Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 00:55:06.419 00:05:02.089 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 00:59:08.701 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45386 10 6452 1 2025-11-30 00:59:53.751 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 00:59:53.753 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 00:56:05.610 00:05:02.839 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:00:09.130 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 9 6412 1 2025-11-30 00:58:05.588 00:05:02.880 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 00:58:06.439 00:05:02.008 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 00:58:08.715 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 38 2688 1 2025-11-30 01:03:10.578 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 9 6412 1 2025-11-30 01:00:05.738 00:05:02.750 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:04:10.941 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 9 6412 1 2025-11-30 01:04:53.517 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:04:53.675 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:01:06.421 00:05:02.088 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:05:21.685 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38864 1 40 1 2025-11-30 01:02:05.609 00:05:02.840 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:06:11.724 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-11-30 01:03:28.722 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 40 2916 1 2025-11-30 01:04:05.590 00:05:02.879 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:04:06.447 00:05:02.002 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:08:12.548 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-11-30 01:09:23.337 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38976 1 40 1 2025-11-30 01:09:53.779 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:09:53.856 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:06:05.743 00:05:02.750 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:10:23.740 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50160 1 40 1 2025-11-30 01:07:06.426 00:05:02.087 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:08:05.614 00:05:02.840 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:12:14.198 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32980 10 6452 1 2025-11-30 01:08:48.731 00:05:10.004 OSPF 23.0.7.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-30 01:13:25.103 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58096 1 40 1 2025-11-30 01:10:06.448 00:05:02.007 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:10:05.595 00:05:02.881 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:14:54.051 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:14:54.191 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:12:05.747 00:05:02.751 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:16:15.941 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2025-11-30 01:13:06.430 00:05:02.086 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:17:16.352 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49342 9 6412 1 2025-11-30 01:14:05.616 00:05:02.841 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:14:08.735 00:05:10.042 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2336 1 2025-11-30 01:18:16.754 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 9 6412 1 2025-11-30 01:19:27.547 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 1 40 1 2025-11-30 01:19:54.141 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:19:54.177 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:16:05.595 00:05:02.882 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:16:06.452 00:05:02.005 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:20:17.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56196 10 6452 1 2025-11-30 01:18:05.750 00:05:02.749 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:22:18.396 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48106 9 6412 1 2025-11-30 01:19:06.433 00:05:02.086 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:23:29.165 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52842 1 40 1 2025-11-30 01:19:28.736 00:05:10.044 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3064 1 2025-11-30 01:20:05.620 00:05:02.839 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:24:54.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:24:53.930 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:25:19.595 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57324 10 6452 1 2025-11-30 01:22:05.602 00:05:02.877 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:22:06.452 00:05:02.007 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:26:30.370 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33684 1 40 1 2025-11-30 01:27:30.776 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 2 80 1 2025-11-30 01:24:05.752 00:05:02.749 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:28:20.816 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-11-30 01:24:48.741 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 42 3016 1 2025-11-30 01:25:06.435 00:05:02.085 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:29:31.573 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 1 40 1 2025-11-30 01:29:54.245 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:29:54.190 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:26:05.622 00:05:02.838 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:30:21.612 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49504 9 6412 1 2025-11-30 01:28:05.602 00:05:02.878 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:28:06.457 00:05:02.004 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:32:22.343 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-11-30 01:33:33.074 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40784 1 40 1 2025-11-30 01:30:05.750 00:05:02.754 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:30:08.749 00:05:10.006 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2712 1 2025-11-30 01:34:23.133 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49786 9 6412 1 2025-11-30 01:34:54.224 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:34:54.231 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:31:06.436 00:05:02.086 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:32:05.623 00:05:02.840 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:36:34.299 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40636 1 40 1 2025-11-30 01:37:24.344 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-11-30 01:34:06.458 00:05:02.005 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:34:05.603 00:05:02.879 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:38:35.127 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59984 1 40 1 2025-11-30 01:35:28.754 00:05:10.008 OSPF 23.0.7.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-30 01:39:25.165 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36116 9 6412 1 2025-11-30 01:39:54.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:39:54.427 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:36:05.753 00:05:02.750 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:40:35.939 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42638 1 40 1 2025-11-30 01:37:06.437 00:05:02.087 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:41:25.978 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33218 9 6412 1 2025-11-30 01:38:05.624 00:05:02.839 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:42:26.383 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41268 10 6452 1 2025-11-30 01:43:26.785 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 11 6516 1 2025-11-30 01:40:06.458 00:05:02.005 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:40:05.605 00:05:02.879 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:44:27.195 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52774 10 6452 1 2025-11-30 01:44:54.396 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:44:54.578 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:40:48.762 00:05:10.007 OSPF 23.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-30 01:45:27.560 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52632 10 6452 1 2025-11-30 01:42:05.753 00:05:02.752 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:46:38.352 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 1 40 1 2025-11-30 01:43:06.442 00:05:02.084 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:47:38.764 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58572 1 40 1 2025-11-30 01:44:05.626 00:05:02.840 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:49:54.868 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:49:54.876 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:46:06.462 00:05:02.004 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:46:05.605 00:05:02.881 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:46:08.769 00:05:00.795 OSPF 23.0.7.1:0 -> 224.0.0.5:0 39 2764 1 2025-11-30 01:50:29.535 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53598 10 6452 1 2025-11-30 01:51:29.946 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:42080 10 6452 1 2025-11-30 01:48:05.758 00:05:02.750 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 01:52:30.372 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:40350 11 10335 1 2025-11-30 01:49:06.443 00:05:02.083 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 01:50:05.628 00:05:02.838 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 01:54:31.217 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42076 10 6452 1 2025-11-30 01:54:54.658 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:54:54.658 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:51:18.774 00:05:10.003 OSPF 23.0.7.1:0 -> 224.0.0.5:0 41 3140 1 2025-11-30 01:55:41.955 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40978 1 40 1 2025-11-30 01:52:06.464 00:05:02.002 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 01:52:05.614 00:05:02.874 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 01:56:42.381 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 1 40 1 2025-11-30 01:54:05.757 00:05:02.750 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 Summary: total flows: 130, total bytes: 257879, total packets: 1382, avg bps: 536, avg pps: 0, avg bpp: 186 Time window: 2025-11-30 00:55:06 - 2025-11-30 01:59:08 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0042s User: 0.0000s Wall: 0.0015s flows/second: 84641.3 Runtime: 0.0016s