Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 00:59:01.506 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53122 10 6452 1 2025-10-20 01:00:07.779 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:00:07.702 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:00:01.861 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-10-20 01:01:12.661 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45306 1 40 1 2025-10-20 00:57:44.784 00:05:02.222 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:02:02.705 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 9 6412 1 2025-10-20 00:58:15.345 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2564 1 2025-10-20 01:03:03.088 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34860 10 6452 1 2025-10-20 00:59:43.943 00:05:03.044 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 00:58:46.966 00:05:56.999 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 00:58:46.143 00:06:00.825 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-20 01:04:03.490 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34598 10 6452 1 2025-10-20 01:00:46.123 00:05:00.905 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:05:08.531 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:05:08.467 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:05:03.888 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53744 10 6452 1 2025-10-20 01:06:04.301 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37254 9 6412 1 2025-10-20 01:07:04.704 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51480 10 6452 1 2025-10-20 01:03:35.351 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-20 01:03:44.785 00:05:02.224 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:08:05.133 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36484 9 6412 1 2025-10-20 01:09:05.495 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47922 10 6452 1 2025-10-20 01:04:46.967 00:05:57.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:05:43.945 00:05:03.044 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:10:07.739 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:10:07.738 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:10:05.900 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:37808 11 6516 1 2025-10-20 01:05:46.148 00:06:00.821 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-20 01:06:46.127 00:05:00.902 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:11:16.707 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 1 40 1 2025-10-20 01:08:55.359 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-20 01:13:07.157 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:43000 11 6504 1 2025-10-20 01:09:44.790 00:05:02.220 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:14:17.979 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39342 1 40 1 2025-10-20 01:15:07.575 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:15:07.915 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:10:46.969 00:05:56.998 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:11:43.947 00:05:03.044 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:16:18.781 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32882 1 40 1 2025-10-20 01:12:46.129 00:05:00.901 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:17:08.821 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55290 10 6452 1 2025-10-20 01:12:46.149 00:06:00.821 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-20 01:18:09.233 00:00:10.795 TCP 1.101.0.1:3000 -> 23.104.0.1:57554 11 10335 1 2025-10-20 01:14:15.368 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2664 1 2025-10-20 01:19:20.451 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33064 1 40 1 2025-10-20 01:15:44.791 00:05:02.220 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:20:08.219 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:20:07.993 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:20:10.493 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:53328 9 6412 1 2025-10-20 01:21:10.878 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58188 9 6412 1 2025-10-20 01:16:46.971 00:05:57.000 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:17:43.947 00:05:03.043 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:22:11.297 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56786 9 6412 1 2025-10-20 01:18:46.131 00:05:00.901 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:23:11.708 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 9 6412 1 2025-10-20 01:19:35.378 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2632 1 2025-10-20 01:19:46.151 00:06:00.821 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-20 01:25:07.875 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:25:08.087 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:25:22.839 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52732 1 40 1 2025-10-20 01:21:44.795 00:05:02.219 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:27:13.287 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6452 1 2025-10-20 01:22:46.970 00:05:57.002 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:23:43.949 00:05:03.043 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:28:13.651 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57534 10 6452 1 2025-10-20 01:24:46.132 00:05:00.901 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:24:55.389 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2644 1 2025-10-20 01:29:14.050 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 9 6412 1 2025-10-20 01:30:08.139 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:30:08.398 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:30:14.412 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39210 10 6452 1 2025-10-20 01:31:25.183 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 1 40 1 2025-10-20 01:27:44.794 00:05:02.221 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:26:46.152 00:06:00.821 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-20 01:32:15.236 00:00:10.573 TCP 1.101.0.1:3000 -> 23.104.0.1:35738 9 6412 1 2025-10-20 01:33:15.845 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33456 9 6412 1 2025-10-20 01:28:46.973 00:05:57.003 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:29:43.952 00:05:03.042 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:30:15.398 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-20 01:34:16.253 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37258 10 6452 1 2025-10-20 01:30:46.133 00:05:00.902 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:35:08.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:35:08.263 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:35:16.674 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42862 9 6412 1 2025-10-20 01:37:17.494 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49786 9 6412 1 2025-10-20 01:33:44.795 00:05:02.220 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:38:17.859 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 10 6452 1 2025-10-20 01:33:46.153 00:06:00.821 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-20 01:35:26.049 00:05:09.364 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2380 1 2025-10-20 01:34:46.973 00:05:57.004 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:35:43.957 00:05:03.039 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:40:08.309 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:40:08.374 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:40:18.629 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34752 10 6452 1 2025-10-20 01:36:46.134 00:05:00.902 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:41:19.043 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34202 10 6452 1 2025-10-20 01:42:19.458 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:35948 9 6412 1 2025-10-20 01:43:19.834 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39502 10 6452 1 2025-10-20 01:39:44.796 00:05:02.221 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:40:45.413 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-10-20 01:45:08.360 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:45:08.521 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:45:20.630 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:49454 10 6452 1 2025-10-20 01:40:46.975 00:05:57.005 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:40:46.155 00:06:00.822 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-20 01:41:43.958 00:05:03.038 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:46:31.400 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39140 1 40 1 2025-10-20 01:42:46.135 00:05:00.904 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:47:21.441 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:32988 9 6412 1 2025-10-20 01:48:21.803 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49542 9 6412 1 2025-10-20 01:49:22.176 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44554 10 6452 1 2025-10-20 01:45:44.796 00:05:02.225 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:50:08.522 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:50:08.600 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:46:05.419 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 43 3120 1 2025-10-20 01:51:22.989 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6452 1 2025-10-20 01:46:46.976 00:05:57.003 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:47:43.961 00:05:03.041 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:52:23.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 10 6452 1 2025-10-20 01:47:46.157 00:06:00.824 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-20 01:48:46.136 00:05:00.906 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-20 01:53:34.102 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 1 40 1 2025-10-20 01:54:24.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49764 9 6412 1 2025-10-20 01:55:08.745 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:55:08.744 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:51:25.431 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-20 01:55:24.546 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41074 9 6412 1 2025-10-20 01:51:44.799 00:05:02.228 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-20 01:56:24.949 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47928 9 6412 1 2025-10-20 01:52:46.980 00:05:57.002 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-20 01:53:43.961 00:05:03.043 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-20 01:54:46.136 00:05:00.907 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 Summary: total flows: 133, total bytes: 338575, total packets: 1466, avg bps: 727, avg pps: 0, avg bpp: 230 Time window: 2025-10-20 00:57:44 - 2025-10-20 01:59:47 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0040s User: 0.0010s Wall: 0.0015s flows/second: 89512.6 Runtime: 0.0015s