Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 09:55:23.155 00:05:01.995 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 09:55:24.720 00:05:00.490 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:00:12.505 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 1 40 1 2025-09-05 10:01:12.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36042 1 40 1 2025-09-05 09:57:24.741 00:05:00.411 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 09:57:23.769 00:05:01.423 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:02:13.300 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57950 1 40 1 2025-09-05 10:03:31.593 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:03:31.459 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 09:59:35.326 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2564 1 2025-09-05 10:04:14.068 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36664 1 40 1 2025-09-05 10:00:23.137 00:05:02.036 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:05:04.128 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46134 10 6452 1 2025-09-05 10:01:24.720 00:05:00.495 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:01:23.155 00:05:01.999 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:06:14.853 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44876 1 40 1 2025-09-05 10:07:15.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42540 1 40 1 2025-09-05 10:03:23.769 00:05:01.424 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:03:24.741 00:05:00.413 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:08:15.669 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50276 1 40 1 2025-09-05 10:08:31.686 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:08:31.641 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:04:55.341 00:05:10.392 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-09-05 10:10:06.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40672 9 6412 1 2025-09-05 10:06:23.136 00:05:02.037 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:07:23.158 00:05:01.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:07:24.721 00:05:00.493 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:12:06.948 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:47118 9 6412 1 2025-09-05 10:13:07.336 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49644 10 6452 1 2025-09-05 10:09:23.773 00:05:01.421 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:09:24.743 00:05:00.412 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:13:31.934 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:13:32.006 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:14:07.745 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58378 9 6412 1 2025-09-05 10:10:15.344 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-09-05 10:15:08.174 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43940 9 6412 1 2025-09-05 10:12:23.138 00:05:02.037 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:13:24.726 00:05:00.489 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:13:23.158 00:05:01.997 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:18:31.821 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:18:31.809 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:15:23.775 00:05:01.421 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:15:24.746 00:05:00.410 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:15:35.351 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-09-05 10:20:20.594 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59610 1 40 1 2025-09-05 10:18:23.139 00:05:02.037 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:19:23.159 00:05:01.997 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:23:11.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36658 9 6412 1 2025-09-05 10:19:24.726 00:05:00.490 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:23:32.180 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:23:32.016 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:20:55.359 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2848 1 2025-09-05 10:21:24.746 00:05:00.411 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:21:23.778 00:05:01.421 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:26:22.983 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45678 1 40 1 2025-09-05 10:27:23.350 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50780 1 40 1 2025-09-05 10:24:23.140 00:05:02.038 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:28:31.719 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:28:31.942 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:25:23.161 00:05:01.997 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:25:24.730 00:05:00.489 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:30:14.164 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49600 10 6452 1 2025-09-05 10:26:15.367 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-09-05 10:27:23.777 00:05:01.422 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:27:24.749 00:05:00.410 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:32:25.344 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 1 40 1 2025-09-05 10:33:25.752 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49992 1 40 1 2025-09-05 10:33:32.215 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:33:32.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:30:23.142 00:05:02.037 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:34:15.787 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53724 10 6452 1 2025-09-05 10:31:24.730 00:05:00.490 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:35:26.565 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37716 1 40 1 2025-09-05 10:31:23.163 00:05:01.997 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:31:35.369 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-09-05 10:36:16.596 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44796 9 6412 1 2025-09-05 10:33:24.749 00:05:00.410 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:33:23.780 00:05:01.420 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:37:16.960 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47172 10 6452 1 2025-09-05 10:38:17.378 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33198 10 6452 1 2025-09-05 10:38:32.278 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:38:32.108 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:39:17.778 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:50448 9 6412 1 2025-09-05 10:36:23.143 00:05:02.038 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:36:55.377 00:05:10.062 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2484 1 2025-09-05 10:37:24.731 00:05:00.491 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:37:23.163 00:05:01.999 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:41:28.964 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40268 1 40 1 2025-09-05 10:42:19.008 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33954 10 6452 1 2025-09-05 10:39:24.751 00:05:00.413 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:39:23.782 00:05:01.422 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:43:19.410 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34894 9 6412 1 2025-09-05 10:43:32.332 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:43:32.329 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:45:20.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51586 10 6452 1 2025-09-05 10:42:23.143 00:05:02.041 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:42:15.382 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-09-05 10:46:20.586 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52648 9 6412 1 2025-09-05 10:43:24.731 00:05:00.493 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:43:23.163 00:05:02.001 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:47:31.416 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49552 1 40 1 2025-09-05 10:48:32.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:48:21.457 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33466 9 6412 1 2025-09-05 10:48:32.539 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:45:23.783 00:05:01.422 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:45:24.752 00:05:00.413 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:49:21.901 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53102 10 6452 1 2025-09-05 10:50:22.313 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51700 10 6452 1 2025-09-05 10:51:22.718 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39456 10 6452 1 2025-09-05 10:47:35.384 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2768 1 2025-09-05 10:48:23.144 00:05:02.041 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:52:23.128 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38846 10 6452 1 2025-09-05 10:49:23.167 00:05:01.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-05 10:49:24.734 00:05:00.491 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-05 10:53:33.860 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49278 1 40 1 2025-09-05 10:53:32.573 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:53:32.631 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 10:54:23.896 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46810 10 6452 1 2025-09-05 10:51:23.784 00:05:01.422 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-05 10:51:24.757 00:05:00.410 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-05 10:52:55.396 00:05:10.016 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-09-05 10:54:23.145 00:05:02.041 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-05 10:58:32.693 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 10:58:25.490 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6452 1 2025-09-05 10:58:32.637 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 125, total bytes: 225976, total packets: 1316, avg bps: 470, avg pps: 0, avg bpp: 171 Time window: 2025-09-05 09:55:23 - 2025-09-05 10:59:25 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0045s User: 0.0000s Wall: 0.0015s flows/second: 85738.0 Runtime: 0.0015s