Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 04:59:03.969 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36202 10 6452 1 2025-10-16 04:55:44.287 00:06:00.659 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 04:56:44.267 00:05:00.739 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:01:04.738 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:40066 10 6452 1 2025-10-16 04:57:07.654 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-10-16 04:57:42.899 00:05:02.086 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:02:05.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37634 10 6452 1 2025-10-16 05:03:05.533 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51288 9 6412 1 2025-10-16 05:03:16.861 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:03:16.749 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 04:59:41.944 00:05:03.022 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 04:59:41.964 00:05:02.982 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:04:16.224 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58764 1 40 1 2025-10-16 05:05:06.259 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51582 10 6452 1 2025-10-16 05:06:16.950 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35316 1 40 1 2025-10-16 05:02:27.659 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2768 1 2025-10-16 05:02:44.272 00:05:00.736 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:07:06.989 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34168 10 6452 1 2025-10-16 05:03:42.905 00:05:02.084 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:02:44.292 00:06:00.656 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 05:08:17.016 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:08:07.401 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55946 10 6452 1 2025-10-16 05:08:17.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:09:18.136 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52296 1 40 1 2025-10-16 05:05:41.945 00:05:03.023 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:05:41.965 00:05:02.983 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:11:08.577 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36866 9 6412 1 2025-10-16 05:07:47.667 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-16 05:12:08.980 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:39018 10 6452 1 2025-10-16 05:08:44.277 00:05:00.733 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:13:17.167 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:13:09.357 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6452 1 2025-10-16 05:13:17.093 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:09:42.905 00:05:02.084 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:14:20.084 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34592 1 40 1 2025-10-16 05:09:44.298 00:06:00.651 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 05:15:10.133 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38104 9 6412 1 2025-10-16 05:11:41.945 00:05:03.024 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:11:41.966 00:05:02.984 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:16:10.535 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:51024 11 6504 1 2025-10-16 05:13:07.676 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-16 05:17:21.364 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57916 1 40 1 2025-10-16 05:18:17.144 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:18:17.154 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:18:11.405 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-10-16 05:14:44.279 00:05:00.733 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:19:11.784 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55048 9 6412 1 2025-10-16 05:15:42.906 00:05:02.085 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:20:12.202 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39680 9 6412 1 2025-10-16 05:21:22.923 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45562 1 40 1 2025-10-16 05:17:41.947 00:05:03.024 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:17:41.967 00:05:02.985 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:16:44.300 00:06:00.652 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 05:18:27.678 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-10-16 05:23:17.246 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:23:17.324 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:23:13.386 00:00:12.225 TCP 1.101.0.1:3000 -> 23.104.0.1:54192 10 6452 1 2025-10-16 05:20:44.280 00:05:00.733 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:25:16.057 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58362 10 6452 1 2025-10-16 05:21:42.907 00:05:02.084 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:23:41.968 00:05:02.983 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:23:41.949 00:05:03.023 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:23:47.688 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2584 1 2025-10-16 05:28:17.290 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:28:17.452 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:23:44.301 00:06:00.652 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 05:29:17.710 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38256 10 6452 1 2025-10-16 05:30:28.498 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 1 40 1 2025-10-16 05:26:44.283 00:05:00.731 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:31:28.860 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 1 40 1 2025-10-16 05:27:42.911 00:05:02.084 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:32:29.233 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39274 1 40 1 2025-10-16 05:29:07.694 00:05:00.400 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2564 1 2025-10-16 05:33:17.564 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:33:17.558 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:33:19.282 00:00:10.603 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 9 6412 1 2025-10-16 05:29:41.970 00:05:02.986 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:29:41.951 00:05:03.026 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:34:19.923 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:37444 12 6556 1 2025-10-16 05:35:30.718 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52622 1 40 1 2025-10-16 05:30:44.307 00:06:00.650 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 05:32:44.289 00:05:00.730 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:37:21.161 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58506 9 6412 1 2025-10-16 05:33:42.911 00:05:02.086 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:38:17.369 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:38:17.645 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:34:17.704 00:05:10.020 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2540 1 2025-10-16 05:38:21.565 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50038 10 6452 1 2025-10-16 05:39:21.965 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38826 10 6452 1 2025-10-16 05:35:41.951 00:05:03.026 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:35:41.975 00:05:02.984 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:40:22.381 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57668 9 6412 1 2025-10-16 05:41:22.744 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33624 9 6412 1 2025-10-16 05:42:23.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49782 9 6412 1 2025-10-16 05:38:44.288 00:05:00.730 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:37:44.308 00:06:00.650 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 05:43:17.542 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:43:17.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:43:33.867 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53698 1 40 1 2025-10-16 05:39:42.915 00:05:02.083 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:39:37.725 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-16 05:44:23.908 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44166 11 6516 1 2025-10-16 05:45:24.330 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39848 10 6452 1 2025-10-16 05:41:41.972 00:05:02.985 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:41:41.952 00:05:03.026 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:48:18.425 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:48:18.574 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:48:25.487 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59998 9 6412 1 2025-10-16 05:44:44.293 00:05:00.727 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:44:57.731 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2776 1 2025-10-16 05:49:25.913 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42240 9 6412 1 2025-10-16 05:44:44.313 00:06:00.647 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 05:45:42.916 00:05:02.085 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:50:26.339 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56556 10 6452 1 2025-10-16 05:51:37.117 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33896 1 40 1 2025-10-16 05:47:41.952 00:05:03.028 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:47:41.972 00:05:02.988 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:52:37.521 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46250 1 40 1 2025-10-16 05:53:17.858 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:53:17.984 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 05:53:37.920 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47298 1 40 1 2025-10-16 05:50:17.736 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2520 1 2025-10-16 05:54:27.958 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39240 9 6412 1 2025-10-16 05:50:44.293 00:05:00.729 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 05:51:42.918 00:05:02.084 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 05:51:44.314 00:06:00.646 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 05:53:41.976 00:05:02.985 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 05:53:41.955 00:05:03.025 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 05:57:38.181 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41396 10 6452 1 2025-10-16 05:58:18.803 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 05:58:18.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 131, total bytes: 284637, total packets: 1411, avg bps: 602, avg pps: 0, avg bpp: 201 Time window: 2025-10-16 04:55:44 - 2025-10-16 05:58:44 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0025s User: 0.0017s Wall: 0.0015s flows/second: 85838.7 Runtime: 0.0015s