Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 07:59:04.009 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:59:04.142 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:55:05.528 00:05:01.993 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 07:56:04.852 00:05:02.612 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:00:30.469 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35652 9 6412 1 2025-11-28 08:01:41.194 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46382 1 40 1 2025-11-28 07:57:35.396 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-11-28 07:58:05.550 00:05:01.915 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 07:58:04.833 00:05:02.651 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:02:31.232 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46394 10 6452 1 2025-11-28 08:03:31.606 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37884 10 6452 1 2025-11-28 08:04:04.897 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:04:04.886 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:00:04.944 00:05:02.562 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:01:05.530 00:05:01.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:02:04.855 00:05:02.609 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:06:43.119 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50340 1 40 1 2025-11-28 08:02:55.402 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2808 1 2025-11-28 08:07:43.524 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 1 40 1 2025-11-28 08:04:04.837 00:05:02.649 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:04:05.552 00:05:01.914 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:08:43.929 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46006 1 40 1 2025-11-28 08:09:04.436 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:09:04.441 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:06:04.950 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:10:34.340 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42444 9 6412 1 2025-11-28 08:07:05.533 00:05:01.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:08:04.857 00:05:02.610 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:08:15.408 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-28 08:12:45.533 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47698 1 40 1 2025-11-28 08:14:04.848 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:14:04.720 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:10:04.838 00:05:02.649 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:10:05.554 00:05:01.913 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:14:35.972 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39718 10 6452 1 2025-11-28 08:15:36.381 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39028 9 6412 1 2025-11-28 08:12:04.947 00:05:02.560 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:16:36.788 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:58164 12 10375 1 2025-11-28 08:13:05.534 00:05:01.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:13:35.411 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-28 08:17:37.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45660 9 6412 1 2025-11-28 08:14:04.857 00:05:02.610 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:18:48.046 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50920 1 40 1 2025-11-28 08:19:04.688 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:19:04.606 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:19:38.101 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57230 9 6412 1 2025-11-28 08:16:05.559 00:05:01.909 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:16:04.838 00:05:02.650 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:21:38.914 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56852 10 6452 1 2025-11-28 08:18:04.950 00:05:02.559 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:18:55.419 00:05:10.504 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 2964 1 2025-11-28 08:19:05.539 00:05:01.993 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:23:39.745 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40858 9 6412 1 2025-11-28 08:24:05.150 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:20:04.859 00:05:02.611 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:24:05.152 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:22:05.559 00:05:01.917 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:22:04.838 00:05:02.658 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:26:40.899 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46124 10 6452 1 2025-11-28 08:27:41.308 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41012 10 6452 1 2025-11-28 08:24:04.951 00:05:02.567 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:24:15.423 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2908 1 2025-11-28 08:28:41.711 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51620 9 6412 1 2025-11-28 08:29:04.872 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:29:04.916 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:25:05.540 00:05:01.997 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:29:52.443 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56398 1 40 1 2025-11-28 08:26:04.860 00:05:02.616 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:31:42.902 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38536 9 6412 1 2025-11-28 08:28:04.839 00:05:02.658 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:28:05.561 00:05:01.917 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:32:53.632 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48394 1 40 1 2025-11-28 08:29:35.427 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-28 08:33:43.684 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48256 9 6412 1 2025-11-28 08:34:04.756 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:34:04.845 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:30:04.951 00:05:02.568 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:31:05.542 00:05:01.996 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:32:04.862 00:05:02.617 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:36:55.210 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52444 1 40 1 2025-11-28 08:34:05.563 00:05:01.917 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:34:04.842 00:05:02.658 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:39:04.913 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:39:05.119 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:34:55.431 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-28 08:36:04.953 00:05:02.567 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:40:46.458 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:49672 9 6412 1 2025-11-28 08:37:05.544 00:05:01.997 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:41:46.887 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34360 10 6452 1 2025-11-28 08:38:04.863 00:05:02.618 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:42:47.299 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48738 10 6452 1 2025-11-28 08:43:47.667 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:34336 9 6412 1 2025-11-28 08:40:04.842 00:05:02.658 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:44:05.519 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:40:05.564 00:05:01.916 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:44:05.668 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:40:15.437 00:05:10.002 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-28 08:44:48.025 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50404 10 6452 1 2025-11-28 08:45:58.836 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56496 1 40 1 2025-11-28 08:42:04.956 00:05:02.567 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:46:48.876 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57588 10 6452 1 2025-11-28 08:43:05.545 00:05:01.997 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:47:59.658 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55762 1 40 1 2025-11-28 08:44:04.863 00:05:02.620 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:49:00.059 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44218 1 40 1 2025-11-28 08:49:05.206 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:49:05.262 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:45:35.440 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-28 08:50:00.489 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 1 40 1 2025-11-28 08:46:04.847 00:05:02.657 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:46:05.565 00:05:01.918 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:50:50.526 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57310 10 6452 1 2025-11-28 08:51:50.928 00:00:11.039 TCP 1.101.0.1:3000 -> 23.104.0.1:58680 11 6516 1 2025-11-28 08:48:04.958 00:05:02.566 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 08:52:52.006 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39322 10 6452 1 2025-11-28 08:49:05.546 00:05:01.999 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 08:54:05.334 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 08:50:04.867 00:05:02.617 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 08:54:05.324 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 08:55:03.187 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51268 1 40 1 2025-11-28 08:50:55.444 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 45 3472 1 2025-11-28 08:52:05.566 00:05:01.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 08:52:04.847 00:05:02.658 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 08:54:04.962 00:05:02.564 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 Summary: total flows: 124, total bytes: 238363, total packets: 1348, avg bps: 496, avg pps: 0, avg bpp: 176 Time window: 2025-11-28 07:55:05 - 2025-11-28 08:59:07 Total flows processed: 124, passed: 124, Blocks skipped: 0, Bytes read: 12960 Sys: 0.0040s User: 0.0020s Wall: 0.0017s flows/second: 71885.8 Runtime: 0.0017s