Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 02:58:52.165 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60350 1 40 1 2025-10-27 02:59:42.213 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 10 6661 1 2025-10-27 02:55:49.797 00:05:00.923 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 02:56:50.756 00:05:57.270 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 02:57:47.435 00:05:03.287 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:02:54.406 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 1 40 1 2025-10-27 02:58:47.415 00:05:03.327 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:03:32.525 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:03:32.529 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 02:59:29.834 00:05:10.025 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-27 02:59:49.779 00:05:01.003 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:03:44.443 00:00:19.031 TCP 1.101.0.1:3000 -> 23.104.0.1:38154 9 6412 1 2025-10-27 03:01:49.798 00:05:00.923 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:06:04.302 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44970 1 40 1 2025-10-27 03:07:04.704 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38742 1 40 1 2025-10-27 03:02:50.761 00:05:57.286 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 03:03:47.436 00:05:03.286 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:08:05.071 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60392 1 40 1 2025-10-27 03:08:32.695 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:08:32.771 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:04:47.416 00:05:03.326 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:04:49.842 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2788 1 2025-10-27 03:08:55.140 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36744 10 6452 1 2025-10-27 03:05:49.781 00:05:01.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:10:55.953 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:35924 11 10329 1 2025-10-27 03:07:49.801 00:05:00.920 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:12:06.819 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36706 1 40 1 2025-10-27 03:13:32.745 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:13:32.691 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:08:50.762 00:05:57.301 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 03:09:47.436 00:05:03.286 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:14:07.586 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42226 1 40 1 2025-10-27 03:10:09.850 00:05:10.552 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2304 1 2025-10-27 03:10:47.417 00:05:03.326 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:15:07.987 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47018 1 40 1 2025-10-27 03:11:49.783 00:05:00.999 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:16:08.391 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60722 1 40 1 2025-10-27 03:16:58.428 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45320 10 6452 1 2025-10-27 03:13:49.805 00:05:00.918 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:17:58.830 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50620 10 6452 1 2025-10-27 03:18:32.736 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:18:32.794 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:15:29.856 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-27 03:14:50.762 00:05:57.306 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 03:15:47.438 00:05:03.289 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:16:47.418 00:05:03.329 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:21:00.040 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40924 10 6452 1 2025-10-27 03:17:49.786 00:05:01.002 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:23:00.807 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43030 9 6412 1 2025-10-27 03:23:32.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:23:32.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:19:49.807 00:05:00.921 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:24:01.213 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60610 9 6412 1 2025-10-27 03:20:49.862 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-10-27 03:25:01.612 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39326 10 6452 1 2025-10-27 03:20:50.768 00:06:00.001 TCP 23.154.0.1:179 -> 23.155.0.1:42089 13 790 1 2025-10-27 03:21:47.438 00:05:03.289 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:26:12.458 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60572 1 40 1 2025-10-27 03:22:47.418 00:05:03.330 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:27:02.501 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37276 10 6661 1 2025-10-27 03:23:49.791 00:05:00.999 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:28:02.910 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44982 10 6661 1 2025-10-27 03:28:33.055 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:28:33.027 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:29:03.326 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 9 6621 1 2025-10-27 03:25:49.810 00:05:00.919 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:30:14.107 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45394 1 40 1 2025-10-27 03:26:09.868 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-27 03:31:14.519 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45804 1 40 1 2025-10-27 03:27:47.441 00:05:03.288 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:27:48.073 00:05:02.697 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 03:28:47.422 00:05:03.328 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:33:15.306 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38726 1 40 1 2025-10-27 03:33:33.114 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:33:33.264 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:29:49.790 00:05:01.000 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:34:05.343 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45864 11 6725 1 2025-10-27 03:35:16.084 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41718 1 40 1 2025-10-27 03:31:29.875 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-27 03:31:49.818 00:05:00.913 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:36:16.525 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35888 1 40 1 2025-10-27 03:37:16.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60580 1 40 1 2025-10-27 03:33:48.073 00:05:02.698 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 03:33:47.442 00:05:03.289 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:38:06.969 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46586 10 6661 1 2025-10-27 03:38:33.196 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:38:33.288 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:34:47.422 00:05:03.329 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:35:49.794 00:05:00.997 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:40:11.132 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49388 9 6621 1 2025-10-27 03:36:49.882 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2564 1 2025-10-27 03:41:11.538 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:56158 11 10753 1 2025-10-27 03:37:49.814 00:05:00.917 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:42:12.016 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52050 9 6830 1 2025-10-27 03:43:22.781 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43770 1 40 1 2025-10-27 03:43:33.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:43:33.270 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:39:47.443 00:05:03.288 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:39:48.074 00:05:02.698 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 03:44:12.821 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35128 9 6830 1 2025-10-27 03:40:47.424 00:05:03.328 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:45:13.228 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49752 10 6870 1 2025-10-27 03:41:49.796 00:05:00.998 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:42:09.886 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-27 03:46:13.597 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 9 6830 1 2025-10-27 03:47:13.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46416 10 6870 1 2025-10-27 03:43:49.817 00:05:00.924 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:48:14.395 00:00:12.456 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 10 6870 1 2025-10-27 03:48:34.002 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:48:33.998 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:49:16.888 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41720 10 6870 1 2025-10-27 03:45:47.446 00:05:03.296 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:45:48.076 00:05:02.708 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 03:50:27.665 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53116 1 40 1 2025-10-27 03:46:47.427 00:05:03.335 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:47:29.889 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-10-27 03:47:49.803 00:05:01.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:52:18.135 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58692 9 6830 1 2025-10-27 03:53:18.538 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:40460 10 6870 1 2025-10-27 03:53:33.819 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:53:33.976 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 03:49:49.823 00:05:00.921 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-27 03:54:19.002 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:60810 9 6830 1 2025-10-27 03:55:29.739 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43234 1 40 1 2025-10-27 03:51:47.448 00:05:03.295 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-27 03:51:48.085 00:05:02.698 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-27 03:56:30.156 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53784 1 40 1 2025-10-27 03:52:47.434 00:05:03.329 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-27 03:52:49.898 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2504 1 2025-10-27 03:57:20.197 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56452 10 6870 1 2025-10-27 03:53:49.802 00:05:01.001 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-27 03:58:33.355 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 03:58:33.609 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 133, total bytes: 266351, total packets: 1364, avg bps: 563, avg pps: 0, avg bpp: 195 Time window: 2025-10-27 02:55:49 - 2025-10-27 03:58:50 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0046s User: 0.0000s Wall: 0.0015s flows/second: 86810.2 Runtime: 0.0015s