Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 04:58:44.834 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53142 10 6452 1 2025-11-27 04:55:04.899 00:05:02.024 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 04:59:55.601 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 1 40 1 2025-11-27 04:56:04.404 00:05:02.458 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:00:56.007 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60218 1 40 1 2025-11-27 04:58:04.920 00:05:01.942 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 04:58:04.384 00:05:02.497 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 04:59:03.048 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-27 05:03:31.860 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:03:31.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:00:04.393 00:05:02.510 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:01:04.901 00:05:02.022 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:02:04.406 00:05:02.457 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:06:49.671 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 9 6412 1 2025-11-27 05:08:00.448 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50558 1 40 1 2025-11-27 05:04:04.387 00:05:02.496 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:04:04.921 00:05:01.941 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:08:32.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:08:31.976 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:04:23.060 00:05:10.446 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2608 1 2025-11-27 05:08:50.486 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35146 9 6412 1 2025-11-27 05:06:04.395 00:05:02.508 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:10:51.298 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51052 9 6412 1 2025-11-27 05:07:04.902 00:05:02.022 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:11:51.660 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37432 9 6412 1 2025-11-27 05:08:04.409 00:05:02.455 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:13:02.404 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54300 1 40 1 2025-11-27 05:13:32.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:13:31.810 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:09:43.067 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2712 1 2025-11-27 05:13:52.444 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 10 6452 1 2025-11-27 05:10:04.926 00:05:01.939 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:10:04.389 00:05:02.495 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:14:52.800 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53198 10 6452 1 2025-11-27 05:16:03.527 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33752 1 40 1 2025-11-27 05:12:04.397 00:05:02.509 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:13:04.907 00:05:02.019 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:17:54.325 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34698 9 6412 1 2025-11-27 05:14:04.415 00:05:02.450 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:18:32.281 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:18:32.141 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:19:05.013 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 1 40 1 2025-11-27 05:15:03.074 00:05:10.014 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3096 1 2025-11-27 05:16:04.396 00:05:02.490 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:16:04.926 00:05:01.940 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:19:55.051 00:00:10.631 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 9 6412 1 2025-11-27 05:20:55.721 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6452 1 2025-11-27 05:18:04.404 00:05:02.503 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:19:04.906 00:05:02.021 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:22:56.543 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46358 9 6412 1 2025-11-27 05:23:32.335 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:23:32.157 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:20:04.418 00:05:02.450 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:23:56.947 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44772 9 6412 1 2025-11-27 05:20:23.089 00:05:10.649 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2504 1 2025-11-27 05:22:04.926 00:05:01.943 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:25:57.815 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46878 9 6412 1 2025-11-27 05:22:04.397 00:05:02.492 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:24:04.404 00:05:02.507 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:28:32.534 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:28:32.333 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:25:04.907 00:05:02.024 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:25:43.094 00:05:10.017 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-27 05:26:04.419 00:05:02.452 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:30:10.296 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35518 1 40 1 2025-11-27 05:31:00.335 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49222 9 6412 1 2025-11-27 05:28:04.399 00:05:02.493 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:28:04.928 00:05:01.945 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:32:00.739 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-11-27 05:33:11.498 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37082 1 40 1 2025-11-27 05:33:32.340 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:33:32.595 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:30:04.410 00:05:02.503 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:34:01.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48190 9 6412 1 2025-11-27 05:31:04.908 00:05:02.025 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:31:03.110 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-27 05:32:04.421 00:05:02.451 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:36:02.373 00:00:10.925 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 9 6412 1 2025-11-27 05:34:04.402 00:05:02.491 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:34:04.927 00:05:01.945 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:38:03.746 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54840 9 6412 1 2025-11-27 05:38:32.586 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:38:32.580 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:36:04.412 00:05:02.504 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:40:14.895 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50132 1 40 1 2025-11-27 05:36:23.115 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3092 1 2025-11-27 05:37:04.908 00:05:02.028 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:41:04.934 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56734 9 6412 1 2025-11-27 05:38:04.421 00:05:02.455 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:42:05.338 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33250 10 6452 1 2025-11-27 05:43:32.412 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:43:32.400 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:40:04.930 00:05:01.947 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:40:04.401 00:05:02.496 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:44:06.131 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52568 9 6412 1 2025-11-27 05:41:43.119 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2972 1 2025-11-27 05:42:04.411 00:05:02.506 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:43:04.910 00:05:02.027 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:47:07.359 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 9 6412 1 2025-11-27 05:44:04.424 00:05:02.454 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:48:07.727 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 9 6412 1 2025-11-27 05:48:32.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:48:32.837 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:46:04.404 00:05:02.495 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:46:04.932 00:05:01.947 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:50:08.530 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57762 10 6452 1 2025-11-27 05:47:03.125 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-11-27 05:51:08.946 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:34122 10 6452 1 2025-11-27 05:48:04.416 00:05:02.503 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:52:19.692 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60214 1 40 1 2025-11-27 05:49:04.914 00:05:02.034 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:53:09.732 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42792 10 6452 1 2025-11-27 05:53:32.672 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:53:32.783 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:50:04.425 00:05:02.464 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:54:10.120 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34294 10 6452 1 2025-11-27 05:55:20.902 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37502 1 40 1 2025-11-27 05:52:04.405 00:05:02.505 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:52:04.933 00:05:01.956 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:56:10.946 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38088 9 6412 1 2025-11-27 05:52:23.130 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2604 1 2025-11-27 05:57:11.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52568 9 6412 1 2025-11-27 05:54:04.419 00:05:02.512 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:58:11.773 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54472 9 6412 1 2025-11-27 05:58:32.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:58:32.793 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 126, total bytes: 265808, total packets: 1379, avg bps: 553, avg pps: 0, avg bpp: 192 Time window: 2025-11-27 04:55:04 - 2025-11-27 05:59:06 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0028s User: 0.0028s Wall: 0.0012s flows/second: 107415.1 Runtime: 0.0012s