Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 01:55:04.823 00:05:02.017 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 01:59:27.077 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-11-27 01:56:04.316 00:05:02.459 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:00:27.440 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59240 9 6412 1 2025-11-27 02:01:38.280 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41064 1 40 1 2025-11-27 01:58:04.297 00:05:02.500 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 01:58:04.845 00:05:01.932 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 01:58:12.766 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-27 02:03:28.227 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:03:28.225 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:03:28.725 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 9 6621 1 2025-11-27 02:00:04.341 00:05:02.476 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:04:29.138 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46478 10 6661 1 2025-11-27 02:01:04.824 00:05:02.012 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:05:39.907 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46292 1 40 1 2025-11-27 02:02:04.317 00:05:02.460 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:07:30.365 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41898 9 6621 1 2025-11-27 02:03:32.769 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-27 02:04:04.846 00:05:01.931 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:04:04.297 00:05:02.500 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:08:28.338 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:08:28.257 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:08:30.766 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:39518 10 6661 1 2025-11-27 02:09:31.157 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47712 10 6661 1 2025-11-27 02:06:04.341 00:05:02.476 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:07:04.825 00:05:02.012 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:11:31.931 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:46674 12 10578 1 2025-11-27 02:08:04.317 00:05:02.460 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:08:52.779 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2732 1 2025-11-27 02:13:28.530 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:13:28.313 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:13:43.155 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52078 1 40 1 2025-11-27 02:10:04.301 00:05:02.497 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:10:04.847 00:05:01.931 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:14:43.576 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44766 1 40 1 2025-11-27 02:15:33.616 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36342 10 6661 1 2025-11-27 02:12:04.342 00:05:02.477 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:16:44.389 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59682 1 40 1 2025-11-27 02:13:04.826 00:05:02.012 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:17:34.427 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33882 10 6661 1 2025-11-27 02:14:04.335 00:05:02.445 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:14:12.782 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2672 1 2025-11-27 02:18:28.519 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:18:28.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:19:45.519 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46256 1 40 1 2025-11-27 02:16:04.848 00:05:01.931 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:16:04.314 00:05:02.485 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:20:35.560 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49180 10 6661 1 2025-11-27 02:21:35.968 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35288 10 6661 1 2025-11-27 02:18:04.342 00:05:02.478 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:22:46.991 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48182 1 40 1 2025-11-27 02:19:04.828 00:05:02.013 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:23:29.186 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:23:28.939 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:19:32.785 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2792 1 2025-11-27 02:23:37.033 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50252 10 6661 1 2025-11-27 02:20:04.334 00:05:02.446 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:24:37.443 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44672 9 6621 1 2025-11-27 02:25:37.859 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44914 9 6621 1 2025-11-27 02:22:04.850 00:05:01.933 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:22:04.315 00:05:02.488 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:26:48.718 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59052 1 40 1 2025-11-27 02:24:04.344 00:05:02.477 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:28:28.715 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:28:28.763 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:28:39.172 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36464 9 6621 1 2025-11-27 02:24:52.789 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2952 1 2025-11-27 02:25:04.829 00:05:02.015 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:29:39.574 00:00:10.592 TCP 1.101.0.1:3000 -> 23.104.0.1:35900 10 6661 1 2025-11-27 02:26:04.336 00:05:02.448 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:30:40.203 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40308 10 6661 1 2025-11-27 02:31:40.565 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55042 9 6621 1 2025-11-27 02:28:04.315 00:05:02.488 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:28:04.851 00:05:01.932 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:33:28.963 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:33:28.782 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:33:41.385 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:35846 10 6673 1 2025-11-27 02:30:04.345 00:05:02.479 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:30:12.797 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-27 02:31:04.836 00:05:02.010 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:35:52.662 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55452 1 40 1 2025-11-27 02:32:04.336 00:05:02.449 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:34:04.858 00:05:01.928 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:34:04.317 00:05:02.489 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:38:28.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:38:28.889 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:38:43.571 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58324 9 6621 1 2025-11-27 02:35:32.800 00:05:00.582 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2600 1 2025-11-27 02:36:04.353 00:05:02.474 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:37:04.839 00:05:02.007 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:41:44.754 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33910 9 6621 1 2025-11-27 02:38:04.340 00:05:02.446 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:42:45.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51014 10 6661 1 2025-11-27 02:43:28.985 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:43:29.136 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:40:04.321 00:05:02.487 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:40:04.863 00:05:01.925 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:40:42.831 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 02:44:56.361 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37722 1 40 1 2025-11-27 02:45:46.401 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38246 10 6661 1 2025-11-27 02:42:04.350 00:05:02.478 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:46:46.804 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34374 10 6661 1 2025-11-27 02:43:04.843 00:05:02.004 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:44:04.346 00:05:02.442 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:48:28.920 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:48:29.112 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:48:47.619 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38972 9 6621 1 2025-11-27 02:49:48.016 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57194 10 6661 1 2025-11-27 02:46:04.865 00:05:01.925 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:46:04.326 00:05:02.483 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:46:02.835 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2820 1 2025-11-27 02:51:48.813 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:41406 11 10538 1 2025-11-27 02:48:04.351 00:05:02.478 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:49:04.845 00:05:02.005 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 02:53:29.429 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:53:29.144 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 02:53:49.669 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:50944 10 6661 1 2025-11-27 02:50:04.370 00:05:02.420 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 02:51:22.842 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3132 1 2025-11-27 02:55:51.007 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49972 10 6661 1 2025-11-27 02:52:04.350 00:05:02.463 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 02:52:04.868 00:05:01.925 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 02:56:51.374 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34340 9 6621 1 2025-11-27 02:57:51.783 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56840 10 6661 1 2025-11-27 02:54:04.352 00:05:02.503 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 02:58:29.718 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 02:58:29.730 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 127, total bytes: 293036, total packets: 1409, avg bps: 610, avg pps: 0, avg bpp: 207 Time window: 2025-11-27 01:55:04 - 2025-11-27 02:59:06 Total flows processed: 127, passed: 127, Blocks skipped: 0, Bytes read: 13272 Sys: 0.0062s User: 0.0000s Wall: 0.0019s flows/second: 68388.3 Runtime: 0.0019s