Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 08:59:27.651 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46022 1 40 1 2025-10-26 08:55:49.437 00:05:00.899 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:00:17.689 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53304 9 6621 1 2025-10-26 09:01:18.125 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51194 10 6661 1 2025-10-26 08:57:28.325 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2604 1 2025-10-26 08:57:47.073 00:05:03.263 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 08:57:47.613 00:05:02.764 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:02:28.846 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39180 1 40 1 2025-10-26 08:58:47.054 00:05:03.304 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:03:12.334 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:03:12.210 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:03:18.883 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57178 9 6621 1 2025-10-26 08:59:49.415 00:05:00.981 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:05:19.658 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45244 10 6661 1 2025-10-26 09:01:49.435 00:05:00.903 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:02:48.336 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-26 09:07:30.802 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45206 1 40 1 2025-10-26 09:03:47.073 00:05:03.264 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:03:47.614 00:05:02.765 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:08:10.861 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:08:10.989 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:04:47.054 00:05:03.304 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:09:21.648 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:47824 9 6621 1 2025-10-26 09:05:49.415 00:05:00.983 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:10:22.024 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50502 10 6661 1 2025-10-26 09:07:49.440 00:05:00.900 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:08:08.341 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-26 09:12:22.842 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52288 10 6661 1 2025-10-26 09:13:10.974 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:13:11.125 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:13:23.246 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58478 10 6661 1 2025-10-26 09:09:47.615 00:05:02.764 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:09:47.083 00:05:03.257 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:14:34.022 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39580 1 40 1 2025-10-26 09:10:47.060 00:05:03.299 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:15:24.055 00:00:14.819 TCP 1.101.0.1:3000 -> 23.104.0.1:45460 10 6661 1 2025-10-26 09:11:49.419 00:05:00.983 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:13:28.345 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2632 1 2025-10-26 09:17:39.660 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51816 1 40 1 2025-10-26 09:13:49.438 00:05:00.902 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:18:10.937 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:18:11.181 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:15:47.620 00:05:02.763 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:15:47.082 00:05:03.259 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:16:47.062 00:05:03.299 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:21:30.944 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53422 10 6661 1 2025-10-26 09:17:49.420 00:05:00.982 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:22:31.352 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 9 6621 1 2025-10-26 09:18:48.350 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-10-26 09:23:11.189 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:23:11.452 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:19:49.443 00:05:00.900 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:24:42.489 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 1 40 1 2025-10-26 09:21:47.620 00:05:02.762 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:25:42.898 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56026 1 40 1 2025-10-26 09:21:47.083 00:05:03.259 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:22:47.065 00:05:03.299 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:23:49.422 00:05:00.981 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:28:11.298 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:28:11.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:24:08.363 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-26 09:28:33.734 00:00:10.663 TCP 1.101.0.1:3000 -> 23.104.0.1:44706 10 6661 1 2025-10-26 09:25:49.444 00:05:00.899 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:30:34.835 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34732 10 6661 1 2025-10-26 09:31:35.236 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:56708 12 10375 1 2025-10-26 09:27:47.086 00:05:03.260 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:27:47.623 00:05:02.762 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:32:35.721 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37474 9 6412 1 2025-10-26 09:28:47.067 00:05:03.305 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:33:12.252 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:33:11.564 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:29:28.372 00:05:10.044 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2724 1 2025-10-26 09:33:36.134 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55424 10 6452 1 2025-10-26 09:29:49.427 00:05:00.978 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:34:36.520 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41310 9 6412 1 2025-10-26 09:35:47.298 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37062 1 40 1 2025-10-26 09:31:49.449 00:05:00.897 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:36:37.336 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60772 9 6412 1 2025-10-26 09:37:37.739 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34988 9 6412 1 2025-10-26 09:33:47.086 00:05:03.261 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:33:47.624 00:05:02.763 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:38:11.528 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:38:11.233 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:38:38.154 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47316 10 6452 1 2025-10-26 09:34:47.067 00:05:03.301 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:34:48.374 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-26 09:35:49.428 00:05:00.980 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:39:38.517 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:56798 9 6412 1 2025-10-26 09:40:38.914 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:54242 10 6452 1 2025-10-26 09:37:49.448 00:05:00.899 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:42:50.084 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45346 1 40 1 2025-10-26 09:43:11.508 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:43:11.688 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:43:50.494 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40552 1 40 1 2025-10-26 09:39:47.090 00:05:03.258 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:39:47.631 00:05:02.758 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:40:08.385 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-10-26 09:40:47.069 00:05:03.300 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:44:40.531 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59466 9 6412 1 2025-10-26 09:41:49.429 00:05:00.979 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:46:41.361 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53280 10 6452 1 2025-10-26 09:43:49.451 00:05:00.899 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:48:11.774 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:48:11.764 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:48:42.132 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 10 6452 1 2025-10-26 09:45:28.392 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2584 1 2025-10-26 09:45:47.091 00:05:03.259 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:45:47.636 00:05:02.754 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:49:52.896 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50684 1 40 1 2025-10-26 09:46:47.070 00:05:03.299 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:50:42.934 00:00:10.513 TCP 1.101.0.1:3000 -> 23.104.0.1:37764 13 14467 1 2025-10-26 09:47:49.434 00:05:00.976 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:51:43.481 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45944 10 6661 1 2025-10-26 09:52:43.843 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59490 9 6621 1 2025-10-26 09:53:11.700 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:53:11.801 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 09:49:49.454 00:05:00.896 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 09:53:54.582 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55962 1 40 1 2025-10-26 09:54:44.621 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49594 9 6621 1 2025-10-26 09:50:48.398 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-26 09:51:47.090 00:05:03.259 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 09:55:45.035 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40742 10 6661 1 2025-10-26 09:51:47.636 00:05:02.754 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 09:52:47.073 00:05:03.299 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 09:56:45.435 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60606 10 6661 1 2025-10-26 09:53:49.435 00:05:00.976 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 09:57:45.837 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49418 10 6661 1 2025-10-26 09:58:11.995 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 09:58:11.951 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 129, total bytes: 293377, total packets: 1395, avg bps: 620, avg pps: 0, avg bpp: 210 Time window: 2025-10-26 08:55:49 - 2025-10-26 09:58:50 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0043s User: 0.0007s Wall: 0.0023s flows/second: 57032.3 Runtime: 0.0023s