Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 03:58:44.832 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46210 9 6412 1 2025-09-10 03:55:25.254 00:05:02.106 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 03:59:45.197 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53378 9 6412 1 2025-09-10 04:00:45.598 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37200 10 6452 1 2025-09-10 04:00:55.806 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:00:56.092 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 03:57:25.916 00:05:01.487 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:01:56.369 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58600 1 40 1 2025-09-10 03:58:04.851 00:05:00.660 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2600 1 2025-09-10 04:02:56.772 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60010 1 40 1 2025-09-10 03:59:26.887 00:05:00.534 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 03:59:26.908 00:05:00.454 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:03:46.809 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41398 9 6412 1 2025-09-10 04:00:25.244 00:05:02.138 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:04:47.211 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 10 6452 1 2025-09-10 04:01:25.255 00:05:02.107 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:05:55.838 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:05:56.246 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:05:58.001 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46482 1 40 1 2025-09-10 04:06:58.399 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42310 1 40 1 2025-09-10 04:03:14.856 00:05:10.023 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-09-10 04:03:25.916 00:05:01.487 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:08:48.829 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42460 10 6452 1 2025-09-10 04:05:26.908 00:05:00.455 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:05:26.887 00:05:00.536 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:06:25.236 00:05:02.148 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:10:56.425 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:10:56.558 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:07:25.256 00:05:02.107 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:08:34.879 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2744 1 2025-09-10 04:13:00.819 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39818 1 40 1 2025-09-10 04:09:25.917 00:05:01.487 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:13:50.855 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 9 6412 1 2025-09-10 04:14:51.289 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53786 10 6452 1 2025-09-10 04:11:26.912 00:05:00.452 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:11:26.891 00:05:00.532 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:15:56.350 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:15:56.223 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:16:02.010 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38068 1 40 1 2025-09-10 04:12:25.238 00:05:02.145 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:16:52.050 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57914 10 6452 1 2025-09-10 04:13:25.260 00:05:02.104 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:13:54.886 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-09-10 04:15:25.917 00:05:01.488 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:19:53.217 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52886 9 6412 1 2025-09-10 04:20:56.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:20:56.376 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:20:53.625 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38164 9 6412 1 2025-09-10 04:17:26.895 00:05:00.531 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:17:26.917 00:05:00.450 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:21:54.029 00:00:10.908 TCP 1.101.0.1:3000 -> 23.104.0.1:32988 9 6412 1 2025-09-10 04:18:25.240 00:05:02.145 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:19:14.892 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2648 1 2025-09-10 04:19:25.260 00:05:02.105 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:21:25.917 00:05:01.489 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:25:56.316 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:25:56.419 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:25:56.156 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59908 10 6452 1 2025-09-10 04:27:06.924 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33818 1 40 1 2025-09-10 04:23:26.897 00:05:00.534 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:23:26.917 00:05:00.450 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:27:56.967 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33412 10 6452 1 2025-09-10 04:24:25.241 00:05:02.145 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:24:34.900 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-09-10 04:28:57.379 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41956 9 6412 1 2025-09-10 04:25:25.261 00:05:02.106 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:29:57.742 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33884 10 6452 1 2025-09-10 04:30:56.552 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:30:56.584 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:31:08.525 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 1 40 1 2025-09-10 04:27:25.920 00:05:01.489 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:32:09.294 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33670 1 40 1 2025-09-10 04:29:26.897 00:05:00.531 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:29:26.918 00:05:00.451 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:29:54.904 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-10 04:33:59.738 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38092 9 6412 1 2025-09-10 04:30:25.241 00:05:02.148 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:35:00.152 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50970 9 6412 1 2025-09-10 04:31:25.261 00:05:02.109 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:35:56.611 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:35:56.497 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:36:00.511 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58232 9 6412 1 2025-09-10 04:37:11.302 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53666 1 40 1 2025-09-10 04:33:25.923 00:05:01.487 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:38:01.348 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46678 9 6412 1 2025-09-10 04:39:12.155 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56990 1 40 1 2025-09-10 04:35:14.913 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-09-10 04:35:26.899 00:05:00.532 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:35:26.920 00:05:00.451 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:40:02.194 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42918 10 6452 1 2025-09-10 04:36:25.244 00:05:02.149 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:40:56.708 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:40:56.777 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:37:25.263 00:05:02.109 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:42:13.336 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 1 40 1 2025-09-10 04:39:25.925 00:05:01.487 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:44:03.780 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:41220 9 6412 1 2025-09-10 04:40:34.924 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2664 1 2025-09-10 04:45:04.213 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38174 10 6452 1 2025-09-10 04:41:26.920 00:05:00.452 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:41:26.900 00:05:00.532 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:45:56.797 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:45:56.803 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:46:04.578 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54226 9 6412 1 2025-09-10 04:42:25.243 00:05:02.149 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:47:04.949 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:34472 9 6412 1 2025-09-10 04:43:25.264 00:05:02.109 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:49:06.274 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48120 10 6452 1 2025-09-10 04:45:25.926 00:05:01.487 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:45:54.931 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2784 1 2025-09-10 04:50:17.007 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54868 1 40 1 2025-09-10 04:50:56.963 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:50:56.894 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:51:07.049 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56526 10 6452 1 2025-09-10 04:47:26.901 00:05:00.533 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:47:26.922 00:05:00.453 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:48:25.247 00:05:02.148 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-10 04:53:18.286 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50802 1 40 1 2025-09-10 04:49:25.265 00:05:02.109 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-10 04:54:18.691 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34846 1 40 1 2025-09-10 04:55:08.729 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39212 10 6452 1 2025-09-10 04:51:14.934 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-09-10 04:51:25.927 00:05:01.488 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-10 04:55:57.304 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 04:55:57.553 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 04:57:09.545 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60976 9 6412 1 2025-09-10 04:53:26.923 00:05:00.451 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-10 04:53:26.904 00:05:00.531 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-10 04:58:09.923 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55854 10 6452 1 2025-09-10 04:54:25.246 00:05:02.148 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 Summary: total flows: 130, total bytes: 264408, total packets: 1368, avg bps: 550, avg pps: 0, avg bpp: 193 Time window: 2025-09-10 03:55:25 - 2025-09-10 04:59:27 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0028s User: 0.0018s Wall: 0.0021s flows/second: 61465.4 Runtime: 0.0021s