Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 02:58:48.615 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44670 9 6412 1 2025-11-26 02:55:04.403 00:05:02.031 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 02:56:03.853 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:00:49.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54336 10 6452 1 2025-11-26 03:02:00.171 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50670 1 40 1 2025-11-26 02:58:04.424 00:05:01.950 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 02:58:03.833 00:05:02.560 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:03:00.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:03:00.525 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49598 1 40 1 2025-11-26 03:03:00.572 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:59:41.062 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2516 1 2025-11-26 03:03:50.565 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55092 9 6412 1 2025-11-26 03:00:03.920 00:05:02.495 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:04:50.979 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34648 9 6412 1 2025-11-26 03:01:04.404 00:05:02.030 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:06:01.773 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52274 1 40 1 2025-11-26 03:02:03.854 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:08:00.544 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:08:00.549 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:04:04.438 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:04:03.833 00:05:02.561 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:08:52.606 00:00:10.513 TCP 1.101.0.1:3000 -> 23.104.0.1:55078 9 6412 1 2025-11-26 03:05:01.076 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2936 1 2025-11-26 03:10:03.527 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53972 1 40 1 2025-11-26 03:06:03.921 00:05:02.495 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:10:53.560 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48224 9 6412 1 2025-11-26 03:07:04.406 00:05:02.030 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:08:03.856 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:13:00.694 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:13:00.696 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:10:04.427 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:13:54.791 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 9 6412 1 2025-11-26 03:10:03.835 00:05:02.560 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:10:21.081 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-26 03:14:55.206 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49602 10 6452 1 2025-11-26 03:15:55.609 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46538 10 6452 1 2025-11-26 03:12:03.920 00:05:02.496 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:13:04.408 00:05:02.029 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:18:00.737 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:18:00.981 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:18:06.820 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49098 1 40 1 2025-11-26 03:14:03.856 00:05:02.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:19:07.248 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35190 1 40 1 2025-11-26 03:15:41.091 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-26 03:16:03.835 00:05:02.561 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:16:04.428 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:19:57.288 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 10 6452 1 2025-11-26 03:21:08.030 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 1 40 1 2025-11-26 03:18:03.929 00:05:02.490 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:23:01.076 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:23:01.074 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:19:04.410 00:05:02.028 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:20:03.858 00:05:02.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:23:58.840 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54948 10 6452 1 2025-11-26 03:21:01.097 00:05:10.700 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2868 1 2025-11-26 03:22:03.837 00:05:02.562 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:25:59.603 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48736 10 6452 1 2025-11-26 03:22:04.429 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:27:10.374 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43498 1 40 1 2025-11-26 03:28:01.260 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:28:01.077 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:24:03.923 00:05:02.497 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:28:00.412 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44474 9 6412 1 2025-11-26 03:25:04.410 00:05:02.030 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:29:00.826 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:47676 9 6412 1 2025-11-26 03:26:03.860 00:05:02.522 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:30:01.206 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 9 6412 1 2025-11-26 03:26:21.101 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2644 1 2025-11-26 03:31:01.566 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43516 10 6452 1 2025-11-26 03:28:03.839 00:05:02.562 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:28:04.431 00:05:01.950 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:33:01.311 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:33:01.148 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:33:12.725 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44972 1 40 1 2025-11-26 03:30:03.926 00:05:02.497 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:31:04.412 00:05:02.031 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:35:03.171 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49970 9 6412 1 2025-11-26 03:31:41.103 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2908 1 2025-11-26 03:32:03.860 00:05:02.524 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:36:03.583 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39488 10 6452 1 2025-11-26 03:38:01.480 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:38:01.439 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:34:03.840 00:05:02.563 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:34:04.439 00:05:01.945 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:38:14.742 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33862 1 40 1 2025-11-26 03:36:03.928 00:05:02.495 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:40:05.200 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41918 10 6452 1 2025-11-26 03:37:04.414 00:05:02.029 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:37:01.107 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2792 1 2025-11-26 03:41:05.610 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36390 9 6412 1 2025-11-26 03:38:03.863 00:05:02.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:43:01.206 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:43:01.206 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:43:16.674 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36984 1 40 1 2025-11-26 03:40:04.434 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:40:03.845 00:05:02.558 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:44:06.715 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44906 10 6452 1 2025-11-26 03:45:07.084 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53930 9 6412 1 2025-11-26 03:42:03.929 00:05:02.494 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:46:07.490 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43176 10 6452 1 2025-11-26 03:42:21.109 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 33 2256 1 2025-11-26 03:43:04.415 00:05:02.029 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:47:18.218 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 1 40 1 2025-11-26 03:48:01.435 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:48:01.275 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:44:03.866 00:05:02.519 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:48:08.257 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47486 10 6452 1 2025-11-26 03:49:19.018 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34574 1 40 1 2025-11-26 03:46:04.436 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:46:03.846 00:05:02.559 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:50:19.430 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50142 1 40 1 2025-11-26 03:51:19.908 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52472 1 40 1 2025-11-26 03:47:41.112 00:05:10.097 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2940 1 2025-11-26 03:48:03.935 00:05:02.491 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:53:01.667 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:53:01.728 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:49:04.417 00:05:02.029 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:53:20.730 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 1 40 1 2025-11-26 03:50:03.866 00:05:02.519 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:54:10.771 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 9 6412 1 2025-11-26 03:55:11.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49642 10 6452 1 2025-11-26 03:52:03.847 00:05:02.560 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:52:04.436 00:05:01.951 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:56:11.582 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51182 9 6412 1 2025-11-26 03:53:01.126 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-11-26 03:57:11.986 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47970 9 6412 1 2025-11-26 03:58:01.637 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:58:01.800 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:54:03.932 00:05:02.496 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:58:12.350 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 Summary: total flows: 130, total bytes: 259884, total packets: 1381, avg bps: 541, avg pps: 0, avg bpp: 188 Time window: 2025-11-26 02:55:04 - 2025-11-26 03:59:06 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0054s User: 0.0009s Wall: 0.0016s flows/second: 83220.3 Runtime: 0.0016s