Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 03:00:18.031 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49346 1 40 1 2025-10-03 02:56:37.798 00:05:00.639 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 02:57:00.807 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2600 1 2025-10-03 03:01:08.058 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36658 9 6412 1 2025-10-03 02:57:37.819 00:05:00.559 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 02:57:36.664 00:05:01.754 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:01:59.030 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:01:58.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:02:08.466 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37694 10 6452 1 2025-10-03 02:59:35.834 00:05:02.563 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 02:59:35.855 00:05:02.522 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:05:09.787 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:41266 10 6452 1 2025-10-03 03:06:20.524 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 1 40 1 2025-10-03 03:02:20.819 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2868 1 2025-10-03 03:02:37.799 00:05:00.640 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:06:59.089 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:06:59.220 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:07:10.564 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6452 1 2025-10-03 03:03:37.818 00:05:00.559 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:03:36.664 00:05:01.754 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:08:21.344 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46584 1 40 1 2025-10-03 03:05:35.856 00:05:02.522 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:05:35.835 00:05:02.563 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:10:22.116 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58320 1 40 1 2025-10-03 03:07:40.826 00:05:00.384 OSPF 23.0.7.2:0 -> 224.0.0.5:0 32 2172 1 2025-10-03 03:11:59.079 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:11:59.282 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:08:37.820 00:05:00.620 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:13:23.350 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 1 40 1 2025-10-03 03:09:37.841 00:05:00.539 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:09:36.667 00:05:01.755 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:14:23.747 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58354 1 40 1 2025-10-03 03:15:13.785 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34924 10 6452 1 2025-10-03 03:11:35.838 00:05:02.564 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:11:35.858 00:05:02.524 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:16:14.190 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54046 10 6452 1 2025-10-03 03:16:59.288 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:16:59.156 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:12:50.830 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2668 1 2025-10-03 03:18:15.002 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42990 9 6412 1 2025-10-03 03:14:37.823 00:05:00.620 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:15:36.668 00:05:01.755 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:15:37.844 00:05:00.540 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:21:16.169 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35056 10 6452 1 2025-10-03 03:17:35.842 00:05:02.563 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:17:35.862 00:05:02.523 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:21:59.260 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:21:59.487 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:18:10.834 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-10-03 03:22:16.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38872 10 6452 1 2025-10-03 03:23:27.334 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 1 40 1 2025-10-03 03:24:17.373 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59612 10 6452 1 2025-10-03 03:20:37.825 00:05:00.626 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:25:28.168 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37250 1 40 1 2025-10-03 03:21:37.847 00:05:00.539 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:21:36.671 00:05:01.756 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:26:18.205 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55660 10 6452 1 2025-10-03 03:26:59.517 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:26:59.347 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:23:35.862 00:05:02.524 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:23:35.842 00:05:02.564 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:23:30.843 00:05:10.071 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2600 1 2025-10-03 03:28:19.013 00:00:10.493 TCP 1.101.0.1:3000 -> 23.104.0.1:54184 14 10473 1 2025-10-03 03:29:29.874 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 1 40 1 2025-10-03 03:26:37.838 00:05:00.610 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:31:20.291 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47448 9 6412 1 2025-10-03 03:27:37.857 00:05:00.530 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:27:36.672 00:05:01.756 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:31:59.544 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:31:59.613 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:32:31.022 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56712 1 40 1 2025-10-03 03:28:50.847 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2884 1 2025-10-03 03:29:35.843 00:05:02.565 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:29:35.863 00:05:02.525 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:34:21.457 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58550 9 6412 1 2025-10-03 03:35:32.250 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52428 1 40 1 2025-10-03 03:36:22.288 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38716 10 6452 1 2025-10-03 03:32:37.839 00:05:00.611 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:36:59.633 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:36:59.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:37:22.698 00:00:10.609 TCP 1.101.0.1:3000 -> 23.104.0.1:56004 10 6452 1 2025-10-03 03:33:36.674 00:05:01.765 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:33:37.859 00:05:00.539 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:34:10.856 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-10-03 03:38:33.693 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43216 1 40 1 2025-10-03 03:35:35.846 00:05:02.573 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:35:35.867 00:05:02.533 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:39:36.997 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 1 40 1 2025-10-03 03:40:27.042 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38078 9 6412 1 2025-10-03 03:41:27.405 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52198 10 6452 1 2025-10-03 03:41:59.898 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:41:59.772 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:38:37.847 00:05:00.612 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:42:27.812 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-10-03 03:39:36.675 00:05:01.766 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:39:37.865 00:05:00.537 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:39:30.860 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2488 1 2025-10-03 03:45:29.152 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43374 9 6412 1 2025-10-03 03:41:35.867 00:05:02.533 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:41:35.848 00:05:02.573 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:46:29.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54656 10 6452 1 2025-10-03 03:46:59.900 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:46:59.898 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:47:29.963 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52166 11 6516 1 2025-10-03 03:48:30.384 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57342 9 6412 1 2025-10-03 03:44:37.845 00:05:00.616 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:44:50.864 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2736 1 2025-10-03 03:45:36.676 00:05:01.765 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:45:37.867 00:05:00.535 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:50:31.158 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44510 10 6452 1 2025-10-03 03:47:35.871 00:05:02.530 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:47:35.850 00:05:02.571 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:51:41.932 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36108 1 40 1 2025-10-03 03:51:59.944 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:51:59.944 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:53:42.762 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55384 1 40 1 2025-10-03 03:50:10.872 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-10-03 03:50:37.847 00:05:00.616 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-03 03:54:32.797 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52794 9 6412 1 2025-10-03 03:51:37.867 00:05:00.537 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-03 03:51:36.678 00:05:01.767 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-03 03:56:33.616 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36506 10 6452 1 2025-10-03 03:56:59.946 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:57:00.246 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:53:35.872 00:05:02.532 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-03 03:53:35.852 00:05:02.572 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-03 03:57:44.387 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49742 1 40 1 2025-10-03 03:58:34.439 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34422 12 6556 1 Summary: total flows: 128, total bytes: 249621, total packets: 1353, avg bps: 535, avg pps: 0, avg bpp: 184 Time window: 2025-10-03 02:56:37 - 2025-10-03 03:58:44 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0022s User: 0.0022s Wall: 0.0037s flows/second: 34821.0 Runtime: 0.0037s