Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 20:58:58.323 00:00:10.799 TCP 1.101.0.1:3000 -> 23.104.0.1:40886 9 6412 1 2025-10-26 20:55:49.686 00:05:00.905 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 20:59:59.157 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38208 10 6452 1 2025-10-26 20:57:19.323 00:05:10.001 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2296 1 2025-10-26 20:57:47.881 00:05:02.752 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 20:57:47.299 00:05:03.291 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:02:00.051 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 9 6412 1 2025-10-26 20:58:47.279 00:05:03.332 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:03:00.451 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60880 9 6412 1 2025-10-26 21:03:24.951 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:03:25.095 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 20:59:49.666 00:05:00.987 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:04:00.816 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 10 6452 1 2025-10-26 21:05:01.225 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57292 9 6412 1 2025-10-26 21:01:49.687 00:05:00.906 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:06:01.638 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50250 9 6412 1 2025-10-26 21:02:39.323 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-26 21:07:02.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56686 10 6452 1 2025-10-26 21:03:47.881 00:05:02.754 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:03:47.306 00:05:03.289 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:08:25.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:08:25.434 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:04:47.281 00:05:03.334 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:05:49.668 00:05:00.987 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:10:03.240 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38230 10 6452 1 2025-10-26 21:07:49.688 00:05:00.908 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:07:59.332 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2856 1 2025-10-26 21:12:04.046 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54222 9 6412 1 2025-10-26 21:13:25.840 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:13:25.838 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:09:47.882 00:05:02.766 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:09:47.302 00:05:03.294 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:10:47.283 00:05:03.333 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:15:15.574 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57678 1 40 1 2025-10-26 21:11:49.669 00:05:00.987 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:16:05.611 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33130 9 6412 1 2025-10-26 21:17:05.977 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43424 10 6452 1 2025-10-26 21:13:19.341 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2380 1 2025-10-26 21:13:49.690 00:05:00.908 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:18:25.593 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:18:25.711 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:19:06.788 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 9 6412 1 2025-10-26 21:15:47.304 00:05:03.293 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:15:47.888 00:05:02.749 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:20:07.207 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55318 9 6412 1 2025-10-26 21:16:47.285 00:05:03.335 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:21:17.965 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60160 1 40 1 2025-10-26 21:17:49.671 00:05:00.989 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:22:08.006 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59050 11 6516 1 2025-10-26 21:18:39.346 00:05:10.073 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2560 1 2025-10-26 21:23:18.794 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48402 1 40 1 2025-10-26 21:23:25.574 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:23:25.635 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:19:49.691 00:05:00.909 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:24:19.168 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47242 1 40 1 2025-10-26 21:21:47.305 00:05:03.294 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:21:47.889 00:05:02.751 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:26:19.973 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39958 1 40 1 2025-10-26 21:22:47.285 00:05:03.335 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:23:49.670 00:05:00.990 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:23:59.355 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2628 1 2025-10-26 21:28:26.897 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:28:26.904 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:29:10.825 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46966 9 6412 1 2025-10-26 21:25:49.690 00:05:00.911 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:27:47.308 00:05:03.293 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:27:47.893 00:05:02.750 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:28:47.289 00:05:03.334 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:33:25.832 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:33:26.157 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:29:19.369 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-26 21:29:49.672 00:05:00.990 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:34:12.972 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46648 9 6412 1 2025-10-26 21:31:49.693 00:05:00.909 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:36:13.787 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50288 9 6412 1 2025-10-26 21:37:24.569 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38218 1 40 1 2025-10-26 21:33:47.309 00:05:03.293 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:33:47.894 00:05:02.749 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:38:14.607 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39124 9 6412 1 2025-10-26 21:38:26.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:38:26.003 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:34:47.290 00:05:03.333 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:34:39.374 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2648 1 2025-10-26 21:39:15.012 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44920 9 6412 1 2025-10-26 21:35:49.675 00:05:00.988 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:40:25.789 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 1 40 1 2025-10-26 21:37:49.694 00:05:00.908 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:42:16.235 00:00:10.506 TCP 1.101.0.1:3000 -> 23.104.0.1:34218 10 6452 1 2025-10-26 21:43:26.116 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:43:25.989 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:43:16.778 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57070 9 6412 1 2025-10-26 21:39:47.895 00:05:02.749 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:39:47.310 00:05:03.294 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:39:59.378 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-10-26 21:44:17.175 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37534 9 6412 1 2025-10-26 21:40:47.291 00:05:03.336 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:45:17.581 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40692 10 6452 1 2025-10-26 21:41:49.676 00:05:00.992 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:46:17.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54046 10 6452 1 2025-10-26 21:47:18.387 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56466 10 6452 1 2025-10-26 21:43:49.697 00:05:00.911 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:48:26.366 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:48:26.469 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:48:18.792 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57312 9 6412 1 2025-10-26 21:49:19.209 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51434 10 6452 1 2025-10-26 21:45:19.385 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-26 21:45:47.314 00:05:03.294 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:45:47.898 00:05:02.751 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:50:19.614 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54058 10 6452 1 2025-10-26 21:46:47.293 00:05:03.334 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:51:20.035 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 9 6412 1 2025-10-26 21:47:49.679 00:05:00.992 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:52:30.815 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34930 1 40 1 2025-10-26 21:53:26.448 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:53:26.669 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:53:20.853 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:50324 10 6452 1 2025-10-26 21:49:49.700 00:05:00.910 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-26 21:54:21.244 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47776 10 6452 1 2025-10-26 21:50:39.386 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-10-26 21:55:31.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58096 1 40 1 2025-10-26 21:51:47.896 00:05:02.755 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-26 21:51:47.318 00:05:03.294 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-26 21:56:21.968 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42450 10 6452 1 2025-10-26 21:52:47.295 00:05:03.336 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-26 21:57:32.745 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54300 1 40 1 2025-10-26 21:53:49.681 00:05:00.990 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-26 21:58:26.010 00:00:00.050 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 21:58:26.265 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 21:58:22.786 00:00:13.479 TCP 1.101.0.1:3000 -> 23.104.0.1:60724 10 6452 1 Summary: total flows: 129, total bytes: 290088, total packets: 1402, avg bps: 613, avg pps: 0, avg bpp: 206 Time window: 2025-10-26 20:55:49 - 2025-10-26 21:58:50 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0042s User: 0.0011s Wall: 0.0018s flows/second: 72675.0 Runtime: 0.0018s