Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 02:55:03.944 00:05:02.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:00:21.408 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 9 6412 1 2025-11-25 02:56:29.159 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-25 02:56:05.883 00:05:57.507 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 02:58:03.368 00:05:02.537 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 02:58:03.964 00:05:01.921 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:02:31.652 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:02:31.669 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:03:22.575 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49458 10 6452 1 2025-11-25 03:00:03.467 00:05:02.464 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:04:33.344 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46030 1 40 1 2025-11-25 03:01:03.945 00:05:02.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:01:49.168 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2708 1 2025-11-25 03:06:23.792 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50042 9 6412 1 2025-11-25 03:02:05.885 00:05:57.505 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:07:31.741 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:07:31.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:07:24.222 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50204 10 6452 1 2025-11-25 03:04:03.371 00:05:02.537 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:04:03.969 00:05:01.918 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:08:24.630 00:00:10.595 TCP 1.101.0.1:3000 -> 23.104.0.1:43780 9 6412 1 2025-11-25 03:09:25.265 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35044 9 6412 1 2025-11-25 03:06:03.470 00:05:02.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:10:25.667 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46376 10 6452 1 2025-11-25 03:07:03.952 00:05:01.996 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:07:09.177 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2672 1 2025-11-25 03:11:26.080 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48868 10 6452 1 2025-11-25 03:12:31.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:12:31.700 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:12:26.492 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:46748 9 6412 1 2025-11-25 03:08:05.887 00:05:57.506 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:13:26.897 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44872 10 6452 1 2025-11-25 03:10:03.371 00:05:02.537 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:10:03.970 00:05:01.918 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:12:03.474 00:05:02.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:12:29.182 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2548 1 2025-11-25 03:13:03.950 00:05:01.999 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:17:32.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:17:32.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:17:28.554 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39318 10 6452 1 2025-11-25 03:18:28.963 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41714 11 6516 1 2025-11-25 03:14:05.887 00:05:57.508 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:16:03.373 00:05:02.539 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:16:03.972 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:20:29.733 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38502 9 6412 1 2025-11-25 03:21:40.608 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35210 1 40 1 2025-11-25 03:17:49.187 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3140 1 2025-11-25 03:18:03.477 00:05:02.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:22:32.130 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:22:31.717 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:22:41.012 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44986 1 40 1 2025-11-25 03:19:03.952 00:05:02.000 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:23:31.050 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56348 9 6412 1 2025-11-25 03:20:05.891 00:05:57.506 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:22:03.973 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:22:03.376 00:05:02.536 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:26:42.612 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42284 1 40 1 2025-11-25 03:23:09.194 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 33 2256 1 2025-11-25 03:27:32.201 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:27:31.995 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:27:32.649 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37522 10 6452 1 2025-11-25 03:24:03.480 00:05:02.452 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:28:33.014 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52980 9 6412 1 2025-11-25 03:25:03.953 00:05:02.000 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:29:33.414 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34636 10 6452 1 2025-11-25 03:30:44.134 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 1 40 1 2025-11-25 03:26:05.892 00:05:57.507 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:31:34.173 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:43654 11 10335 1 2025-11-25 03:28:03.377 00:05:02.537 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:28:03.973 00:05:01.921 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:32:33.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:32:33.129 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:28:29.198 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2812 1 2025-11-25 03:33:35.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 9 6412 1 2025-11-25 03:30:03.482 00:05:02.454 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:34:45.780 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50146 1 40 1 2025-11-25 03:31:03.954 00:05:02.002 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:36:36.234 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47428 10 6452 1 2025-11-25 03:32:05.894 00:05:57.505 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:37:32.230 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:37:32.130 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:37:36.630 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36442 9 6412 1 2025-11-25 03:34:03.973 00:05:01.924 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:33:49.204 00:05:10.739 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2692 1 2025-11-25 03:34:03.379 00:05:02.539 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:38:37.036 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44514 9 6412 1 2025-11-25 03:39:37.400 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51336 10 6452 1 2025-11-25 03:36:03.483 00:05:02.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:40:37.769 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-11-25 03:37:03.956 00:05:02.003 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:42:32.477 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:42:32.479 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:42:38.578 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56052 10 6452 1 2025-11-25 03:38:05.896 00:05:57.508 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:39:09.211 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2740 1 2025-11-25 03:40:03.977 00:05:01.922 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:40:03.380 00:05:02.539 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:44:39.404 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59186 10 6452 1 2025-11-25 03:45:50.129 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45262 1 40 1 2025-11-25 03:42:03.484 00:05:02.456 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:46:40.168 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44944 10 6452 1 2025-11-25 03:43:03.958 00:05:02.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:47:32.401 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:47:32.491 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:44:29.214 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-25 03:48:40.981 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60696 10 6452 1 2025-11-25 03:44:05.898 00:05:57.510 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:49:51.710 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 1 40 1 2025-11-25 03:46:03.978 00:05:01.921 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:46:03.385 00:05:02.535 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:50:41.745 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35462 10 6452 1 2025-11-25 03:51:52.514 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43754 1 40 1 2025-11-25 03:48:03.485 00:05:02.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:52:32.516 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:52:32.704 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:52:42.551 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41450 9 6412 1 2025-11-25 03:49:03.959 00:05:02.002 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:49:49.221 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2872 1 2025-11-25 03:50:05.899 00:05:57.510 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 03:55:54.120 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44596 1 40 1 2025-11-25 03:52:03.387 00:05:02.541 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:52:03.981 00:05:01.928 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 03:57:32.691 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 03:57:32.491 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 03:57:44.565 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45324 10 6452 1 2025-11-25 03:54:03.488 00:05:02.462 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 Summary: total flows: 126, total bytes: 276315, total packets: 1394, avg bps: 575, avg pps: 0, avg bpp: 198 Time window: 2025-11-25 02:55:03 - 2025-11-25 03:59:05 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0040s User: 0.0010s Wall: 0.0023s flows/second: 55876.8 Runtime: 0.0023s