Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 18:59:06.051 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34970 1 40 1 2025-10-28 18:59:20.467 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:59:20.479 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:55:50.639 00:05:00.929 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:00:06.476 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58852 1 40 1 2025-10-28 18:56:13.281 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2648 1 2025-10-28 18:57:48.848 00:05:02.698 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 18:56:51.506 00:05:56.739 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 18:57:50.660 00:05:00.847 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:02:07.289 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 1 40 1 2025-10-28 18:57:51.526 00:05:56.701 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:02:57.328 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37820 10 6452 1 2025-10-28 19:03:57.706 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59722 10 6452 1 2025-10-28 19:04:20.903 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:04:20.616 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:04:58.127 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57334 9 6412 1 2025-10-28 19:01:33.291 00:05:10.018 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2484 1 2025-10-28 19:01:50.640 00:05:00.927 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:05:58.532 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:60108 9 6412 1 2025-10-28 19:02:51.506 00:05:56.741 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:03:48.848 00:05:02.698 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:03:50.661 00:05:00.846 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:07:59.310 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42350 9 6412 1 2025-10-28 19:03:51.527 00:05:56.701 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:08:59.712 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48410 9 6412 1 2025-10-28 19:09:20.988 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:09:20.983 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:10:00.128 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38094 9 6412 1 2025-10-28 19:06:53.309 00:05:10.069 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2604 1 2025-10-28 19:11:00.501 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56072 10 6452 1 2025-10-28 19:07:50.641 00:05:00.928 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:12:00.909 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58974 12 6556 1 2025-10-28 19:13:01.324 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50606 10 6452 1 2025-10-28 19:09:48.851 00:05:02.701 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:08:51.507 00:05:56.742 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:09:50.662 00:05:00.849 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:14:01.722 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37824 10 6452 1 2025-10-28 19:14:20.790 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:14:20.705 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:09:51.530 00:05:56.700 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:15:12.497 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35446 1 40 1 2025-10-28 19:16:02.536 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33764 10 6452 1 2025-10-28 19:12:13.317 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-28 19:13:50.644 00:05:00.935 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:18:03.375 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-10-28 19:19:03.783 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50006 10 6452 1 2025-10-28 19:19:21.583 00:00:00.055 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:19:22.062 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:14:51.512 00:05:56.739 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:15:48.851 00:05:02.702 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:15:50.665 00:05:00.848 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:15:51.530 00:05:56.699 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:17:33.321 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2568 1 2025-10-28 19:19:50.647 00:05:00.931 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:24:20.841 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:24:20.929 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:25:16.523 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35784 1 40 1 2025-10-28 19:20:51.513 00:05:56.738 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:21:48.853 00:05:02.704 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:21:50.666 00:05:00.850 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:26:16.930 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49578 1 40 1 2025-10-28 19:21:51.536 00:05:56.697 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:22:53.325 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-10-28 19:27:06.969 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 9 6412 1 2025-10-28 19:29:07.797 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45800 10 6452 1 2025-10-28 19:29:20.991 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:29:21.210 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:25:50.647 00:05:00.931 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:30:08.200 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-10-28 19:26:51.516 00:05:56.735 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:27:50.666 00:05:00.851 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:27:48.855 00:05:02.702 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:32:19.480 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60256 1 40 1 2025-10-28 19:28:13.328 00:05:10.857 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2664 1 2025-10-28 19:27:51.537 00:05:56.695 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:33:19.875 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53902 1 40 1 2025-10-28 19:34:21.208 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:34:21.270 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:35:10.328 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 9 6412 1 2025-10-28 19:31:50.647 00:05:00.931 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:36:21.064 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39958 1 40 1 2025-10-28 19:37:11.126 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-10-28 19:33:33.334 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-28 19:32:51.518 00:05:56.736 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:33:50.667 00:05:00.851 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:33:48.856 00:05:02.702 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:33:51.538 00:05:56.695 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:39:21.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:39:21.269 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:39:11.894 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56912 9 6412 1 2025-10-28 19:41:12.694 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 9 6412 1 2025-10-28 19:37:50.648 00:05:00.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:42:13.120 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56882 9 6412 1 2025-10-28 19:38:53.339 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2740 1 2025-10-28 19:43:13.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39090 10 6452 1 2025-10-28 19:39:48.857 00:05:02.705 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:38:51.518 00:05:56.736 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:39:50.668 00:05:00.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:44:21.366 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:44:21.432 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:39:51.539 00:05:56.696 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:45:24.704 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50572 1 40 1 2025-10-28 19:46:25.111 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50376 1 40 1 2025-10-28 19:47:15.151 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58576 10 6452 1 2025-10-28 19:43:50.649 00:05:00.935 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:44:13.342 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2584 1 2025-10-28 19:48:15.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49090 10 6452 1 2025-10-28 19:49:21.462 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:49:21.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:49:15.913 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59942 11 6516 1 2025-10-28 19:44:51.522 00:05:56.733 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:45:48.858 00:05:02.706 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:45:50.670 00:05:00.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:50:26.692 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43658 1 40 1 2025-10-28 19:45:51.544 00:05:56.693 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:52:17.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34428 10 6452 1 2025-10-28 19:53:17.537 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60526 9 6412 1 2025-10-28 19:49:33.347 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2368 1 2025-10-28 19:49:50.649 00:05:00.935 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 19:54:21.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:54:21.678 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:54:17.943 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:58302 9 6412 1 2025-10-28 19:55:28.735 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 1 40 1 2025-10-28 19:50:51.523 00:05:56.735 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 19:51:50.670 00:05:00.855 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 19:51:48.858 00:05:02.707 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 19:56:18.779 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:37694 10 6452 1 2025-10-28 19:51:51.545 00:05:56.695 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 19:57:19.149 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35948 9 6412 1 2025-10-28 19:58:19.556 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46808 10 6452 1 Summary: total flows: 130, total bytes: 277656, total packets: 1393, avg bps: 590, avg pps: 0, avg bpp: 199 Time window: 2025-10-28 18:55:50 - 2025-10-28 19:58:29 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0042s User: 0.0011s Wall: 0.0020s flows/second: 63885.1 Runtime: 0.0021s