Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 11:55:20.434 00:05:01.175 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 11:55:13.660 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2504 1 2025-08-30 11:59:56.757 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60958 1 40 1 2025-08-30 11:56:20.805 00:05:00.844 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:00:40.597 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:00:40.454 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:00:57.119 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38810 1 40 1 2025-08-30 12:02:08.364 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55434 1 40 1 2025-08-30 11:57:21.497 00:06:00.112 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 11:57:21.477 00:06:00.192 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:02:58.454 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54070 10 6452 1 2025-08-30 12:00:20.417 00:05:01.213 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:00:33.669 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-08-30 12:01:20.437 00:05:01.176 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:05:40.637 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:05:40.556 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:02:20.810 00:05:00.841 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:07:00.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41454 9 6412 1 2025-08-30 12:08:10.799 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56134 1 40 1 2025-08-30 12:04:21.478 00:06:00.193 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:04:21.499 00:06:00.112 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 12:05:53.678 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2336 1 2025-08-30 12:10:01.252 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47308 10 6452 1 2025-08-30 12:06:20.422 00:05:01.210 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:10:40.783 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:10:40.981 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:07:20.443 00:05:01.170 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:12:02.059 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41914 9 6412 1 2025-08-30 12:08:20.811 00:05:00.843 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:13:02.461 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39176 9 6412 1 2025-08-30 12:14:13.188 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47206 1 40 1 2025-08-30 12:15:03.226 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38614 12 6556 1 2025-08-30 12:11:13.691 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 3012 1 2025-08-30 12:15:40.937 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:15:40.945 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:16:03.635 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39280 9 6412 1 2025-08-30 12:11:21.479 00:06:00.210 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:12:20.423 00:05:01.226 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:11:21.500 00:06:00.130 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 12:13:20.443 00:05:01.186 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:14:20.811 00:05:00.862 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:19:04.933 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41724 10 6452 1 2025-08-30 12:20:05.340 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51406 10 6452 1 2025-08-30 12:20:40.969 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:20:40.792 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:16:33.703 00:05:10.446 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2368 1 2025-08-30 12:21:05.739 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57362 10 6452 1 2025-08-30 12:18:20.428 00:05:01.222 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:18:21.481 00:06:00.217 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:19:20.449 00:05:01.181 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:18:21.500 00:06:00.130 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 12:24:06.968 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43388 9 6412 1 2025-08-30 12:20:20.812 00:05:00.858 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:25:41.204 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:25:41.101 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:21:53.710 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2688 1 2025-08-30 12:26:07.768 00:00:13.597 TCP 1.101.0.1:3000 -> 23.104.0.1:56016 10 6452 1 2025-08-30 12:27:21.735 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46570 1 40 1 2025-08-30 12:24:20.431 00:05:01.222 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:28:11.774 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50742 9 6412 1 2025-08-30 12:29:12.187 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58414 10 6452 1 2025-08-30 12:25:20.452 00:05:01.180 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:25:21.501 00:06:00.132 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 12:26:20.812 00:05:00.860 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:25:21.480 00:06:00.212 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:30:41.356 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:30:41.297 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:27:13.714 00:05:00.600 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2316 1 2025-08-30 12:31:23.339 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49830 1 40 1 2025-08-30 12:32:23.744 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46110 1 40 1 2025-08-30 12:33:24.165 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 1 40 1 2025-08-30 12:34:14.209 00:00:10.625 TCP 1.101.0.1:3000 -> 23.104.0.1:33196 9 6412 1 2025-08-30 12:30:20.436 00:05:01.218 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:35:14.872 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 9 6412 1 2025-08-30 12:31:20.455 00:05:01.179 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:35:41.340 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:35:41.413 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:32:20.817 00:05:00.859 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:36:15.305 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54418 9 6412 1 2025-08-30 12:32:23.722 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2416 1 2025-08-30 12:32:21.483 00:06:00.214 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:32:21.502 00:06:00.134 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 12:37:15.708 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:40054 12 10365 1 2025-08-30 12:38:16.192 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:34178 9 6412 1 2025-08-30 12:39:16.559 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6464 1 2025-08-30 12:36:20.437 00:05:01.221 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:40:17.014 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43198 9 6412 1 2025-08-30 12:40:41.439 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:40:41.435 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:37:20.456 00:05:01.180 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:37:43.723 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2772 1 2025-08-30 12:38:20.817 00:05:00.861 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:42:17.815 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56740 10 6452 1 2025-08-30 12:43:18.218 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43416 10 6452 1 2025-08-30 12:39:21.504 00:06:00.134 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 12:39:21.483 00:06:00.215 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:45:29.349 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54480 1 40 1 2025-08-30 12:45:41.506 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:45:41.686 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:42:20.437 00:05:01.221 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:43:03.736 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-08-30 12:43:20.457 00:05:01.181 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:47:19.751 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 9 6412 1 2025-08-30 12:44:20.818 00:05:00.861 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:48:30.476 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45548 1 40 1 2025-08-30 12:49:20.517 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46250 10 6452 1 2025-08-30 12:50:20.917 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 10 6452 1 2025-08-30 12:50:41.753 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:50:41.753 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:46:21.484 00:06:00.215 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:46:21.506 00:06:00.134 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 12:51:21.300 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38108 10 6452 1 2025-08-30 12:48:20.439 00:05:01.221 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:48:23.742 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2604 1 2025-08-30 12:49:20.458 00:05:01.181 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-08-30 12:50:20.823 00:05:00.857 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-08-30 12:54:22.468 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40314 9 6412 1 2025-08-30 12:55:22.871 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44316 9 6412 1 2025-08-30 12:55:41.643 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 12:55:41.732 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 12:57:34.113 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58640 1 40 1 2025-08-30 12:53:43.747 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2504 1 2025-08-30 12:53:21.486 00:06:00.214 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-08-30 12:54:20.444 00:05:01.216 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-08-30 12:53:21.506 00:06:00.135 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-08-30 12:58:24.152 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54582 10 6452 1 Summary: total flows: 126, total bytes: 271563, total packets: 1417, avg bps: 564, avg pps: 0, avg bpp: 191 Time window: 2025-08-30 11:55:13 - 2025-08-30 12:59:21 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0026s User: 0.0013s Wall: 0.0018s flows/second: 69647.1 Runtime: 0.0018s