Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 06:59:09.290 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38822 10 6452 1 2025-10-16 06:54:44.337 00:06:00.660 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-16 07:00:09.698 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37636 10 6452 1 2025-10-16 06:56:44.316 00:05:00.748 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:01:20.499 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59060 1 40 1 2025-10-16 06:57:42.939 00:05:02.106 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:03:19.311 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:03:19.221 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 06:59:17.829 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2624 1 2025-10-16 06:59:42.000 00:05:03.006 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 06:59:41.980 00:05:03.047 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:05:11.775 00:00:10.571 TCP 1.101.0.1:3000 -> 23.104.0.1:54610 10 6452 1 2025-10-16 07:01:44.339 00:05:00.666 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:06:12.380 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58946 10 6452 1 2025-10-16 07:02:44.318 00:05:00.748 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:03:42.940 00:05:02.105 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:08:19.488 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:08:19.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:08:23.519 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54724 1 40 1 2025-10-16 07:04:37.835 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-16 07:05:41.981 00:05:03.045 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:05:42.001 00:05:03.004 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:11:24.659 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43748 1 40 1 2025-10-16 07:07:44.342 00:05:00.665 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:12:25.068 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41952 1 40 1 2025-10-16 07:08:44.321 00:05:00.746 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:13:19.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:13:19.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:09:42.941 00:05:02.105 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:09:57.840 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2552 1 2025-10-16 07:11:41.981 00:05:03.046 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:11:42.002 00:05:03.005 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:16:27.115 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48536 1 40 1 2025-10-16 07:17:27.515 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34432 1 40 1 2025-10-16 07:13:44.342 00:05:00.666 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:18:19.537 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:18:19.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:14:44.322 00:05:00.745 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:19:18.589 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48670 10 6452 1 2025-10-16 07:15:17.847 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2744 1 2025-10-16 07:15:42.942 00:05:02.105 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:20:18.990 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47632 9 6412 1 2025-10-16 07:17:42.004 00:05:03.021 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:17:41.984 00:05:03.062 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:22:19.820 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56068 9 6412 1 2025-10-16 07:23:19.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:23:19.722 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:19:44.343 00:05:00.668 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:20:44.322 00:05:00.747 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:20:37.854 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-10-16 07:25:21.000 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53554 9 6412 1 2025-10-16 07:21:42.944 00:05:02.107 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:27:32.171 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44334 1 40 1 2025-10-16 07:23:41.986 00:05:03.044 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:23:42.006 00:05:03.004 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:28:20.177 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:28:20.177 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:28:22.207 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41820 10 6452 1 2025-10-16 07:25:44.342 00:05:00.669 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:25:57.861 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2732 1 2025-10-16 07:30:23.038 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 10 6452 1 2025-10-16 07:26:44.324 00:05:00.748 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:31:33.734 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40730 1 40 1 2025-10-16 07:27:42.950 00:05:02.101 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:32:23.770 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38444 10 6452 1 2025-10-16 07:33:20.091 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:33:19.815 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:29:41.987 00:05:03.044 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:29:42.009 00:05:03.003 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:34:24.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44242 9 6412 1 2025-10-16 07:31:17.871 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-16 07:35:35.359 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51076 1 40 1 2025-10-16 07:31:44.346 00:05:00.668 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:32:44.325 00:05:00.749 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:37:25.801 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40000 10 6452 1 2025-10-16 07:33:42.956 00:05:02.103 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:38:19.903 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:38:20.068 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:38:26.209 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59298 9 6412 1 2025-10-16 07:35:42.010 00:05:03.007 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:35:41.989 00:05:03.048 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:40:37.293 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33962 1 40 1 2025-10-16 07:36:37.878 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-16 07:41:27.339 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 12 10375 1 2025-10-16 07:37:44.345 00:05:00.672 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:42:27.824 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56998 10 6452 1 2025-10-16 07:38:44.327 00:05:00.754 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:43:20.192 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:43:20.438 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:39:42.956 00:05:02.100 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:45:29.042 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55422 10 6452 1 2025-10-16 07:41:41.991 00:05:03.046 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:41:42.012 00:05:03.005 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:41:57.887 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-10-16 07:47:40.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58850 1 40 1 2025-10-16 07:43:44.346 00:05:00.672 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:48:20.236 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:48:20.189 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:48:40.571 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49002 1 40 1 2025-10-16 07:44:44.328 00:05:00.751 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:49:30.611 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53826 9 6412 1 2025-10-16 07:45:42.958 00:05:02.100 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:50:31.015 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53588 10 6452 1 2025-10-16 07:47:17.889 00:05:10.116 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2688 1 2025-10-16 07:47:41.992 00:05:03.046 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:51:31.375 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55084 10 6452 1 2025-10-16 07:47:42.012 00:05:03.006 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:53:20.303 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:53:20.140 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:53:32.216 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36844 9 6412 1 2025-10-16 07:49:44.348 00:05:00.670 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 07:50:44.330 00:05:00.750 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 07:55:33.036 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56842 10 6452 1 2025-10-16 07:51:42.959 00:05:02.120 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 07:52:37.895 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2652 1 2025-10-16 07:53:41.994 00:05:03.075 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 07:57:44.210 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57172 1 40 1 2025-10-16 07:53:42.014 00:05:03.035 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 07:58:20.385 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 07:58:20.213 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 07:58:34.245 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50152 10 6452 1 Summary: total flows: 121, total bytes: 223862, total packets: 1312, avg bps: 466, avg pps: 0, avg bpp: 170 Time window: 2025-10-16 06:54:44 - 2025-10-16 07:58:45 Total flows processed: 121, passed: 121, Blocks skipped: 0, Bytes read: 12648 Sys: 0.0038s User: 0.0019s Wall: 0.0021s flows/second: 57757.0 Runtime: 0.0021s