Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 06:59:14.376 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56308 10 6452 1 2025-10-14 07:00:25.973 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59496 1 40 1 2025-10-14 06:56:43.757 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-14 07:01:16.018 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47298 10 6452 1 2025-10-14 06:57:41.983 00:05:02.021 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 06:57:43.335 00:05:00.688 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:02:21.562 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:02:21.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:02:16.415 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 9 6412 1 2025-10-14 06:59:41.003 00:05:02.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 06:59:40.983 00:05:03.001 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:04:27.589 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50830 1 40 1 2025-10-14 07:05:27.991 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38246 1 40 1 2025-10-14 07:00:43.356 00:06:00.608 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 07:02:03.762 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-14 07:07:21.732 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:07:21.803 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:07:18.425 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50270 9 6412 1 2025-10-14 07:03:41.984 00:05:02.021 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:03:43.336 00:05:00.690 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:08:18.822 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55198 10 6452 1 2025-10-14 07:09:19.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35158 9 6412 1 2025-10-14 07:05:40.983 00:05:03.001 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:05:41.004 00:05:02.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:10:30.004 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43976 1 40 1 2025-10-14 07:11:30.409 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34556 1 40 1 2025-10-14 07:07:23.769 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2768 1 2025-10-14 07:12:21.719 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:12:21.658 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:12:20.444 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54208 10 6452 1 2025-10-14 07:07:43.358 00:06:00.606 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 07:13:20.840 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48258 10 6452 1 2025-10-14 07:09:41.986 00:05:02.021 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:09:43.339 00:05:00.687 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:14:21.271 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42012 10 6452 1 2025-10-14 07:15:21.672 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42372 9 6412 1 2025-10-14 07:11:40.984 00:05:03.002 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:11:41.005 00:05:02.961 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:12:43.775 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2544 1 2025-10-14 07:17:21.703 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:17:21.519 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:14:43.359 00:06:00.607 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 07:15:41.988 00:05:02.021 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:15:43.341 00:05:00.687 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:20:23.728 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49550 10 6452 1 2025-10-14 07:21:24.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33388 10 6452 1 2025-10-14 07:17:41.006 00:05:02.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:17:40.986 00:05:03.003 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:18:03.783 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-10-14 07:22:21.969 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:22:22.010 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:23:24.913 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49536 9 6412 1 2025-10-14 07:24:25.285 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53406 10 6452 1 2025-10-14 07:25:25.703 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:41060 10 6452 1 2025-10-14 07:21:43.340 00:05:00.688 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:21:41.991 00:05:02.018 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:21:43.361 00:06:00.608 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 07:27:21.998 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:27:21.828 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:23:23.785 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2764 1 2025-10-14 07:27:26.537 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35872 9 6412 1 2025-10-14 07:23:41.009 00:05:02.959 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:23:40.987 00:05:03.000 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:30:27.896 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55014 10 6452 1 2025-10-14 07:27:41.992 00:05:02.018 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:27:43.346 00:05:00.683 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:32:22.194 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:32:21.992 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:32:28.701 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34100 9 6412 1 2025-10-14 07:28:43.787 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-10-14 07:29:41.025 00:05:02.944 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:28:43.365 00:06:00.604 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 07:29:41.004 00:05:02.984 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:34:39.855 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60524 1 40 1 2025-10-14 07:35:29.894 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51292 10 6452 1 2025-10-14 07:36:30.299 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52366 10 6452 1 2025-10-14 07:37:22.010 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:37:22.008 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:33:41.992 00:05:02.019 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:33:43.348 00:05:00.682 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:37:30.715 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:51898 10 6452 1 2025-10-14 07:34:03.795 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2656 1 2025-10-14 07:38:41.470 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60498 1 40 1 2025-10-14 07:35:41.025 00:05:02.946 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:39:31.507 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50304 9 6412 1 2025-10-14 07:35:41.005 00:05:02.985 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:40:31.910 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:44556 10 6452 1 2025-10-14 07:35:43.368 00:06:00.605 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 07:41:42.691 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38818 1 40 1 2025-10-14 07:42:22.170 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:42:22.174 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:42:32.730 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 10 6452 1 2025-10-14 07:39:23.806 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2688 1 2025-10-14 07:39:41.997 00:05:02.017 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:39:43.350 00:05:00.683 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:44:33.506 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58762 10 6452 1 2025-10-14 07:41:41.027 00:05:02.946 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:41:41.007 00:05:02.987 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:46:34.333 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56154 9 6412 1 2025-10-14 07:47:22.406 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:47:22.503 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:42:43.369 00:06:00.606 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 07:47:34.737 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39970 9 6412 1 2025-10-14 07:44:43.808 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-10-14 07:45:42.002 00:05:02.015 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:45:43.350 00:05:00.685 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:50:35.958 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:37794 10 6452 1 2025-10-14 07:47:41.008 00:05:02.987 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:47:41.028 00:05:02.947 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:52:22.470 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:52:22.371 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:52:36.791 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44292 9 6412 1 2025-10-14 07:53:37.203 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35160 9 6412 1 2025-10-14 07:50:03.819 00:05:10.001 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2908 1 2025-10-14 07:49:43.372 00:06:00.605 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-14 07:51:42.003 00:05:02.014 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-14 07:51:43.352 00:05:00.684 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-14 07:55:37.978 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50000 10 6452 1 2025-10-14 07:56:38.340 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41060 10 6452 1 2025-10-14 07:57:23.098 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:57:22.947 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:53:41.035 00:05:02.942 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-14 07:53:41.010 00:05:02.987 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-14 07:57:38.741 00:00:11.073 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 9 6412 1 2025-10-14 07:58:50.207 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 1 40 1 Summary: total flows: 125, total bytes: 283364, total packets: 1390, avg bps: 608, avg pps: 0, avg bpp: 203 Time window: 2025-10-14 06:56:43 - 2025-10-14 07:58:50 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0040s User: 0.0013s Wall: 0.0018s flows/second: 70383.7 Runtime: 0.0018s