Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 10:58:48.842 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:38926 11 6504 1 2025-10-16 10:55:44.406 00:05:00.703 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 10:59:49.303 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55502 9 6412 1 2025-10-16 10:56:44.388 00:05:00.782 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 10:57:43.022 00:05:02.127 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:02:00.466 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45642 1 40 1 2025-10-16 10:58:38.208 00:05:10.015 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-10-16 11:02:50.499 00:00:11.793 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 10 6452 1 2025-10-16 11:03:24.093 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:03:24.098 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 10:59:42.097 00:05:03.012 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 10:59:42.077 00:05:03.052 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:03:52.328 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45576 10 6452 1 2025-10-16 11:04:52.695 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35794 10 6452 1 2025-10-16 11:01:44.412 00:05:00.704 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:05:53.124 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34496 10 6452 1 2025-10-16 11:02:44.394 00:05:00.784 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:06:53.527 00:00:10.706 TCP 1.101.0.1:3000 -> 23.104.0.1:45470 10 6452 1 2025-10-16 11:03:43.025 00:05:02.133 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:07:54.268 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56152 10 6452 1 2025-10-16 11:03:58.221 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2784 1 2025-10-16 11:08:24.180 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:08:24.176 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:08:54.671 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40400 10 6452 1 2025-10-16 11:05:42.079 00:05:03.059 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:05:42.099 00:05:03.018 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:10:05.440 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43276 1 40 1 2025-10-16 11:11:05.804 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51036 1 40 1 2025-10-16 11:07:44.421 00:05:00.696 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:08:44.395 00:05:00.782 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:12:56.238 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46520 10 6452 1 2025-10-16 11:13:24.441 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:13:24.520 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:09:18.226 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-10-16 11:09:43.025 00:05:02.132 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:14:06.967 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51126 1 40 1 2025-10-16 11:11:42.107 00:05:03.011 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:11:42.086 00:05:03.051 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:13:44.418 00:05:00.701 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:17:58.238 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39388 10 6452 1 2025-10-16 11:18:24.378 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:18:24.216 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:14:44.397 00:05:00.781 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:14:38.232 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2812 1 2025-10-16 11:18:58.649 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34796 10 6452 1 2025-10-16 11:15:43.027 00:05:02.131 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:19:59.090 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34340 9 6412 1 2025-10-16 11:20:59.496 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41740 10 6452 1 2025-10-16 11:17:42.107 00:05:03.013 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:17:42.087 00:05:03.053 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:22:10.267 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37862 1 40 1 2025-10-16 11:23:10.631 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48636 1 40 1 2025-10-16 11:23:24.579 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:23:24.464 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:19:44.418 00:05:00.703 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:19:58.234 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-10-16 11:24:00.666 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39052 9 6412 1 2025-10-16 11:20:44.400 00:05:00.782 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:25:11.394 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43128 1 40 1 2025-10-16 11:21:43.029 00:05:02.140 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:26:01.432 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48644 9 6412 1 2025-10-16 11:27:01.834 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:45990 10 6452 1 2025-10-16 11:23:42.108 00:05:03.013 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:23:42.090 00:05:03.052 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:28:02.285 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33274 9 6412 1 2025-10-16 11:28:24.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:28:24.417 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:29:02.683 00:00:10.841 TCP 1.101.0.1:3000 -> 23.104.0.1:52606 9 6412 1 2025-10-16 11:25:18.239 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-10-16 11:25:44.420 00:05:00.702 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:26:44.399 00:05:00.783 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:31:03.964 00:00:17.756 TCP 1.101.0.1:3000 -> 23.104.0.1:57970 9 6412 1 2025-10-16 11:27:43.057 00:05:02.110 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:32:11.783 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35950 9 6412 1 2025-10-16 11:33:24.748 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:33:12.191 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35480 9 6412 1 2025-10-16 11:33:24.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:29:42.091 00:05:03.053 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:29:42.111 00:05:03.013 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:34:12.594 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49804 10 6452 1 2025-10-16 11:30:38.244 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-10-16 11:35:23.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40004 1 40 1 2025-10-16 11:31:44.422 00:05:00.703 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:36:13.376 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36780 10 6452 1 2025-10-16 11:32:44.404 00:05:00.780 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:33:43.059 00:05:02.106 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:38:24.964 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:38:25.119 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:38:14.166 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37990 9 6412 1 2025-10-16 11:39:24.888 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38888 1 40 1 2025-10-16 11:35:42.093 00:05:03.052 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:35:42.112 00:05:03.012 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:35:58.250 00:05:00.965 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2516 1 2025-10-16 11:40:14.929 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46062 11 6516 1 2025-10-16 11:41:15.334 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:36496 10 6452 1 2025-10-16 11:37:44.427 00:05:00.697 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:42:15.903 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52278 10 6452 1 2025-10-16 11:38:44.408 00:05:00.777 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:43:24.894 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:43:24.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:43:26.671 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 1 40 1 2025-10-16 11:39:43.063 00:05:02.103 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:44:16.710 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59408 10 6452 1 2025-10-16 11:41:08.252 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-10-16 11:45:27.454 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59612 1 40 1 2025-10-16 11:41:42.095 00:05:03.051 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:41:42.114 00:05:03.012 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:46:17.495 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42146 9 6412 1 2025-10-16 11:47:28.286 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37884 1 40 1 2025-10-16 11:43:44.429 00:05:00.696 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:48:25.175 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:48:25.078 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:44:44.417 00:05:00.770 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:49:18.744 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39510 10 6452 1 2025-10-16 11:45:43.062 00:05:02.104 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:50:29.515 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58556 1 40 1 2025-10-16 11:46:28.254 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2604 1 2025-10-16 11:51:19.550 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44934 10 6452 1 2025-10-16 11:47:42.115 00:05:03.011 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:47:42.095 00:05:03.052 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:52:30.295 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43058 2 80 1 2025-10-16 11:53:25.145 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:53:25.146 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:53:20.336 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53122 10 6452 1 2025-10-16 11:49:44.432 00:05:00.695 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 11:54:31.095 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36780 1 40 1 2025-10-16 11:50:44.412 00:05:00.775 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 11:51:43.065 00:05:02.103 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 11:51:48.261 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-16 11:56:21.540 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50794 10 6452 1 2025-10-16 11:53:42.096 00:05:03.052 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 11:53:42.115 00:05:03.012 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 11:58:25.030 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:58:25.077 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 134, total bytes: 290620, total packets: 1416, avg bps: 614, avg pps: 0, avg bpp: 205 Time window: 2025-10-16 10:55:44 - 2025-10-16 11:58:45 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0036s User: 0.0012s Wall: 0.0042s flows/second: 31775.0 Runtime: 0.0042s