Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 13:58:48.583 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53288 9 6412 1 2025-09-04 13:55:22.704 00:05:02.073 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 13:54:24.384 00:06:00.393 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 13:59:48.986 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37380 9 6412 1 2025-09-04 13:55:24.364 00:06:00.473 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 13:56:13.705 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-09-04 14:00:49.391 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39924 9 6412 1 2025-09-04 13:57:23.310 00:05:01.510 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:01:49.794 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49994 9 6412 1 2025-09-04 14:02:50.210 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:55948 11 10327 1 2025-09-04 14:03:07.344 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:03:07.505 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:00:22.684 00:05:02.115 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:01:22.705 00:05:02.074 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:01:33.708 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2604 1 2025-09-04 14:06:01.817 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57658 1 40 1 2025-09-04 14:01:24.385 00:06:00.394 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 14:06:51.862 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40786 10 6452 1 2025-09-04 14:03:23.310 00:05:01.510 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:02:24.366 00:06:00.474 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 14:07:52.287 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:47414 11 6504 1 2025-09-04 14:08:07.603 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:08:07.608 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:09:03.117 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46824 1 40 1 2025-09-04 14:09:53.155 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49550 10 6452 1 2025-09-04 14:06:22.686 00:05:02.114 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:06:53.712 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-09-04 14:11:03.935 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48668 1 40 1 2025-09-04 14:07:22.706 00:05:02.074 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:12:04.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37356 1 40 1 2025-09-04 14:13:07.623 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:13:07.557 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:09:23.311 00:05:01.510 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:08:24.388 00:06:00.394 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 14:09:24.367 00:06:00.475 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 14:14:55.160 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45880 10 6452 1 2025-09-04 14:16:05.931 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 1 40 1 2025-09-04 14:12:13.719 00:05:10.058 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2592 1 2025-09-04 14:12:22.687 00:05:02.115 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:13:22.707 00:05:02.075 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:18:07.735 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:17:56.378 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53478 9 6412 1 2025-09-04 14:18:07.891 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:18:56.783 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:40614 9 6412 1 2025-09-04 14:15:23.317 00:05:01.508 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:20:07.580 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40940 1 40 1 2025-09-04 14:15:24.388 00:06:00.396 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 14:21:08.002 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40744 1 40 1 2025-09-04 14:16:24.369 00:06:00.477 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 14:17:33.722 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 2928 1 2025-09-04 14:22:08.408 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42942 1 40 1 2025-09-04 14:18:22.687 00:05:02.118 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:23:07.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:23:07.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:23:08.765 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 1 40 1 2025-09-04 14:19:22.708 00:05:02.077 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:23:58.797 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37870 10 6452 1 2025-09-04 14:21:23.318 00:05:01.509 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:26:09.905 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58400 1 40 1 2025-09-04 14:22:53.727 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2296 1 2025-09-04 14:26:59.936 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53358 10 6452 1 2025-09-04 14:22:24.396 00:06:00.392 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 14:28:07.778 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:28:00.368 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50640 10 6452 1 2025-09-04 14:28:07.860 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:23:24.376 00:06:00.472 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 14:24:22.689 00:05:02.119 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:25:22.710 00:05:02.077 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:30:01.168 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39778 10 6452 1 2025-09-04 14:31:11.897 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35632 1 40 1 2025-09-04 14:27:23.320 00:05:01.508 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:28:13.734 00:05:10.047 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-09-04 14:33:08.267 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:33:08.261 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:33:02.338 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58196 10 6452 1 2025-09-04 14:34:02.703 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56128 10 6452 1 2025-09-04 14:29:24.397 00:06:00.391 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 14:30:22.692 00:05:02.115 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:35:13.493 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50302 1 40 1 2025-09-04 14:31:22.712 00:05:02.075 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:30:24.377 00:06:00.472 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 14:36:13.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47344 1 40 1 2025-09-04 14:37:03.940 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:55274 10 6452 1 2025-09-04 14:33:23.323 00:05:01.507 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:33:33.739 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-09-04 14:38:08.318 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:38:08.165 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:39:15.081 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56320 1 40 1 2025-09-04 14:40:05.132 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:60924 10 6452 1 2025-09-04 14:36:22.701 00:05:02.107 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:41:15.848 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54702 1 40 1 2025-09-04 14:37:22.722 00:05:02.067 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:36:24.398 00:06:00.391 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 14:42:05.889 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40364 10 6452 1 2025-09-04 14:37:24.376 00:06:00.472 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 14:38:53.748 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-09-04 14:43:08.119 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:43:08.330 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:43:06.292 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60894 9 6412 1 2025-09-04 14:39:23.325 00:05:01.504 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:44:06.701 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37296 10 6452 1 2025-09-04 14:46:07.531 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52360 9 6412 1 2025-09-04 14:42:22.703 00:05:02.106 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:47:07.946 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:45734 9 6412 1 2025-09-04 14:43:22.724 00:05:02.066 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:48:08.295 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:48:08.359 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:48:08.375 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50644 10 6452 1 2025-09-04 14:44:13.753 00:05:10.001 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2896 1 2025-09-04 14:43:24.398 00:06:00.392 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 14:49:08.774 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41288 10 6452 1 2025-09-04 14:45:23.324 00:05:01.508 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:44:24.379 00:06:00.473 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 14:51:19.931 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58734 1 40 1 2025-09-04 14:48:22.704 00:05:02.108 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-04 14:53:08.572 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:53:08.710 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:53:10.382 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:46770 12 10367 1 2025-09-04 14:49:22.724 00:05:02.068 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-04 14:49:33.755 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-09-04 14:54:10.869 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:51844 9 6412 1 2025-09-04 14:51:23.325 00:05:01.507 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 14:50:24.399 00:06:00.392 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-09-04 14:55:21.618 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44236 1 40 1 2025-09-04 14:51:24.380 00:06:00.472 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-09-04 14:58:08.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 14:58:08.411 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 14:58:22.913 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33410 1 40 1 2025-09-04 14:54:22.706 00:05:02.107 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 Summary: total flows: 129, total bytes: 260528, total packets: 1374, avg bps: 534, avg pps: 0, avg bpp: 189 Time window: 2025-09-04 13:54:24 - 2025-09-04 14:59:24 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0027s User: 0.0018s Wall: 0.0022s flows/second: 59223.4 Runtime: 0.0022s