Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 05:59:02.210 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33746 9 6412 1 2025-10-11 05:55:41.837 00:05:00.686 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:00:53.635 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:00:53.679 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 05:57:40.591 00:05:01.919 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:02:03.425 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35058 9 6412 1 2025-10-11 06:03:03.825 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45646 9 6412 1 2025-10-11 05:59:27.520 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2732 1 2025-10-11 05:59:39.604 00:05:02.860 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 05:59:41.856 00:05:00.608 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 05:59:39.585 00:05:02.900 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:04:04.194 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 9 6412 1 2025-10-11 06:05:14.961 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58994 1 40 1 2025-10-11 06:01:41.837 00:05:00.687 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:05:53.565 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:05:53.645 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:06:05.008 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 9 6412 1 2025-10-11 06:07:15.775 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 1 40 1 2025-10-11 06:03:40.593 00:05:01.913 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:08:16.183 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 1 40 1 2025-10-11 06:04:47.529 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 32 2176 1 2025-10-11 06:09:16.549 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 1 40 1 2025-10-11 06:05:39.593 00:05:02.893 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:05:41.858 00:05:00.608 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:05:39.613 00:05:02.853 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:10:06.612 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59506 10 6452 1 2025-10-11 06:10:53.666 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:10:53.880 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:11:07.022 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:55900 10 6452 1 2025-10-11 06:07:41.839 00:05:00.687 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:12:07.421 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-10-11 06:13:07.829 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59484 9 6412 1 2025-10-11 06:09:40.594 00:05:01.916 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:10:07.543 00:05:10.458 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2832 1 2025-10-11 06:14:08.202 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41308 9 6412 1 2025-10-11 06:15:18.917 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 1 40 1 2025-10-11 06:11:39.614 00:05:02.857 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:11:41.860 00:05:00.611 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:11:39.594 00:05:02.896 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:15:53.787 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:15:53.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:17:09.382 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40942 10 6452 1 2025-10-11 06:13:41.841 00:05:00.689 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:15:27.555 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-11 06:15:40.595 00:05:01.918 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:20:53.862 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:20:53.800 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:17:39.597 00:05:02.897 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:17:39.617 00:05:02.857 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:17:41.863 00:05:00.611 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:22:11.612 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6452 1 2025-10-11 06:23:12.018 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53634 10 6452 1 2025-10-11 06:19:41.846 00:05:00.690 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:24:12.423 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42908 9 6412 1 2025-10-11 06:20:47.562 00:05:00.606 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2396 1 2025-10-11 06:25:12.834 00:00:13.529 TCP 1.101.0.1:3000 -> 23.104.0.1:52822 10 6452 1 2025-10-11 06:21:40.596 00:05:01.919 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:25:54.191 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:25:54.070 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:27:16.804 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51830 10 6452 1 2025-10-11 06:23:39.600 00:05:02.895 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:23:39.620 00:05:02.855 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:23:41.867 00:05:00.608 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:28:17.215 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41696 9 6412 1 2025-10-11 06:29:17.624 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 9 6412 1 2025-10-11 06:25:41.848 00:05:00.688 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:25:57.570 00:05:10.023 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2684 1 2025-10-11 06:30:54.283 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:30:54.080 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:31:18.439 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59610 10 6452 1 2025-10-11 06:27:40.597 00:05:01.919 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:32:18.844 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52302 9 6412 1 2025-10-11 06:33:29.607 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55924 1 40 1 2025-10-11 06:29:39.621 00:05:02.855 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:29:41.868 00:05:00.608 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:29:39.601 00:05:02.895 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:34:29.968 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60754 1 40 1 2025-10-11 06:31:17.592 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-10-11 06:35:20.006 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35510 9 6412 1 2025-10-11 06:31:41.849 00:05:00.688 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:35:54.117 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:35:54.347 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:36:30.776 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60032 1 40 1 2025-10-11 06:37:31.178 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47620 1 40 1 2025-10-11 06:33:40.598 00:05:01.920 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:38:21.215 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37020 10 6452 1 2025-10-11 06:39:21.625 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:32810 10 6452 1 2025-10-11 06:35:39.622 00:05:02.856 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:35:41.873 00:05:00.605 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:35:39.601 00:05:02.896 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:40:32.384 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34854 1 40 1 2025-10-11 06:36:37.594 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-11 06:40:54.345 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:40:54.395 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:41:22.423 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51026 9 6412 1 2025-10-11 06:37:41.851 00:05:00.687 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:42:22.798 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34718 10 6452 1 2025-10-11 06:39:40.601 00:05:01.917 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:44:33.931 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55008 1 40 1 2025-10-11 06:45:23.971 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48542 9 6412 1 2025-10-11 06:41:39.603 00:05:02.895 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:41:39.624 00:05:02.855 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:41:41.874 00:05:00.605 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:45:54.997 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:45:54.760 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:41:57.607 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2832 1 2025-10-11 06:46:24.337 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:55262 10 6452 1 2025-10-11 06:43:41.854 00:05:00.687 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:48:35.611 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 1 40 1 2025-10-11 06:49:25.647 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59564 10 6452 1 2025-10-11 06:45:40.605 00:05:01.916 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:50:26.049 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60334 9 6412 1 2025-10-11 06:50:54.643 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:50:54.643 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:47:17.613 00:05:10.935 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-11 06:51:26.471 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-10-11 06:47:39.624 00:05:02.857 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:47:41.876 00:05:00.605 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:47:39.604 00:05:02.897 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:52:37.259 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47696 1 40 1 2025-10-11 06:53:37.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48354 1 40 1 2025-10-11 06:49:41.856 00:05:00.685 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-11 06:54:38.075 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55978 1 40 1 2025-10-11 06:55:28.129 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34060 9 6412 1 2025-10-11 06:51:40.607 00:05:01.914 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-11 06:55:54.818 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:55:54.617 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:52:37.617 00:05:00.994 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2660 1 2025-10-11 06:56:38.902 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37524 1 40 1 2025-10-11 06:53:39.625 00:05:02.863 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-11 06:53:41.878 00:05:00.610 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-11 06:53:39.604 00:05:02.904 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-11 06:58:39.737 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42234 1 40 1 Summary: total flows: 133, total bytes: 270924, total packets: 1381, avg bps: 573, avg pps: 0, avg bpp: 196 Time window: 2025-10-11 05:55:41 - 2025-10-11 06:58:42 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0034s User: 0.0011s Wall: 0.0014s flows/second: 95948.1 Runtime: 0.0014s