025-11-24 12:55:03 - 2025-11-24 13:59:05 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0047s User: 0.0012s Wall: 0.0020s flows/second: 62781.5 Runtime: 0.0020s