Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 12:59:35.779 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:36720 9 6412 1 2025-10-01 13:01:13.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:01:13.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:57:35.927 00:05:01.710 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:01:36.558 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38962 9 6412 1 2025-10-01 12:57:47.635 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2716 1 2025-10-01 13:02:36.959 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44522 9 6412 1 2025-10-01 12:59:35.124 00:05:02.474 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 12:59:35.103 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:03:37.379 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45374 9 6412 1 2025-10-01 12:59:37.116 00:06:00.481 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-01 13:04:37.781 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 9 6412 1 2025-10-01 13:00:37.096 00:06:00.563 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-01 13:05:48.558 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57302 1 40 1 2025-10-01 13:06:13.460 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:06:13.416 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:03:07.638 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-10-01 13:03:35.931 00:05:01.709 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:07:39.001 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56554 9 6412 1 2025-10-01 13:08:49.773 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57298 1 40 1 2025-10-01 13:05:35.112 00:05:02.510 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:05:35.131 00:05:02.470 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:10:50.591 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56434 1 40 1 2025-10-01 13:11:13.587 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:11:13.660 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:06:37.118 00:06:00.484 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-01 13:11:40.629 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54270 10 6452 1 2025-10-01 13:07:37.098 00:06:00.564 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-01 13:08:27.640 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2752 1 2025-10-01 13:12:40.990 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:54352 11 6504 1 2025-10-01 13:09:35.932 00:05:01.710 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:13:41.451 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51538 10 6452 1 2025-10-01 13:14:41.813 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59908 10 6452 1 2025-10-01 13:11:35.133 00:05:02.470 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:11:35.113 00:05:02.510 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:15:52.541 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48100 1 40 1 2025-10-01 13:16:13.459 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:16:13.378 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:16:42.577 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48698 10 6452 1 2025-10-01 13:17:42.988 00:00:10.791 TCP 1.101.0.1:3000 -> 23.104.0.1:58160 9 6412 1 2025-10-01 13:13:47.646 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-10-01 13:13:37.120 00:06:00.485 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-01 13:18:43.824 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56428 10 6452 1 2025-10-01 13:15:35.933 00:05:01.712 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:14:37.099 00:06:00.566 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-01 13:19:54.606 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51486 1 40 1 2025-10-01 13:21:13.988 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:21:13.988 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:17:35.114 00:05:02.511 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:17:35.133 00:05:02.471 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:21:45.048 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55306 9 6412 1 2025-10-01 13:22:45.478 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38236 10 6452 1 2025-10-01 13:19:07.650 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2576 1 2025-10-01 13:23:56.221 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40492 1 40 1 2025-10-01 13:24:56.626 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40552 1 40 1 2025-10-01 13:20:37.121 00:06:00.484 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-01 13:21:35.937 00:05:01.708 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:25:46.667 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55084 10 6452 1 2025-10-01 13:26:13.826 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:26:13.831 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:21:37.103 00:06:00.564 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-01 13:26:47.036 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42792 10 6452 1 2025-10-01 13:23:35.116 00:05:02.509 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:23:35.136 00:05:02.470 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:24:27.652 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2684 1 2025-10-01 13:28:58.130 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44406 1 40 1 2025-10-01 13:30:48.531 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44190 9 6412 1 2025-10-01 13:31:13.709 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:31:13.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:27:35.938 00:05:01.708 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:31:48.937 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51552 9 6412 1 2025-10-01 13:27:37.122 00:06:00.486 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-01 13:32:59.778 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52630 1 40 1 2025-10-01 13:28:37.103 00:06:00.566 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-01 13:29:35.117 00:05:02.512 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:29:35.138 00:05:02.471 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:29:47.658 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2260 1 2025-10-01 13:33:49.814 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42330 9 6412 1 2025-10-01 13:34:50.223 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:58148 10 6452 1 2025-10-01 13:36:13.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:36:13.773 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:36:51.015 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33304 9 6412 1 2025-10-01 13:33:35.941 00:05:01.711 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:37:51.413 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54986 10 6452 1 2025-10-01 13:38:51.813 00:00:10.831 TCP 1.101.0.1:3000 -> 23.104.0.1:37798 9 6412 1 2025-10-01 13:35:07.660 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2668 1 2025-10-01 13:35:35.137 00:05:02.474 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:34:37.124 00:06:00.487 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-01 13:35:35.118 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:39:52.681 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50396 10 6452 1 2025-10-01 13:35:37.105 00:06:00.567 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-01 13:41:03.430 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46558 1 40 1 2025-10-01 13:41:14.606 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:41:14.596 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:41:53.469 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 9 6412 1 2025-10-01 13:43:04.322 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43172 1 40 1 2025-10-01 13:39:35.942 00:05:01.712 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:43:54.365 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50758 10 6452 1 2025-10-01 13:40:27.674 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2672 1 2025-10-01 13:44:54.770 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36954 9 6412 1 2025-10-01 13:41:35.119 00:05:02.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:41:35.140 00:05:02.474 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:46:14.292 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:46:14.292 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:41:37.130 00:06:00.485 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-01 13:47:05.869 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45198 1 40 1 2025-10-01 13:42:37.110 00:06:00.565 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-01 13:45:35.944 00:05:01.710 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:45:47.683 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2296 1 2025-10-01 13:49:56.675 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47888 10 6452 1 2025-10-01 13:51:07.488 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49248 1 40 1 2025-10-01 13:51:14.343 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:51:14.219 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:47:35.140 00:05:02.474 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:47:35.119 00:05:02.515 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:52:07.914 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47646 1 40 1 2025-10-01 13:52:57.955 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:35090 10 6452 1 2025-10-01 13:48:37.130 00:06:00.485 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-01 13:49:37.109 00:06:00.565 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-01 13:54:58.804 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58858 10 6452 1 2025-10-01 13:51:07.694 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2680 1 2025-10-01 13:51:35.945 00:05:01.711 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-01 13:56:14.453 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 13:56:14.285 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 13:53:35.143 00:05:02.476 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-01 13:53:35.122 00:05:02.516 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-01 13:57:59.940 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37532 10 6452 1 Summary: total flows: 127, total bytes: 276552, total packets: 1374, avg bps: 604, avg pps: 0, avg bpp: 201 Time window: 2025-10-01 12:57:35 - 2025-10-01 13:58:37 Total flows processed: 127, passed: 127, Blocks skipped: 0, Bytes read: 13272 Sys: 0.0012s User: 0.0035s Wall: 0.0020s flows/second: 64928.9 Runtime: 0.0020s