Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 16:59:21.387 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43218 10 6452 1 2025-10-19 16:59:57.893 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:59:57.988 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:00:21.799 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:58618 9 6412 1 2025-10-19 17:01:22.294 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32996 9 6412 1 2025-10-19 16:57:44.663 00:05:02.181 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:02:33.020 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 1 40 1 2025-10-19 16:59:14.583 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-19 17:03:33.504 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46242 1 40 1 2025-10-19 16:58:46.803 00:05:57.047 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 16:59:43.828 00:05:02.996 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:00:45.948 00:05:00.917 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:00:45.968 00:05:00.837 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:04:58.121 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:04:57.818 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:05:23.960 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:56792 9 6412 1 2025-10-19 17:06:24.339 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34216 10 6452 1 2025-10-19 17:07:24.703 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 9 6412 1 2025-10-19 17:03:44.666 00:05:02.180 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:08:35.505 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60110 1 40 1 2025-10-19 17:04:34.587 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-19 17:04:46.805 00:05:57.046 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:05:43.830 00:05:02.995 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:09:58.132 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:09:58.223 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:10:25.947 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 10 6452 1 2025-10-19 17:06:45.968 00:05:00.837 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:06:45.948 00:05:00.917 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:11:26.369 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59520 9 6412 1 2025-10-19 17:12:26.735 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43870 9 6412 1 2025-10-19 17:13:27.138 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36196 9 6412 1 2025-10-19 17:09:44.667 00:05:02.181 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:09:54.593 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2872 1 2025-10-19 17:14:37.869 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 1 40 1 2025-10-19 17:14:58.006 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:14:58.383 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:15:27.910 00:00:10.717 TCP 1.101.0.1:3000 -> 23.104.0.1:51116 9 6412 1 2025-10-19 17:10:46.805 00:05:57.052 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:11:43.832 00:05:02.995 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:12:45.950 00:05:00.918 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:12:45.971 00:05:00.838 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:17:29.073 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39816 9 6412 1 2025-10-19 17:15:14.601 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-19 17:15:44.667 00:05:02.183 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:19:58.133 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:19:58.337 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:21:30.657 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56932 9 6412 1 2025-10-19 17:16:46.808 00:05:57.049 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:17:43.838 00:05:02.993 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:22:41.437 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45118 1 40 1 2025-10-19 17:18:45.972 00:05:00.841 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:18:45.952 00:05:00.921 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:23:31.476 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 9 6412 1 2025-10-19 17:24:42.216 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36202 1 40 1 2025-10-19 17:20:34.614 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2564 1 2025-10-19 17:24:58.699 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:24:58.745 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:25:32.252 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59970 10 6452 1 2025-10-19 17:21:44.668 00:05:02.183 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:26:32.654 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53576 10 6452 1 2025-10-19 17:27:33.056 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43826 10 6452 1 2025-10-19 17:22:46.810 00:05:57.048 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:23:43.837 00:05:02.994 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:28:33.464 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-10-19 17:24:45.972 00:05:00.839 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:24:45.952 00:05:00.919 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:29:33.905 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:42164 9 6412 1 2025-10-19 17:29:58.602 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:29:58.537 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:25:54.621 00:05:10.017 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-19 17:30:44.667 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37540 1 40 1 2025-10-19 17:31:34.705 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6452 1 2025-10-19 17:27:44.669 00:05:02.183 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:28:46.811 00:05:57.049 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:33:35.541 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43770 10 6452 1 2025-10-19 17:29:43.840 00:05:02.994 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:34:35.956 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52686 10 6452 1 2025-10-19 17:30:45.973 00:05:00.840 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:30:45.953 00:05:00.921 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:34:58.558 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:34:58.552 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:31:14.639 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-19 17:36:47.102 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56310 1 40 1 2025-10-19 17:33:44.669 00:05:02.190 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:37:48.074 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40640 1 40 1 2025-10-19 17:38:38.130 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:59640 11 10335 1 2025-10-19 17:34:46.813 00:05:57.048 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:39:48.981 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57764 1 40 1 2025-10-19 17:35:43.841 00:05:02.999 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:39:58.786 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:39:58.822 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:36:34.648 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-10-19 17:36:45.975 00:05:00.844 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:36:45.957 00:05:00.924 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:42:39.792 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37288 10 6452 1 2025-10-19 17:43:40.209 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40260 9 6412 1 2025-10-19 17:39:44.671 00:05:02.190 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:44:58.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:44:58.823 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:40:46.820 00:05:57.042 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:41:43.841 00:05:03.000 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:45:51.411 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60046 1 40 1 2025-10-19 17:41:54.656 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2936 1 2025-10-19 17:42:45.978 00:05:00.843 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:42:45.958 00:05:00.923 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:46:51.790 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48538 1 40 1 2025-10-19 17:48:42.233 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41590 9 6412 1 2025-10-19 17:45:44.670 00:05:02.191 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:49:42.638 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34808 9 6412 1 2025-10-19 17:49:58.890 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:49:58.981 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:50:43.036 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55912 10 6452 1 2025-10-19 17:47:14.668 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2644 1 2025-10-19 17:46:46.821 00:05:57.042 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:47:43.843 00:05:02.999 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:51:53.811 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 1 40 1 2025-10-19 17:48:45.961 00:05:00.921 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-19 17:48:45.980 00:05:00.842 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:52:43.848 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37474 9 6412 1 2025-10-19 17:53:44.252 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 9 6412 1 2025-10-19 17:54:55.021 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 1 40 1 2025-10-19 17:54:59.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 17:54:59.028 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 17:51:44.672 00:05:02.190 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-19 17:52:34.672 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-19 17:56:45.893 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41572 10 6452 1 2025-10-19 17:52:46.822 00:05:57.041 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-19 17:53:43.843 00:05:03.001 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-19 17:54:45.982 00:05:00.841 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-19 17:54:45.963 00:05:00.921 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 Summary: total flows: 130, total bytes: 274715, total packets: 1378, avg bps: 590, avg pps: 0, avg bpp: 199 Time window: 2025-10-19 16:57:44 - 2025-10-19 17:59:46 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0034s User: 0.0011s Wall: 0.0012s flows/second: 109688.1 Runtime: 0.0012s