Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 17:58:59.895 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52530 1 40 1 2025-10-24 17:55:48.644 00:05:00.752 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 17:59:49.938 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51978 10 6452 1 2025-10-24 18:00:50.341 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:55130 10 6452 1 2025-10-24 17:57:46.855 00:05:02.581 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 17:57:46.297 00:05:03.099 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:01:50.716 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35082 9 6412 1 2025-10-24 18:02:23.975 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:02:23.907 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:58:46.277 00:05:03.140 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:02:51.078 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38726 10 6452 1 2025-10-24 17:59:05.137 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-24 18:00:48.626 00:05:00.830 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:01:48.647 00:05:00.750 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:06:52.694 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40286 10 6452 1 2025-10-24 18:07:24.093 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:07:23.793 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:03:46.857 00:05:02.584 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:03:46.298 00:05:03.104 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:08:03.384 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49706 1 40 1 2025-10-24 18:04:25.142 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-10-24 18:04:46.277 00:05:03.143 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:08:53.421 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40754 9 6412 1 2025-10-24 18:06:48.629 00:05:00.833 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:10:54.302 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58238 9 6412 1 2025-10-24 18:07:48.651 00:05:00.751 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:12:05.039 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36952 1 40 1 2025-10-24 18:12:24.292 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:12:24.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:09:46.859 00:05:02.584 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:09:46.297 00:05:03.104 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:09:45.150 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2304 1 2025-10-24 18:10:46.279 00:05:03.144 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:14:55.904 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39414 9 6412 1 2025-10-24 18:12:48.631 00:05:00.832 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:17:07.409 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33090 1 40 1 2025-10-24 18:17:24.244 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:17:24.189 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:13:48.651 00:05:00.751 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:17:57.452 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53266 9 6412 1 2025-10-24 18:19:08.205 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53590 1 40 1 2025-10-24 18:15:05.164 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2748 1 2025-10-24 18:15:46.859 00:05:02.583 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:15:46.299 00:05:03.103 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:19:58.243 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60652 9 6412 1 2025-10-24 18:16:46.282 00:05:03.142 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:20:58.648 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38222 9 6412 1 2025-10-24 18:21:59.048 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40644 9 6412 1 2025-10-24 18:22:24.091 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:22:24.169 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:18:48.635 00:05:00.830 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:22:59.453 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53012 9 6412 1 2025-10-24 18:19:48.655 00:05:00.750 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:20:25.167 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2588 1 2025-10-24 18:25:00.254 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36612 10 6452 1 2025-10-24 18:21:46.860 00:05:02.585 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:21:46.303 00:05:03.102 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:26:11.029 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51220 1 40 1 2025-10-24 18:22:46.284 00:05:03.142 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:27:11.413 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34022 1 40 1 2025-10-24 18:27:24.453 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:27:24.164 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:24:48.637 00:05:00.829 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:29:01.870 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38834 10 6452 1 2025-10-24 18:25:48.657 00:05:00.749 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:25:45.175 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-10-24 18:30:02.289 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34438 10 6452 1 2025-10-24 18:27:46.303 00:05:03.103 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:27:46.862 00:05:02.586 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:32:03.136 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35874 10 6452 1 2025-10-24 18:32:24.596 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:32:24.561 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:28:46.284 00:05:03.143 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:33:03.546 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41834 10 6452 1 2025-10-24 18:34:03.908 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:52104 9 6412 1 2025-10-24 18:30:48.640 00:05:00.828 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:35:04.334 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6452 1 2025-10-24 18:31:05.178 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2488 1 2025-10-24 18:31:48.660 00:05:00.747 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:37:05.162 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45874 9 6412 1 2025-10-24 18:37:24.571 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:37:24.569 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:33:46.863 00:05:02.585 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:33:46.307 00:05:03.101 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:38:05.528 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41464 10 6452 1 2025-10-24 18:34:46.287 00:05:03.142 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:36:25.184 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2440 1 2025-10-24 18:36:48.643 00:05:00.826 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:41:06.739 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35884 10 6452 1 2025-10-24 18:37:48.665 00:05:00.746 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:42:07.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48244 10 6452 1 2025-10-24 18:42:24.761 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:42:24.809 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:43:07.553 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52164 10 6452 1 2025-10-24 18:39:46.863 00:05:02.587 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:39:46.308 00:05:03.102 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:40:46.288 00:05:03.142 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:41:45.192 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2792 1 2025-10-24 18:42:48.644 00:05:00.830 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:47:24.676 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:47:24.883 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:43:48.666 00:05:00.751 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:48:09.619 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35066 10 6452 1 2025-10-24 18:49:10.024 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43122 10 6452 1 2025-10-24 18:45:46.307 00:05:03.108 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:45:46.865 00:05:02.590 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:50:20.785 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58332 1 40 1 2025-10-24 18:46:46.287 00:05:03.149 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:47:05.192 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-10-24 18:51:10.824 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52552 10 6452 1 2025-10-24 18:52:24.856 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:52:24.980 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:48:48.647 00:05:00.830 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-24 18:53:22.002 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35040 1 40 1 2025-10-24 18:49:48.669 00:05:00.748 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-24 18:54:12.045 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33058 10 6452 1 2025-10-24 18:55:12.448 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39628 9 6412 1 2025-10-24 18:51:46.308 00:05:03.110 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-24 18:51:46.871 00:05:02.587 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-24 18:56:12.854 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:39258 10 6452 1 2025-10-24 18:52:25.197 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2588 1 2025-10-24 18:52:46.287 00:05:03.150 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-24 18:57:25.212 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 18:57:25.210 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 18:54:48.651 00:05:00.826 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 Summary: total flows: 125, total bytes: 270724, total packets: 1376, avg bps: 563, avg pps: 0, avg bpp: 196 Time window: 2025-10-24 17:55:48 - 2025-10-24 18:59:49 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0041s User: 0.0008s Wall: 0.0021s flows/second: 60829.3 Runtime: 0.0021s