Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 03:58:41.842 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 9 6412 1 2025-11-28 03:58:59.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 03:58:59.754 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 03:55:05.449 00:05:01.999 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 03:59:53.085 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56022 1 40 1 2025-11-28 03:56:04.784 00:05:02.605 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:00:43.131 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49958 10 6452 1 2025-11-28 03:57:35.093 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2688 1 2025-11-28 03:58:04.764 00:05:02.644 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 03:58:05.471 00:05:01.918 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:02:54.304 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41452 1 40 1 2025-11-28 04:03:59.334 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:03:59.500 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:00:04.873 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:01:05.451 00:05:01.998 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:05:45.138 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 10 6452 1 2025-11-28 04:02:04.785 00:05:02.605 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:06:45.545 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56170 9 6412 1 2025-11-28 04:02:55.100 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 43 3232 1 2025-11-28 04:07:56.288 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36602 1 40 1 2025-11-28 04:04:05.472 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:04:04.767 00:05:02.645 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:08:59.609 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:08:46.322 00:00:11.700 TCP 1.101.0.1:3000 -> 23.104.0.1:44952 10 6452 1 2025-11-28 04:08:59.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:09:58.444 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46706 1 40 1 2025-11-28 04:06:04.875 00:05:02.558 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:10:48.487 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50504 10 6452 1 2025-11-28 04:07:05.452 00:05:02.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:11:48.894 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 9 6412 1 2025-11-28 04:08:04.788 00:05:02.604 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:08:15.109 00:05:10.387 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2688 1 2025-11-28 04:13:59.836 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:13:59.844 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:14:00.077 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38146 1 40 1 2025-11-28 04:10:05.473 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:10:04.768 00:05:02.644 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:14:50.134 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47186 10 6452 1 2025-11-28 04:15:50.539 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38810 10 6452 1 2025-11-28 04:12:04.875 00:05:02.558 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:17:01.332 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42166 1 40 1 2025-11-28 04:13:05.453 00:05:02.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:13:35.111 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2520 1 2025-11-28 04:14:04.790 00:05:02.603 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:18:59.499 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:18:59.614 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:18:51.779 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44378 9 6412 1 2025-11-28 04:16:05.474 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:16:04.770 00:05:02.644 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:22:03.345 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44436 1 40 1 2025-11-28 04:18:04.880 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:22:53.380 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51764 10 6452 1 2025-11-28 04:19:05.454 00:05:02.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:18:55.116 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-28 04:23:59.853 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:24:00.233 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:23:53.784 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:55612 10 6452 1 2025-11-28 04:20:04.791 00:05:02.604 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:25:04.523 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54642 1 40 1 2025-11-28 04:25:54.561 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36024 10 6452 1 2025-11-28 04:22:05.475 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:22:04.771 00:05:02.644 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:28:05.737 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37948 1 40 1 2025-11-28 04:24:04.880 00:05:02.558 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:24:15.121 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-28 04:28:59.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:29:00.088 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:25:05.455 00:05:02.003 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:29:06.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55102 1 40 1 2025-11-28 04:26:04.794 00:05:02.605 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:30:06.571 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50600 1 40 1 2025-11-28 04:30:56.604 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47894 10 6452 1 2025-11-28 04:28:05.476 00:05:01.922 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:31:56.967 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53014 10 6452 1 2025-11-28 04:28:04.773 00:05:02.644 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:29:35.122 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3076 1 2025-11-28 04:34:00.103 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:34:00.083 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:30:04.881 00:05:02.558 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:31:05.460 00:05:01.999 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:35:11.129 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38936 1 40 1 2025-11-28 04:32:04.794 00:05:02.605 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:36:11.532 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37470 1 40 1 2025-11-28 04:37:11.930 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48212 1 40 1 2025-11-28 04:34:04.776 00:05:02.645 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:34:05.480 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:38:01.970 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50820 9 6412 1 2025-11-28 04:39:00.130 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:39:00.192 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:34:55.129 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3004 1 2025-11-28 04:39:02.378 00:00:14.555 TCP 1.101.0.1:3000 -> 23.104.0.1:54122 10 6452 1 2025-11-28 04:36:04.884 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:40:06.991 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58084 9 6412 1 2025-11-28 04:37:05.460 00:05:02.000 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:41:07.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44802 9 6412 1 2025-11-28 04:38:04.798 00:05:02.603 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:43:08.169 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51036 10 6452 1 2025-11-28 04:44:00.435 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:44:00.435 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:40:05.480 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:40:04.781 00:05:02.640 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:44:08.575 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33186 10 6452 1 2025-11-28 04:40:15.141 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-28 04:42:04.884 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:46:09.385 00:00:10.671 TCP 1.101.0.1:3000 -> 23.104.0.1:40736 9 6412 1 2025-11-28 04:43:05.462 00:05:02.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:47:10.120 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40156 9 6412 1 2025-11-28 04:44:04.801 00:05:02.600 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:49:00.302 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:49:00.396 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:49:10.927 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42702 10 6452 1 2025-11-28 04:45:35.149 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-28 04:46:05.481 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:46:04.780 00:05:02.641 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:50:11.339 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 9 6412 1 2025-11-28 04:51:22.083 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50726 1 40 1 2025-11-28 04:48:04.886 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:52:22.500 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48540 1 40 1 2025-11-28 04:49:05.462 00:05:02.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 04:53:12.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48110 9 6412 1 2025-11-28 04:54:00.663 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 04:54:00.638 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 04:50:04.802 00:05:02.601 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 04:54:12.941 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57374 10 6452 1 2025-11-28 04:50:55.154 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-28 04:55:13.354 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56380 9 6412 1 2025-11-28 04:52:05.483 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 04:52:04.785 00:05:02.639 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 04:56:13.768 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33580 10 6452 1 2025-11-28 04:57:14.134 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41536 10 6452 1 2025-11-28 04:54:04.887 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 04:58:24.916 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50166 1 40 1 Summary: total flows: 132, total bytes: 266620, total packets: 1397, avg bps: 555, avg pps: 0, avg bpp: 190 Time window: 2025-11-28 03:55:05 - 2025-11-28 04:59:07 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0043s User: 0.0017s Wall: 0.0016s flows/second: 80437.0 Runtime: 0.0017s