Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 09:55:05.564 00:05:02.007 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 09:54:55.542 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-28 09:59:06.629 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 09:59:06.697 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 09:59:19.211 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60318 9 6412 1 2025-11-28 09:56:04.881 00:05:02.630 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:00:19.621 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44684 10 6452 1 2025-11-28 10:01:30.397 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59268 1 40 1 2025-11-28 09:58:04.861 00:05:02.670 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 09:58:05.584 00:05:01.927 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:04:06.546 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:04:06.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:00:04.985 00:05:02.567 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:00:15.547 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-28 10:04:31.606 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32862 1 40 1 2025-11-28 10:01:05.564 00:05:02.008 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:05:21.644 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:35828 9 6412 1 2025-11-28 10:02:04.883 00:05:02.630 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:06:22.083 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50540 10 6452 1 2025-11-28 10:07:22.492 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 9 6412 1 2025-11-28 10:04:04.863 00:05:02.672 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:04:05.587 00:05:01.929 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:08:22.861 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:44696 9 6412 1 2025-11-28 10:09:06.820 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:09:06.749 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:09:23.294 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45120 10 6452 1 2025-11-28 10:05:35.555 00:05:00.864 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2584 1 2025-11-28 10:06:04.986 00:05:02.569 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:10:23.700 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55384 10 6452 1 2025-11-28 10:07:05.567 00:05:02.008 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:11:24.126 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40686 10 6452 1 2025-11-28 10:08:04.884 00:05:02.633 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:12:34.858 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54238 1 40 1 2025-11-28 10:13:24.897 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39588 9 6412 1 2025-11-28 10:10:04.864 00:05:02.672 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:14:06.993 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:10:05.587 00:05:01.930 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:14:07.194 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:14:25.313 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35244 10 6452 1 2025-11-28 10:10:45.562 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-11-28 10:15:25.678 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45014 10 6452 1 2025-11-28 10:12:04.988 00:05:02.569 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:13:05.567 00:05:02.010 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:17:26.440 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45864 9 6412 1 2025-11-28 10:14:04.886 00:05:02.632 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:18:26.840 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48802 9 6412 1 2025-11-28 10:19:07.129 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:19:07.029 00:00:00.041 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:19:27.247 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43800 10 6452 1 2025-11-28 10:16:04.867 00:05:02.672 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:16:05.589 00:05:01.929 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:16:05.566 00:05:10.005 OSPF 23.0.7.1:0 -> 224.0.0.5:0 45 3472 1 2025-11-28 10:20:38.028 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33816 1 40 1 2025-11-28 10:21:28.071 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40064 10 6452 1 2025-11-28 10:18:04.991 00:05:02.568 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:22:28.469 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47112 10 6452 1 2025-11-28 10:19:05.568 00:05:02.011 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:24:07.135 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:20:04.887 00:05:02.631 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:24:07.027 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:24:29.289 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53366 10 6452 1 2025-11-28 10:21:25.572 00:05:10.011 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-28 10:22:05.590 00:05:01.929 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:22:04.867 00:05:02.672 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:26:30.134 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35104 10 6452 1 2025-11-28 10:24:04.992 00:05:02.567 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:29:07.222 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:29:07.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:25:05.570 00:05:02.009 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:26:04.890 00:05:02.632 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:30:42.002 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52556 1 40 1 2025-11-28 10:26:45.582 00:05:10.010 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-28 10:31:42.481 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58640 1 40 1 2025-11-28 10:28:05.591 00:05:01.930 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:28:04.869 00:05:02.672 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:33:32.921 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 12 6556 1 2025-11-28 10:30:04.996 00:05:02.568 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:34:07.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:34:07.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:34:43.651 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 1 40 1 2025-11-28 10:31:05.573 00:05:02.009 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:35:44.052 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33894 1 40 1 2025-11-28 10:32:04.890 00:05:02.632 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:32:05.594 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-28 10:36:44.479 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44928 1 40 1 2025-11-28 10:34:05.598 00:05:01.924 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:34:04.871 00:05:02.670 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:39:07.307 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:39:07.501 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:39:35.335 00:00:11.015 TCP 1.101.0.1:3000 -> 23.104.0.1:40260 9 6412 1 2025-11-28 10:36:04.996 00:05:02.566 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:37:05.581 00:05:02.002 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:37:25.602 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-28 10:41:36.791 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32858 10 6452 1 2025-11-28 10:38:04.893 00:05:02.630 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:43:37.600 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38990 9 6412 1 2025-11-28 10:40:04.873 00:05:02.670 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:44:07.543 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:40:05.600 00:05:01.923 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:44:07.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:44:38.006 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58508 9 6412 1 2025-11-28 10:45:38.412 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46318 9 6412 1 2025-11-28 10:42:04.999 00:05:02.565 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:46:38.813 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:47548 9 6412 1 2025-11-28 10:42:45.609 00:05:10.013 OSPF 23.0.7.1:0 -> 224.0.0.5:0 45 3392 1 2025-11-28 10:43:05.582 00:05:02.002 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:47:39.187 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40852 9 6412 1 2025-11-28 10:44:04.895 00:05:02.629 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:48:39.593 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 9 6412 1 2025-11-28 10:49:07.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:49:07.554 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:49:39.998 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39680 9 6412 1 2025-11-28 10:46:05.602 00:05:01.922 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:46:04.875 00:05:02.670 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:50:50.744 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44016 1 40 1 2025-11-28 10:51:40.778 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48100 10 6452 1 2025-11-28 10:48:05.001 00:05:02.564 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 10:48:05.622 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-11-28 10:52:41.201 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6452 1 2025-11-28 10:49:05.584 00:05:02.004 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 10:53:41.601 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46634 10 6452 1 2025-11-28 10:54:07.850 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 10:50:04.895 00:05:02.629 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 10:54:07.967 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 10:54:42.002 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 9 6412 1 2025-11-28 10:55:52.734 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 1 40 1 2025-11-28 10:52:04.876 00:05:02.668 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 10:52:05.604 00:05:01.922 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 10:56:53.157 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36032 1 40 1 2025-11-28 10:53:25.629 00:05:10.009 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-28 10:54:05.008 00:05:02.558 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 Summary: total flows: 131, total bytes: 288236, total packets: 1456, avg bps: 598, avg pps: 0, avg bpp: 197 Time window: 2025-11-28 09:54:55 - 2025-11-28 10:59:07 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0045s User: 0.0018s Wall: 0.0019s flows/second: 68733.3 Runtime: 0.0019s