Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 13:59:06.252 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 10 6452 1 2025-10-19 13:59:54.193 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 13:59:54.197 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:00:06.654 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 9 6412 1 2025-10-19 14:01:07.060 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45174 10 6452 1 2025-10-19 13:57:44.601 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 13:58:04.369 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2560 1 2025-10-19 14:02:17.822 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52260 1 40 1 2025-10-19 14:03:07.867 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:35644 11 10329 1 2025-10-19 13:58:46.752 00:05:57.043 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 13:59:43.769 00:05:03.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:04:08.332 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58590 12 6556 1 2025-10-19 14:00:45.891 00:05:00.862 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:00:45.871 00:05:00.942 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:04:54.388 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:04:54.453 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:05:19.102 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54040 1 40 1 2025-10-19 14:07:19.907 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48924 1 40 1 2025-10-19 14:03:24.374 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-10-19 14:03:44.603 00:05:02.190 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:08:09.947 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:58262 11 10329 1 2025-10-19 14:09:10.404 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:32916 9 6412 1 2025-10-19 14:04:46.753 00:05:57.038 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:05:43.771 00:05:03.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:09:54.502 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:09:54.502 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:10:10.819 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49358 10 6452 1 2025-10-19 14:06:45.872 00:05:00.944 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:06:45.893 00:05:00.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:11:11.223 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43828 9 6412 1 2025-10-19 14:12:21.966 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 1 40 1 2025-10-19 14:08:44.376 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-19 14:13:12.007 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50468 10 6452 1 2025-10-19 14:09:44.604 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:14:12.420 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44318 9 6412 1 2025-10-19 14:14:54.636 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:14:54.590 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:15:23.172 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43424 1 40 1 2025-10-19 14:10:46.756 00:05:57.043 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:11:43.772 00:05:03.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:16:13.210 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33444 10 6452 1 2025-10-19 14:12:45.893 00:05:00.862 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:12:45.873 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:14:04.379 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2368 1 2025-10-19 14:18:24.384 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48892 1 40 1 2025-10-19 14:19:14.419 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44384 9 6412 1 2025-10-19 14:15:44.612 00:05:02.186 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:19:55.233 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:19:55.230 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:20:25.186 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50592 1 40 1 2025-10-19 14:21:25.553 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35442 1 40 1 2025-10-19 14:16:46.755 00:05:57.040 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:17:43.774 00:05:03.003 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:22:15.592 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57478 9 6412 1 2025-10-19 14:18:45.882 00:05:00.935 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:18:45.904 00:05:00.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:23:26.354 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 1 40 1 2025-10-19 14:19:24.384 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2936 1 2025-10-19 14:24:16.397 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47162 10 6452 1 2025-10-19 14:24:54.644 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:24:54.766 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:25:27.127 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57814 1 40 1 2025-10-19 14:21:44.614 00:05:02.185 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:26:17.170 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59144 9 6412 1 2025-10-19 14:22:46.757 00:05:57.038 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:23:43.776 00:05:03.005 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:28:17.989 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38364 10 6452 1 2025-10-19 14:24:45.905 00:05:00.855 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:24:45.884 00:05:00.936 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:24:44.390 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-10-19 14:29:54.928 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:29:54.674 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:30:29.547 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51468 1 40 1 2025-10-19 14:31:19.574 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58260 10 6452 1 2025-10-19 14:27:44.614 00:05:02.186 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:32:19.981 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59664 10 6452 1 2025-10-19 14:33:20.336 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52458 9 6412 1 2025-10-19 14:28:46.759 00:05:57.048 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:29:43.776 00:05:03.004 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:30:04.403 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2580 1 2025-10-19 14:30:45.886 00:05:00.935 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:30:45.906 00:05:00.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:34:55.016 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:34:54.961 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:35:21.135 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48248 9 6412 1 2025-10-19 14:36:21.499 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44742 9 6412 1 2025-10-19 14:33:44.619 00:05:02.181 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:38:22.266 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 9 6412 1 2025-10-19 14:35:24.406 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-19 14:39:33.049 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54916 1 40 1 2025-10-19 14:34:46.760 00:05:57.050 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:35:43.790 00:05:02.996 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:39:55.020 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:39:55.015 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:40:23.115 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41458 10 6452 1 2025-10-19 14:36:45.912 00:05:00.853 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:36:45.892 00:05:00.933 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:42:23.927 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57966 9 6412 1 2025-10-19 14:43:24.335 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60422 10 6452 1 2025-10-19 14:39:44.619 00:05:02.188 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:44:55.275 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:40:44.414 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-19 14:44:55.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:45:25.156 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44204 9 6412 1 2025-10-19 14:40:46.766 00:05:57.046 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:41:43.791 00:05:02.995 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:46:25.568 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58116 10 6452 1 2025-10-19 14:42:45.896 00:05:00.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:42:45.916 00:05:00.850 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:47:36.334 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51566 1 40 1 2025-10-19 14:48:36.747 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34404 1 40 1 2025-10-19 14:49:26.784 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42294 10 6452 1 2025-10-19 14:45:44.621 00:05:02.187 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:49:55.281 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:49:55.219 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:46:04.419 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2648 1 2025-10-19 14:50:27.155 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47940 10 6452 1 2025-10-19 14:46:46.766 00:05:57.056 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:47:43.793 00:05:02.993 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:52:27.925 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:32826 10 6452 1 2025-10-19 14:48:45.918 00:05:00.850 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 14:48:45.898 00:05:00.930 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:53:38.656 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42074 1 40 1 2025-10-19 14:54:55.427 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:54:55.431 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:51:24.428 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2728 1 2025-10-19 14:51:44.624 00:05:02.184 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 14:52:46.766 00:05:57.047 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 14:53:43.793 00:05:02.997 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 14:58:30.290 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:57040 12 10375 1 2025-10-19 14:54:45.898 00:05:00.930 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 14:54:45.919 00:05:00.850 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 Summary: total flows: 132, total bytes: 289449, total packets: 1400, avg bps: 622, avg pps: 0, avg bpp: 206 Time window: 2025-10-19 13:57:44 - 2025-10-19 14:59:46 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0022s User: 0.0033s Wall: 0.0024s flows/second: 54434.0 Runtime: 0.0024s