Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 16:55:05.186 00:05:02.011 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:59:05.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55268 1 40 1 2025-11-27 16:56:04.605 00:05:02.532 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:01:06.745 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51172 1 40 1 2025-11-27 16:57:34.097 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-27 17:01:56.788 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45354 9 6412 1 2025-11-27 16:58:05.206 00:05:01.931 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:58:04.585 00:05:02.572 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:02:57.205 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34638 9 6412 1 2025-11-27 17:03:46.614 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:03:46.708 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:03:57.613 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48010 10 6452 1 2025-11-27 17:00:04.641 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:04:58.022 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33014 10 6452 1 2025-11-27 17:01:05.187 00:05:02.013 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:02:04.605 00:05:02.535 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:02:54.101 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2816 1 2025-11-27 17:06:58.786 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:46284 9 6412 1 2025-11-27 17:04:04.587 00:05:02.574 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:07:59.206 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39952 9 6412 1 2025-11-27 17:04:05.207 00:05:01.934 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:08:46.604 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:08:46.181 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:08:59.607 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59296 10 6452 1 2025-11-27 17:06:04.642 00:05:02.542 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:09:59.964 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47144 9 6412 1 2025-11-27 17:07:05.187 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:11:00.380 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56986 10 6452 1 2025-11-27 17:08:04.609 00:05:02.540 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:12:00.782 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57284 9 6412 1 2025-11-27 17:08:14.106 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 44 3328 1 2025-11-27 17:13:01.192 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:47658 10 6452 1 2025-11-27 17:13:46.433 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:13:46.710 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:10:04.589 00:05:02.580 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:10:05.207 00:05:01.941 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:14:01.571 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:48038 9 6412 1 2025-11-27 17:15:02.034 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-11-27 17:12:04.644 00:05:02.546 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:13:05.194 00:05:02.015 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:17:13.246 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43240 1 40 1 2025-11-27 17:13:34.111 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-27 17:14:04.610 00:05:02.539 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:18:46.568 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:18:46.694 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:19:14.056 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54030 1 40 1 2025-11-27 17:16:05.211 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:16:04.590 00:05:02.579 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:20:14.449 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48814 1 40 1 2025-11-27 17:18:04.648 00:05:02.543 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:22:04.903 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33590 10 6452 1 2025-11-27 17:18:54.113 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-27 17:19:05.191 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:23:46.913 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:23:46.843 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:20:04.610 00:05:02.541 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:24:05.730 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39906 9 6412 1 2025-11-27 17:25:06.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38566 10 6452 1 2025-11-27 17:22:04.591 00:05:02.580 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:22:05.212 00:05:01.939 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:26:06.542 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40408 10 6452 1 2025-11-27 17:27:06.944 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:58592 9 6412 1 2025-11-27 17:24:04.650 00:05:02.544 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:24:14.123 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-27 17:28:47.099 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:28:46.893 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:25:05.193 00:05:02.021 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:29:19.337 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 1 40 1 2025-11-27 17:26:04.611 00:05:02.544 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:30:09.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54344 9 6412 1 2025-11-27 17:31:09.795 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60052 9 6412 1 2025-11-27 17:28:04.592 00:05:02.583 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:28:05.215 00:05:01.941 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:32:20.536 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54450 1 40 1 2025-11-27 17:29:34.135 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-27 17:33:46.911 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:33:47.096 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:30:04.652 00:05:02.543 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:34:10.981 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38208 10 6452 1 2025-11-27 17:31:05.194 00:05:02.021 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:35:21.711 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47262 1 40 1 2025-11-27 17:32:04.613 00:05:02.543 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:36:22.075 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35558 1 40 1 2025-11-27 17:37:12.137 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49774 9 6412 1 2025-11-27 17:34:04.592 00:05:02.584 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:34:05.224 00:05:01.932 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:38:12.506 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39674 10 6452 1 2025-11-27 17:38:47.026 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:38:47.186 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:34:54.145 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 45 3456 1 2025-11-27 17:39:12.920 00:00:10.595 TCP 1.101.0.1:3000 -> 23.104.0.1:59866 12 6556 1 2025-11-27 17:36:04.654 00:05:02.542 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:37:05.196 00:05:02.021 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:41:13.966 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34176 9 6412 1 2025-11-27 17:38:04.613 00:05:02.544 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:42:24.648 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 1 40 1 2025-11-27 17:43:47.198 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:43:47.141 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:40:04.592 00:05:02.586 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:40:05.218 00:05:01.940 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:40:14.153 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-11-27 17:44:25.466 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57792 1 40 1 2025-11-27 17:45:15.504 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56088 10 6452 1 2025-11-27 17:42:04.657 00:05:02.541 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:46:26.256 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43180 1 40 1 2025-11-27 17:43:05.198 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:47:26.660 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43346 1 40 1 2025-11-27 17:44:04.614 00:05:02.544 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:48:16.710 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49260 9 6412 1 2025-11-27 17:48:47.253 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:48:47.180 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:45:34.160 00:05:10.241 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2604 1 2025-11-27 17:46:04.595 00:05:02.586 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:46:05.219 00:05:01.941 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:50:27.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44314 1 40 1 2025-11-27 17:48:04.659 00:05:02.542 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:49:05.199 00:05:02.022 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 17:53:47.233 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:53:47.571 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 17:50:04.616 00:05:02.545 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 17:54:19.780 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:53714 9 6412 1 2025-11-27 17:50:54.164 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 17:55:30.572 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33138 1 40 1 2025-11-27 17:52:04.596 00:05:02.585 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 17:52:05.221 00:05:01.939 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 17:56:20.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45524 10 6452 1 2025-11-27 17:57:21.018 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46286 9 6412 1 2025-11-27 17:54:04.660 00:05:02.541 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 17:58:31.742 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41038 1 40 1 2025-11-27 17:58:47.382 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 17:58:47.378 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 131, total bytes: 266400, total packets: 1392, avg bps: 554, avg pps: 0, avg bpp: 191 Time window: 2025-11-27 16:55:05 - 2025-11-27 17:59:07 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0026s User: 0.0018s Wall: 0.0012s flows/second: 105990.3 Runtime: 0.0012s