Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 15:59:31.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 10 6452 1 2025-10-12 15:55:42.585 00:05:00.595 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:00:31.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56948 9 6412 1 2025-10-12 16:01:34.466 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:01:34.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 15:57:41.299 00:05:01.921 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 15:57:42.565 00:05:00.675 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 15:58:20.556 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-12 16:02:32.376 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43762 9 6412 1 2025-10-12 15:59:40.287 00:05:02.892 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:03:32.778 00:00:10.484 TCP 1.101.0.1:3000 -> 23.104.0.1:51978 10 6452 1 2025-10-12 15:59:40.268 00:05:02.932 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:04:33.300 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60454 9 6412 1 2025-10-12 16:05:33.703 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50848 9 6412 1 2025-10-12 16:01:42.585 00:05:00.595 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:06:34.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:06:34.479 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:06:44.441 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43304 1 40 1 2025-10-12 16:03:41.300 00:05:01.921 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:03:42.565 00:05:00.676 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:07:44.846 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60578 1 40 1 2025-10-12 16:03:40.563 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2784 1 2025-10-12 16:08:45.258 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44758 1 40 1 2025-10-12 16:05:40.272 00:05:02.929 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:09:35.299 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54056 10 6452 1 2025-10-12 16:05:40.293 00:05:02.888 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:11:34.944 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:11:34.871 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:07:42.586 00:05:00.595 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:11:46.496 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47690 1 40 1 2025-10-12 16:12:36.536 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35678 10 6452 1 2025-10-12 16:09:00.567 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-12 16:09:42.567 00:05:00.675 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:09:41.304 00:05:01.918 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:13:47.334 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39022 1 40 1 2025-10-12 16:14:47.731 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41230 1 40 1 2025-10-12 16:11:40.274 00:05:02.927 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:11:40.293 00:05:02.888 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:15:37.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50092 10 6452 1 2025-10-12 16:16:35.132 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:16:35.236 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:16:48.539 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51822 1 40 1 2025-10-12 16:13:42.591 00:05:00.591 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:17:38.582 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43374 9 6412 1 2025-10-12 16:14:20.578 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 42 3076 1 2025-10-12 16:18:38.982 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58034 10 6452 1 2025-10-12 16:15:41.306 00:05:01.918 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:15:42.574 00:05:00.670 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:21:34.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:21:34.842 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:17:40.275 00:05:02.929 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:17:40.294 00:05:02.889 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:22:40.581 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47116 9 6412 1 2025-10-12 16:19:42.593 00:05:00.591 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:19:40.586 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 32 2176 1 2025-10-12 16:23:40.984 00:00:10.980 TCP 1.101.0.1:3000 -> 23.104.0.1:46540 10 6452 1 2025-10-12 16:21:41.308 00:05:01.917 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:21:42.574 00:05:00.671 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:25:42.407 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44610 9 6412 1 2025-10-12 16:26:35.138 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:26:34.847 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:23:40.274 00:05:02.929 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:23:40.295 00:05:02.889 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:28:54.693 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39318 1 40 1 2025-10-12 16:25:00.590 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-12 16:25:42.594 00:05:00.590 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:31:35.000 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:31:35.086 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:27:41.309 00:05:01.916 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:27:42.575 00:05:00.670 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:31:45.536 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34980 9 6412 1 2025-10-12 16:32:45.939 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 2025-10-12 16:29:40.278 00:05:02.928 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:29:40.298 00:05:02.888 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:33:46.350 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41314 9 6412 1 2025-10-12 16:30:20.602 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2584 1 2025-10-12 16:31:42.599 00:05:00.587 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:35:47.158 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39072 10 6452 1 2025-10-12 16:36:35.254 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:36:35.337 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:36:47.571 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47730 10 6452 1 2025-10-12 16:33:41.311 00:05:01.916 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:33:42.579 00:05:00.668 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:37:58.346 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50432 1 40 1 2025-10-12 16:38:48.386 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44960 10 6452 1 2025-10-12 16:35:40.301 00:05:02.886 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:35:40.279 00:05:02.926 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:35:40.608 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2648 1 2025-10-12 16:39:59.125 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 1 40 1 2025-10-12 16:40:59.523 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39278 1 40 1 2025-10-12 16:41:35.338 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:41:35.355 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:37:42.598 00:05:00.588 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:41:49.562 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46472 10 6452 1 2025-10-12 16:42:49.923 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41820 12 6556 1 2025-10-12 16:39:41.312 00:05:01.918 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:39:42.580 00:05:00.670 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:43:50.328 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60966 9 6412 1 2025-10-12 16:44:50.727 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-10-12 16:41:00.613 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2568 1 2025-10-12 16:41:40.305 00:05:02.884 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:41:40.285 00:05:02.925 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:45:51.122 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56978 9 6412 1 2025-10-12 16:46:35.290 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:46:35.398 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:43:42.609 00:05:00.580 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:48:52.340 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45260 9 6412 1 2025-10-12 16:45:41.312 00:05:01.924 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:45:42.589 00:05:00.667 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:50:03.080 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 1 40 1 2025-10-12 16:46:20.621 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2684 1 2025-10-12 16:50:53.138 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51730 9 6412 1 2025-10-12 16:51:35.470 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:51:35.543 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:47:40.285 00:05:02.925 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:47:40.307 00:05:02.884 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:52:53.943 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45534 9 6412 1 2025-10-12 16:49:42.610 00:05:00.580 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-12 16:55:05.076 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 1 40 1 2025-10-12 16:51:41.316 00:05:01.915 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-12 16:51:42.590 00:05:00.661 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-12 16:51:40.631 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-10-12 16:55:55.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52088 9 6412 1 2025-10-12 16:56:35.650 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:56:35.799 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:53:40.309 00:05:02.884 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-12 16:53:40.289 00:05:02.924 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-12 16:58:07.225 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 1 40 1 Summary: total flows: 128, total bytes: 258128, total packets: 1361, avg bps: 546, avg pps: 0, avg bpp: 189 Time window: 2025-10-12 15:55:42 - 2025-10-12 16:58:43 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0052s User: 0.0010s Wall: 0.0025s flows/second: 51866.6 Runtime: 0.0025s