Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 17:00:35.381 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54916 1 40 1 2025-10-25 16:55:49.100 00:06:00.891 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-25 17:01:35.812 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59084 1 40 1 2025-10-25 16:57:47.304 00:05:02.666 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 16:57:46.723 00:05:03.207 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 16:58:36.961 00:05:00.191 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2252 1 2025-10-25 17:02:25.860 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37266 9 6412 1 2025-10-25 16:58:46.703 00:05:03.247 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:02:51.514 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:02:51.602 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:03:36.654 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58368 1 40 1 2025-10-25 16:58:49.122 00:06:00.809 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-25 17:04:26.697 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 10 6452 1 2025-10-25 17:05:27.055 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46070 10 6452 1 2025-10-25 17:07:27.856 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 9 6412 1 2025-10-25 17:03:46.724 00:05:03.206 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:03:47.307 00:05:02.665 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:02:49.103 00:06:00.889 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-25 17:07:51.746 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:07:51.802 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:03:46.979 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-10-25 17:08:38.621 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45512 1 40 1 2025-10-25 17:04:46.704 00:05:03.247 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:09:28.661 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43452 9 6412 1 2025-10-25 17:10:29.076 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33172 10 6452 1 2025-10-25 17:05:49.124 00:06:00.811 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-25 17:11:39.848 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45794 1 40 1 2025-10-25 17:12:51.898 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:12:51.828 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:09:06.990 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-10-25 17:13:30.297 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41640 10 6452 1 2025-10-25 17:09:46.730 00:05:03.202 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:09:47.306 00:05:02.666 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:14:30.702 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56144 10 6452 1 2025-10-25 17:09:49.106 00:06:00.890 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-25 17:10:46.711 00:05:03.244 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:15:31.062 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43376 10 6452 1 2025-10-25 17:17:42.248 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38262 1 40 1 2025-10-25 17:12:49.127 00:06:00.811 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-25 17:17:52.069 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:17:52.034 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:14:26.996 00:05:00.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2536 1 2025-10-25 17:18:32.288 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56174 9 6412 1 2025-10-25 17:19:32.690 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36172 9 6412 1 2025-10-25 17:15:47.308 00:05:02.670 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:15:46.733 00:05:03.204 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:20:43.488 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38272 1 40 1 2025-10-25 17:16:46.713 00:05:03.245 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:21:33.528 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:50136 10 6452 1 2025-10-25 17:16:49.108 00:06:00.891 TCP 23.156.0.1:36051 -> 23.155.0.1:179 14 861 1 2025-10-25 17:22:52.024 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:22:52.116 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:23:44.721 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44094 1 40 1 2025-10-25 17:19:37.003 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-25 17:24:34.758 00:00:11.173 TCP 1.101.0.1:3000 -> 23.104.0.1:54496 9 6412 1 2025-10-25 17:19:49.128 00:06:00.811 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-25 17:25:46.344 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40936 1 40 1 2025-10-25 17:21:46.735 00:05:03.206 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:21:47.310 00:05:02.671 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:22:46.715 00:05:03.245 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:23:49.110 00:05:00.891 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 17:27:36.780 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:36074 9 6412 1 2025-10-25 17:27:52.212 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:27:52.205 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:28:37.201 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39214 10 6452 1 2025-10-25 17:24:57.005 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-25 17:29:47.926 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58600 1 40 1 2025-10-25 17:30:37.963 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:60594 12 10375 1 2025-10-25 17:27:46.737 00:05:03.206 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:31:38.452 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39552 9 6412 1 2025-10-25 17:26:49.130 00:06:00.813 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-25 17:27:47.313 00:05:02.671 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:28:46.719 00:05:03.246 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:32:38.863 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:53856 9 6412 1 2025-10-25 17:32:52.154 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:32:52.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:33:49.651 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53990 1 40 1 2025-10-25 17:29:49.110 00:05:00.894 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 17:30:17.013 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2488 1 2025-10-25 17:34:39.690 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:32946 10 6452 1 2025-10-25 17:35:40.053 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48682 9 6412 1 2025-10-25 17:36:40.411 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42106 9 6412 1 2025-10-25 17:33:46.742 00:05:03.202 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:33:47.316 00:05:02.670 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:37:52.387 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:37:40.818 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:44526 9 6412 1 2025-10-25 17:37:52.265 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:34:46.724 00:05:03.242 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:33:49.132 00:06:00.815 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-25 17:38:41.205 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42238 9 6412 1 2025-10-25 17:35:49.111 00:05:00.896 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 17:35:37.017 00:05:10.036 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-10-25 17:39:41.610 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55576 9 6412 1 2025-10-25 17:40:52.385 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45440 1 40 1 2025-10-25 17:42:52.436 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:42:52.295 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:39:47.321 00:05:02.667 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:39:46.744 00:05:03.203 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:40:46.723 00:05:03.245 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:40:57.055 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-10-25 17:40:49.132 00:06:00.817 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-25 17:41:49.114 00:05:00.900 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 17:47:52.427 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:47:44.918 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60176 9 6412 1 2025-10-25 17:47:52.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:48:45.330 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43314 9 6412 1 2025-10-25 17:45:47.325 00:05:02.667 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:45:46.744 00:05:03.207 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:49:56.060 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59746 1 40 1 2025-10-25 17:46:17.047 00:05:10.016 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2604 1 2025-10-25 17:46:46.727 00:05:03.247 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:50:56.497 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39002 1 40 1 2025-10-25 17:47:49.114 00:05:00.900 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 17:51:46.535 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33292 9 6412 1 2025-10-25 17:47:49.134 00:06:00.821 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-25 17:52:52.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:52:52.727 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 17:53:47.320 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59744 10 6452 1 2025-10-25 17:51:47.325 00:05:02.672 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-25 17:51:46.749 00:05:03.209 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-25 17:51:37.065 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-25 17:52:46.729 00:05:03.250 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-25 17:56:52.599 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51796 9 6412 1 2025-10-25 17:53:49.122 00:05:00.918 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-25 17:57:52.808 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 17:57:52.671 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 126, total bytes: 261659, total packets: 1356, avg bps: 553, avg pps: 0, avg bpp: 192 Time window: 2025-10-25 16:55:49 - 2025-10-25 17:58:50 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0038s User: 0.0010s Wall: 0.0024s flows/second: 52632.4 Runtime: 0.0024s