Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 09:58:58.379 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44474 9 6412 1 2025-09-18 09:54:31.359 00:05:57.738 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 09:55:30.870 00:05:00.490 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 09:59:54.224 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 09:59:54.221 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 09:59:58.795 00:00:10.904 TCP 1.101.0.1:3000 -> 23.104.0.1:33396 10 6452 1 2025-09-18 09:56:30.849 00:05:00.571 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:01:10.079 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54986 1 40 1 2025-09-18 09:57:29.945 00:05:01.459 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:02:00.135 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:54526 10 6452 1 2025-09-18 09:58:01.292 00:05:10.057 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2644 1 2025-09-18 09:59:31.382 00:05:57.697 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:04:54.215 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:04:54.306 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:05:11.701 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33630 1 40 1 2025-09-18 10:00:31.360 00:05:57.738 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:01:30.871 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:06:12.110 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57598 1 40 1 2025-09-18 10:02:30.852 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:07:02.152 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59464 10 6452 1 2025-09-18 10:03:21.300 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2648 1 2025-09-18 10:03:29.953 00:05:01.453 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:08:02.512 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50910 12 6556 1 2025-09-18 10:09:02.931 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53380 10 6452 1 2025-09-18 10:09:54.391 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:09:54.377 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:10:13.667 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42962 1 40 1 2025-09-18 10:05:31.385 00:05:57.694 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:11:03.708 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34870 9 6412 1 2025-09-18 10:06:31.365 00:05:57.734 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:07:30.873 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:12:04.140 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52174 9 6412 1 2025-09-18 10:08:30.853 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:08:41.304 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2568 1 2025-09-18 10:13:14.866 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53900 1 40 1 2025-09-18 10:09:29.952 00:05:01.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:14:15.256 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44304 1 40 1 2025-09-18 10:14:54.550 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:14:54.602 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:15:05.301 00:00:12.742 TCP 1.101.0.1:3000 -> 23.104.0.1:49436 10 6452 1 2025-09-18 10:16:08.125 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59990 10 6452 1 2025-09-18 10:11:31.385 00:05:57.694 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:17:08.524 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49460 10 6452 1 2025-09-18 10:12:31.367 00:05:57.733 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:13:30.876 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:14:01.312 00:05:10.018 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-09-18 10:18:19.299 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54642 1 40 1 2025-09-18 10:14:30.856 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:19:19.696 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53178 1 40 1 2025-09-18 10:15:29.960 00:05:01.451 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:19:54.506 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:19:54.596 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:20:20.128 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48402 1 40 1 2025-09-18 10:21:10.166 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54522 9 6412 1 2025-09-18 10:22:20.891 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52762 1 40 1 2025-09-18 10:17:31.389 00:05:57.691 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:23:21.293 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53858 1 40 1 2025-09-18 10:18:31.369 00:05:57.733 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:19:21.329 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2768 1 2025-09-18 10:19:30.877 00:05:00.493 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:24:11.342 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60014 10 6452 1 2025-09-18 10:20:30.857 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:24:54.737 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:24:54.798 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:25:11.753 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35536 10 6452 1 2025-09-18 10:21:29.956 00:05:01.456 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:27:12.565 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34914 9 6412 1 2025-09-18 10:28:12.939 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 9 6412 1 2025-09-18 10:23:31.392 00:05:57.693 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:24:41.339 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-09-18 10:29:23.722 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41166 1 40 1 2025-09-18 10:24:31.370 00:05:57.735 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:25:30.879 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:29:54.861 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:29:54.904 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:30:13.771 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60420 9 6412 1 2025-09-18 10:26:30.858 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:31:14.130 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 9 6412 1 2025-09-18 10:27:29.955 00:05:01.458 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:32:14.539 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34204 9 6412 1 2025-09-18 10:33:14.940 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 9 6412 1 2025-09-18 10:30:01.352 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2704 1 2025-09-18 10:34:15.343 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43628 9 6412 1 2025-09-18 10:29:31.391 00:05:57.696 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:34:54.857 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:34:54.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:30:31.372 00:05:57.735 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:35:15.757 00:00:10.497 TCP 1.101.0.1:3000 -> 23.104.0.1:43360 10 6452 1 2025-09-18 10:31:30.880 00:05:00.492 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:32:30.861 00:05:00.573 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:33:29.959 00:05:01.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:38:27.495 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49932 1 40 1 2025-09-18 10:39:17.535 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59092 10 6452 1 2025-09-18 10:35:21.356 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2584 1 2025-09-18 10:39:55.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:39:55.101 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:35:31.393 00:05:57.695 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:40:28.288 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45852 1 40 1 2025-09-18 10:41:18.328 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56694 9 6412 1 2025-09-18 10:36:31.372 00:05:57.736 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:37:30.881 00:05:00.493 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:42:18.733 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43082 10 6452 1 2025-09-18 10:38:30.861 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:39:29.963 00:05:01.452 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:44:29.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35402 1 40 1 2025-09-18 10:44:55.136 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:40:41.367 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2368 1 2025-09-18 10:44:55.261 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:45:19.941 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39782 9 6412 1 2025-09-18 10:41:31.394 00:05:57.696 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:42:31.376 00:05:57.735 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:47:20.777 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:37112 10 6452 1 2025-09-18 10:43:30.883 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:48:21.155 00:00:10.938 TCP 1.101.0.1:3000 -> 23.104.0.1:37998 10 6452 1 2025-09-18 10:44:30.862 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:45:29.963 00:05:01.453 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:49:32.471 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34966 1 40 1 2025-09-18 10:49:55.203 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:49:55.134 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:46:01.369 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2324 1 2025-09-18 10:50:22.508 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54950 10 6452 1 2025-09-18 10:51:33.293 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 1 40 1 2025-09-18 10:47:31.396 00:05:57.696 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:52:23.335 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48558 10 6452 1 2025-09-18 10:48:31.376 00:05:57.735 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-09-18 10:53:34.116 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 1 40 1 2025-09-18 10:49:30.883 00:05:00.494 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-09-18 10:54:34.515 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48246 1 40 1 2025-09-18 10:50:30.863 00:05:00.574 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-09-18 10:54:55.063 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 10:54:55.066 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 10:51:21.369 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2748 1 2025-09-18 10:55:24.556 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-09-18 10:51:29.963 00:05:01.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-18 10:57:25.339 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41926 10 6452 1 2025-09-18 10:53:31.397 00:05:57.694 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-09-18 10:58:25.699 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52930 9 6412 1 Summary: total flows: 137, total bytes: 284288, total packets: 1407, avg bps: 583, avg pps: 0, avg bpp: 202 Time window: 2025-09-18 09:54:31 - 2025-09-18 10:59:29 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0012s Wall: 0.0022s flows/second: 61463.2 Runtime: 0.0022s