Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 11:58:50.204 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43422 9 6412 1 2025-10-12 11:55:42.481 00:05:00.599 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 11:59:50.608 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36668 10 6452 1 2025-10-12 12:00:51.013 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38702 9 6412 1 2025-10-12 12:01:29.685 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:01:29.690 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:57:41.225 00:05:01.897 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 11:57:42.464 00:05:00.678 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:01:51.418 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55184 9 6412 1 2025-10-12 11:58:30.232 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 3012 1 2025-10-12 11:59:40.222 00:05:02.858 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 11:59:40.203 00:05:02.897 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:03:52.228 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54184 10 6452 1 2025-10-12 12:04:52.640 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56582 9 6412 1 2025-10-12 12:01:42.485 00:05:00.595 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:05:53.052 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:44208 12 10375 1 2025-10-12 12:06:29.842 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:06:29.666 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:06:53.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41016 10 6452 1 2025-10-12 12:03:41.226 00:05:01.897 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:03:42.465 00:05:00.678 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:03:50.242 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 32 2176 1 2025-10-12 12:08:04.294 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56316 1 40 1 2025-10-12 12:08:54.332 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56018 9 6412 1 2025-10-12 12:05:40.204 00:05:02.899 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:05:40.225 00:05:02.859 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 12:09:54.734 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52106 9 6412 1 2025-10-12 12:10:55.139 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47930 9 6412 1 2025-10-12 12:11:29.704 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:11:29.808 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:07:42.486 00:05:00.597 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:11:55.551 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41488 9 6412 1 2025-10-12 12:09:10.248 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2432 1 2025-10-12 12:09:41.228 00:05:01.895 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:09:42.466 00:05:00.677 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:13:56.388 00:00:10.849 TCP 1.101.0.1:3000 -> 23.104.0.1:36476 10 6452 1 2025-10-12 12:14:57.275 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53244 10 6452 1 2025-10-12 12:11:40.206 00:05:02.898 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:11:40.225 00:05:02.859 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 12:15:57.634 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:32892 11 10335 1 2025-10-12 12:16:29.747 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:16:29.673 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:13:42.490 00:05:00.594 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:17:58.602 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43412 9 6412 1 2025-10-12 12:14:30.259 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2704 1 2025-10-12 12:18:59.007 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 10 6452 1 2025-10-12 12:15:41.227 00:05:01.898 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:15:42.471 00:05:00.674 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:19:59.378 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43034 9 6412 1 2025-10-12 12:20:59.786 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48148 10 6452 1 2025-10-12 12:21:30.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:21:30.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:17:40.207 00:05:02.898 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:17:40.227 00:05:02.858 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 12:22:00.214 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46252 9 6412 1 2025-10-12 12:23:00.624 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55292 9 6412 1 2025-10-12 12:19:42.493 00:05:00.597 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:19:50.271 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-12 12:24:01.028 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41874 9 6412 1 2025-10-12 12:25:11.802 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41756 1 40 1 2025-10-12 12:21:41.228 00:05:01.901 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:21:42.473 00:05:00.676 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:26:12.206 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58872 1 40 1 2025-10-12 12:26:30.334 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:26:30.244 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:23:40.228 00:05:02.863 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 12:23:40.208 00:05:02.903 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:28:02.741 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44578 9 6412 1 2025-10-12 12:29:13.462 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 1 40 1 2025-10-12 12:25:10.293 00:05:10.000 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2728 1 2025-10-12 12:25:42.494 00:05:00.597 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:31:03.868 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:40738 12 10369 1 2025-10-12 12:31:30.258 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:31:30.339 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:27:41.232 00:05:01.899 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:27:42.475 00:05:00.676 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:33:15.099 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47296 1 40 1 2025-10-12 12:29:40.210 00:05:02.902 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:29:40.229 00:05:02.862 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 12:34:05.139 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55024 9 6412 1 2025-10-12 12:30:30.292 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-10-12 12:31:42.506 00:05:00.585 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:36:30.720 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:36:30.508 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:37:16.692 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57790 1 40 1 2025-10-12 12:33:41.233 00:05:01.900 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:33:42.478 00:05:00.675 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:38:06.731 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36434 10 6452 1 2025-10-12 12:39:07.131 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49134 9 6412 1 2025-10-12 12:35:40.235 00:05:02.858 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 12:35:40.215 00:05:02.899 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:35:50.305 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-12 12:41:07.905 00:00:10.638 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 11 6516 1 2025-10-12 12:41:30.312 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:41:30.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:37:42.500 00:05:00.595 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:42:18.935 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37532 1 40 1 2025-10-12 12:43:08.975 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60568 9 6412 1 2025-10-12 12:39:41.235 00:05:01.899 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:39:42.479 00:05:00.675 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:44:19.760 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44758 1 40 1 2025-10-12 12:45:09.798 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55634 9 6412 1 2025-10-12 12:41:10.308 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-10-12 12:41:40.215 00:05:02.899 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:41:40.236 00:05:02.858 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 12:46:10.209 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51342 9 6412 1 2025-10-12 12:46:30.671 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:46:30.669 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:43:42.502 00:05:00.592 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:48:11.013 00:00:10.885 TCP 1.101.0.1:3000 -> 23.104.0.1:51108 10 6452 1 2025-10-12 12:49:22.298 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55440 1 40 1 2025-10-12 12:45:41.237 00:05:01.898 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:45:42.481 00:05:00.674 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:50:22.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40074 1 40 1 2025-10-12 12:46:30.313 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2848 1 2025-10-12 12:51:23.163 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55234 1 40 1 2025-10-12 12:51:30.852 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:51:30.795 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:47:40.217 00:05:02.898 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:47:40.237 00:05:02.858 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 12:52:23.582 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33816 1 40 1 2025-10-12 12:53:13.621 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53112 9 6412 1 2025-10-12 12:49:42.504 00:05:00.593 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 12:54:14.028 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 9 6412 1 2025-10-12 12:55:14.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54070 10 6452 1 2025-10-12 12:51:41.238 00:05:01.898 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 12:51:42.484 00:05:00.672 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 12:51:50.316 00:05:10.827 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-10-12 12:56:25.174 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58972 1 40 1 2025-10-12 12:56:31.793 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:56:31.790 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:57:25.578 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 1 40 1 2025-10-12 12:53:40.217 00:05:02.900 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 12:53:40.236 00:05:02.860 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 Summary: total flows: 134, total bytes: 308435, total packets: 1421, avg bps: 652, avg pps: 0, avg bpp: 217 Time window: 2025-10-12 11:55:42 - 2025-10-12 12:58:43 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0039s User: 0.0010s Wall: 0.0022s flows/second: 61633.6 Runtime: 0.0022s