Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 15:59:12.163 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39760 10 6452 1 2025-10-15 16:01:12.936 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50082 9 6412 1 2025-10-15 15:57:42.596 00:05:02.122 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 15:57:43.994 00:05:00.743 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-15 16:02:13.338 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47576 9 6412 1 2025-10-15 15:58:56.433 00:05:00.810 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2644 1 2025-10-15 16:03:00.989 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:03:01.211 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:03:24.071 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46398 1 40 1 2025-10-15 15:59:41.693 00:05:03.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 15:59:41.712 00:05:02.965 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 15:58:44.014 00:06:00.663 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-15 16:04:24.491 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44210 1 40 1 2025-10-15 16:05:24.893 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44836 1 40 1 2025-10-15 16:06:25.298 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 1 40 1 2025-10-15 16:07:15.334 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43902 10 6452 1 2025-10-15 16:03:42.599 00:05:02.119 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:03:43.997 00:05:00.741 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-15 16:08:01.279 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:08:01.281 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:04:06.437 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-15 16:08:26.071 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34766 1 40 1 2025-10-15 16:09:26.457 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46956 1 40 1 2025-10-15 16:05:41.694 00:05:03.006 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:05:41.716 00:05:02.966 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:10:16.500 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48106 9 6412 1 2025-10-15 16:05:44.018 00:06:00.662 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-15 16:12:17.286 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44642 10 6452 1 2025-10-15 16:13:01.469 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:13:01.406 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:13:17.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50008 10 6452 1 2025-10-15 16:09:26.441 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-15 16:09:42.603 00:05:02.117 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:09:43.997 00:05:00.743 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-15 16:14:18.052 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46746 10 6452 1 2025-10-15 16:15:18.452 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42596 10 6452 1 2025-10-15 16:11:41.715 00:05:02.966 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:11:41.695 00:05:03.006 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:17:29.656 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52374 1 40 1 2025-10-15 16:12:44.020 00:06:00.661 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-15 16:18:01.638 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:18:01.501 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:18:30.058 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55776 1 40 1 2025-10-15 16:14:46.449 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2732 1 2025-10-15 16:19:30.503 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40648 1 40 1 2025-10-15 16:15:42.610 00:05:02.115 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:20:31.532 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50900 1 40 1 2025-10-15 16:15:44.000 00:06:00.744 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-15 16:21:31.897 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52310 1 40 1 2025-10-15 16:17:41.697 00:05:03.006 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:17:41.717 00:05:02.966 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:23:01.589 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:23:01.658 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:23:22.336 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54660 9 6412 1 2025-10-15 16:20:06.461 00:05:10.020 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-15 16:19:44.021 00:06:00.664 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-15 16:25:23.625 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52890 9 6412 1 2025-10-15 16:21:42.610 00:05:02.115 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:26:23.988 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59728 9 6412 1 2025-10-15 16:27:24.426 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40876 10 6452 1 2025-10-15 16:23:41.719 00:05:02.966 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:22:44.001 00:06:00.743 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-15 16:23:41.696 00:05:03.008 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:28:01.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:28:01.716 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:28:35.118 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41202 1 40 1 2025-10-15 16:25:26.480 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2648 1 2025-10-15 16:30:25.530 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50196 9 6412 1 2025-10-15 16:31:25.955 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38130 10 6452 1 2025-10-15 16:26:44.021 00:06:00.663 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-15 16:27:42.611 00:05:02.114 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:32:26.369 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48902 10 6452 1 2025-10-15 16:33:02.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:33:02.257 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:29:41.697 00:05:03.009 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:33:37.138 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46444 1 40 1 2025-10-15 16:29:41.718 00:05:02.970 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:34:27.175 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44936 9 6412 1 2025-10-15 16:29:44.004 00:06:00.744 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-15 16:30:46.484 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-10-15 16:36:38.405 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35548 1 40 1 2025-10-15 16:37:28.442 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6452 1 2025-10-15 16:33:42.612 00:05:02.115 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:38:02.006 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:38:01.945 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:38:28.843 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55828 9 6412 1 2025-10-15 16:33:44.023 00:06:00.663 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-15 16:39:29.246 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:56458 9 6412 1 2025-10-15 16:35:41.702 00:05:03.006 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:35:41.720 00:05:02.966 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:36:06.489 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2568 1 2025-10-15 16:40:29.603 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36652 9 6412 1 2025-10-15 16:41:40.451 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47822 1 40 1 2025-10-15 16:36:44.004 00:06:00.744 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-15 16:42:30.487 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38530 10 6452 1 2025-10-15 16:43:01.997 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:43:01.912 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:39:42.615 00:05:02.115 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:44:47.043 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50052 1 40 1 2025-10-15 16:41:26.498 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-10-15 16:41:41.705 00:05:03.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:41:41.725 00:05:02.965 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:40:44.028 00:06:00.662 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-15 16:46:37.503 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33414 9 6412 1 2025-10-15 16:47:48.283 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46530 1 40 1 2025-10-15 16:48:01.910 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:48:02.128 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:43:44.008 00:06:00.742 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-15 16:48:38.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43220 10 6452 1 2025-10-15 16:45:42.617 00:05:02.113 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:49:38.730 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33410 10 6452 1 2025-10-15 16:46:46.502 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-15 16:47:41.727 00:05:02.963 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:47:41.708 00:05:03.003 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:51:39.541 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60346 10 6452 1 2025-10-15 16:47:44.033 00:06:00.658 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-15 16:53:02.394 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 16:53:02.097 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:53:50.691 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49558 1 40 1 2025-10-15 16:54:51.046 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32990 1 40 1 2025-10-15 16:51:42.620 00:05:02.112 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-15 16:50:44.009 00:06:00.743 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-15 16:55:51.454 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 1 40 1 2025-10-15 16:52:06.506 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2368 1 2025-10-15 16:56:41.491 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40104 10 6452 1 2025-10-15 16:53:41.727 00:05:02.965 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-15 16:53:41.708 00:05:03.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-15 16:57:52.252 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39238 1 40 1 2025-10-15 16:58:02.239 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 16:58:02.231 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 130, total bytes: 244896, total packets: 1341, avg bps: 534, avg pps: 0, avg bpp: 182 Time window: 2025-10-15 15:57:42 - 2025-10-15 16:58:44 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0022s User: 0.0015s Wall: 0.0015s flows/second: 86617.9 Runtime: 0.0015s