Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 14:55:44.506 00:05:00.679 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:00:01.989 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:47144 9 6412 1 2025-10-16 14:56:44.486 00:05:00.760 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:01:13.071 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50432 1 40 1 2025-10-16 14:57:43.134 00:05:02.091 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:02:03.133 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50698 10 6452 1 2025-10-16 14:58:18.499 00:05:10.036 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-16 15:03:03.496 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49992 10 6452 1 2025-10-16 15:03:29.028 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:03:28.974 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 14:59:42.189 00:05:02.995 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 14:59:42.170 00:05:03.035 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:04:14.260 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 1 40 1 2025-10-16 15:01:44.508 00:05:00.678 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:06:15.080 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59650 1 40 1 2025-10-16 15:02:44.488 00:05:00.758 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:03:43.137 00:05:02.089 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:03:38.503 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2652 1 2025-10-16 15:08:05.491 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56218 9 6412 1 2025-10-16 15:08:29.202 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:08:29.239 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:09:05.890 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60982 10 6452 1 2025-10-16 15:05:42.190 00:05:02.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:05:42.170 00:05:03.035 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:10:06.300 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46388 9 6412 1 2025-10-16 15:11:17.022 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52082 1 40 1 2025-10-16 15:07:44.510 00:05:00.676 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:12:07.060 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53914 9 6412 1 2025-10-16 15:08:44.490 00:05:00.757 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:08:58.508 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-16 15:13:07.460 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40744 10 6452 1 2025-10-16 15:13:28.987 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:13:28.990 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:09:43.141 00:05:02.087 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:14:07.872 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-10-16 15:11:42.190 00:05:02.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:11:42.170 00:05:03.036 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:16:08.641 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-10-16 15:17:09.051 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35128 9 6412 1 2025-10-16 15:13:44.511 00:05:00.675 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:18:19.834 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49336 1 40 1 2025-10-16 15:18:29.269 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:14:18.514 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2512 1 2025-10-16 15:18:29.022 00:00:00.019 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:14:44.492 00:05:00.756 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:19:20.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36706 1 40 1 2025-10-16 15:15:43.141 00:05:02.087 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:20:10.309 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57956 10 6452 1 2025-10-16 15:21:10.718 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33132 9 6412 1 2025-10-16 15:17:42.191 00:05:02.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:17:42.171 00:05:03.036 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:23:29.244 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:23:29.329 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:19:38.517 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-10-16 15:19:44.512 00:05:00.676 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:20:44.492 00:05:00.756 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:25:23.250 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55640 1 40 1 2025-10-16 15:21:43.143 00:05:02.087 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:26:23.579 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 1 40 1 2025-10-16 15:23:42.193 00:05:02.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:23:42.173 00:05:03.036 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:28:29.346 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:28:29.475 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:24:58.531 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-10-16 15:25:44.512 00:05:00.677 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:30:25.168 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56290 1 40 1 2025-10-16 15:26:44.494 00:05:00.758 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:27:43.143 00:05:02.087 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:32:25.977 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53966 1 40 1 2025-10-16 15:33:26.385 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59370 1 40 1 2025-10-16 15:33:29.705 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:33:29.676 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:29:42.194 00:05:02.996 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:29:42.174 00:05:03.036 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:30:18.545 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2604 1 2025-10-16 15:31:44.514 00:05:00.677 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:36:17.194 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54864 9 6412 1 2025-10-16 15:32:44.494 00:05:00.757 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:33:43.144 00:05:02.087 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:38:29.586 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:38:29.724 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:39:18.375 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55326 10 6452 1 2025-10-16 15:35:42.177 00:05:03.034 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:35:42.197 00:05:02.994 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:35:38.553 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-10-16 15:41:19.191 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55998 9 6412 1 2025-10-16 15:37:44.515 00:05:00.677 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:42:30.051 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 1 40 1 2025-10-16 15:38:44.494 00:05:00.757 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:43:29.860 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:43:30.455 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58946 1 40 1 2025-10-16 15:43:29.579 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:39:43.151 00:05:02.081 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:44:20.499 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45648 9 6412 1 2025-10-16 15:40:58.565 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-16 15:45:20.903 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46796 9 6412 1 2025-10-16 15:41:42.180 00:05:03.033 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:41:42.198 00:05:02.993 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:46:31.682 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45386 1 40 1 2025-10-16 15:47:32.057 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41200 1 40 1 2025-10-16 15:43:44.516 00:05:00.675 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:48:29.951 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:48:29.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:48:22.123 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 9 6412 1 2025-10-16 15:44:44.498 00:05:00.755 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:45:43.155 00:05:02.078 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:46:18.568 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-10-16 15:50:22.955 00:00:10.618 TCP 1.101.0.1:3000 -> 23.104.0.1:50194 9 6412 1 2025-10-16 15:47:42.181 00:05:03.033 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:47:42.200 00:05:02.993 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:52:34.375 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34186 1 40 1 2025-10-16 15:53:29.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:53:29.900 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:53:34.781 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55118 1 40 1 2025-10-16 15:49:44.518 00:05:00.674 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-16 15:54:35.181 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44794 1 40 1 2025-10-16 15:50:44.498 00:05:00.755 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-16 15:55:40.511 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47684 1 40 1 2025-10-16 15:51:43.155 00:05:02.080 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-16 15:51:38.575 00:05:10.569 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2568 1 2025-10-16 15:53:42.200 00:05:02.995 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-16 15:53:42.179 00:05:03.036 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-16 15:58:29.934 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 15:58:29.825 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 15:58:31.386 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45878 10 6452 1 Summary: total flows: 125, total bytes: 206620, total packets: 1287, avg bps: 437, avg pps: 0, avg bpp: 160 Time window: 2025-10-16 14:55:44 - 2025-10-16 15:58:45 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0030s User: 0.0020s Wall: 0.0030s flows/second: 41091.6 Runtime: 0.0031s