Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 17:58:48.372 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51074 10 6452 1 2025-10-02 17:59:48.781 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47326 9 6412 1 2025-10-02 17:56:37.633 00:05:00.598 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:00:59.558 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56528 1 40 1 2025-10-02 17:57:36.511 00:05:01.699 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 17:57:37.653 00:05:00.518 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:01:48.475 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:01:48.387 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:01:59.971 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57534 1 40 1 2025-10-02 17:58:40.064 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2804 1 2025-10-02 17:59:35.655 00:05:02.537 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 17:59:35.675 00:05:02.496 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:03:50.417 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39644 9 6412 1 2025-10-02 18:04:50.844 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52910 10 6452 1 2025-10-02 18:02:37.634 00:05:00.599 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:06:48.184 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:06:48.112 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:06:51.613 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53546 9 6412 1 2025-10-02 18:03:36.512 00:05:01.701 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:03:37.655 00:05:00.519 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:04:00.072 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-10-02 18:08:52.382 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36808 9 6412 1 2025-10-02 18:05:35.655 00:05:02.537 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:05:35.676 00:05:02.498 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:10:03.113 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 1 40 1 2025-10-02 18:11:48.375 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:11:48.233 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:12:03.886 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55206 1 40 1 2025-10-02 18:08:37.637 00:05:00.598 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:12:53.924 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34326 9 6412 1 2025-10-02 18:09:20.080 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2712 1 2025-10-02 18:09:37.656 00:05:00.518 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:09:36.515 00:05:01.699 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:13:54.333 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53244 10 6452 1 2025-10-02 18:11:35.680 00:05:02.495 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:11:35.659 00:05:02.535 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:16:48.372 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:16:48.453 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:16:55.503 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56328 10 6452 1 2025-10-02 18:14:37.637 00:05:00.598 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:14:40.086 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-10-02 18:18:56.306 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54902 9 6412 1 2025-10-02 18:15:36.519 00:05:01.697 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:15:37.656 00:05:00.519 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:20:07.104 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 1 40 1 2025-10-02 18:20:57.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42832 9 6412 1 2025-10-02 18:17:35.661 00:05:02.541 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:17:35.681 00:05:02.500 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:21:48.442 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:21:48.584 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:20:00.093 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2480 1 2025-10-02 18:20:37.640 00:05:00.602 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:24:58.743 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46492 10 6452 1 2025-10-02 18:21:36.533 00:05:01.689 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:21:37.659 00:05:00.523 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:26:09.520 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58800 1 40 1 2025-10-02 18:26:48.507 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:26:48.505 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:23:35.682 00:05:02.500 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:23:35.662 00:05:02.540 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:28:04.340 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56608 10 6452 1 2025-10-02 18:29:04.744 00:00:11.057 TCP 1.101.0.1:3000 -> 23.104.0.1:35698 9 6412 1 2025-10-02 18:25:20.097 00:05:10.751 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2736 1 2025-10-02 18:26:37.640 00:05:00.605 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:31:06.241 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44962 10 6452 1 2025-10-02 18:27:37.660 00:05:00.525 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:27:36.524 00:05:01.702 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:31:49.001 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:31:48.994 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:32:06.605 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34712 10 6452 1 2025-10-02 18:29:35.664 00:05:02.541 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:29:35.684 00:05:02.501 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:34:17.775 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37272 1 40 1 2025-10-02 18:30:40.103 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-10-02 18:35:18.193 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57392 1 40 1 2025-10-02 18:32:37.643 00:05:00.604 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:36:48.825 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:36:48.816 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:37:08.633 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56868 9 6412 1 2025-10-02 18:33:36.526 00:05:01.701 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:33:37.663 00:05:00.524 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:35:35.667 00:05:02.540 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:35:35.688 00:05:02.499 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:36:00.107 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2444 1 2025-10-02 18:40:09.930 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41768 9 6412 1 2025-10-02 18:41:20.696 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56178 1 40 1 2025-10-02 18:41:48.899 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:41:48.900 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:42:10.735 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42128 10 6452 1 2025-10-02 18:38:37.645 00:05:00.601 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:39:37.666 00:05:00.521 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:39:36.525 00:05:01.701 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:41:20.114 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2656 1 2025-10-02 18:41:35.689 00:05:02.498 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:41:35.670 00:05:02.537 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:46:22.732 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53600 1 40 1 2025-10-02 18:46:48.966 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:46:48.964 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:47:23.115 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59130 1 40 1 2025-10-02 18:48:13.166 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:60794 9 6412 1 2025-10-02 18:44:37.649 00:05:00.598 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:49:24.812 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39178 1 40 1 2025-10-02 18:45:36.527 00:05:01.700 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:45:37.669 00:05:00.518 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:50:25.240 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57392 1 40 1 2025-10-02 18:46:40.118 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2464 1 2025-10-02 18:51:15.273 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45108 9 6412 1 2025-10-02 18:47:35.690 00:05:02.497 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:47:35.672 00:05:02.537 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:51:49.492 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:51:49.349 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:52:15.676 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39410 9 6412 1 2025-10-02 18:54:16.523 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49046 9 6412 1 2025-10-02 18:50:37.651 00:05:00.597 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-02 18:55:27.298 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47654 1 40 1 2025-10-02 18:51:36.530 00:05:01.698 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-02 18:51:37.670 00:05:00.518 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-02 18:52:00.126 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-10-02 18:56:17.340 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33490 9 6412 1 2025-10-02 18:56:49.247 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 18:56:49.356 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 18:57:28.072 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43680 1 40 1 2025-10-02 18:53:35.673 00:05:02.534 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-02 18:53:35.694 00:05:02.494 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-02 18:58:18.131 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60222 10 6452 1 Summary: total flows: 125, total bytes: 232340, total packets: 1320, avg bps: 499, avg pps: 0, avg bpp: 176 Time window: 2025-10-02 17:56:37 - 2025-10-02 18:58:38 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0038s User: 0.0010s Wall: 0.0017s flows/second: 72007.7 Runtime: 0.0018s