Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 21:59:24.099 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:59:24.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:59:23.777 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36106 1 40 1 2025-10-28 21:55:50.689 00:05:00.935 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:00:13.827 00:00:10.653 TCP 1.101.0.1:3000 -> 23.104.0.1:32800 10 6452 1 2025-10-28 22:01:14.530 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51716 9 6412 1 2025-10-28 21:57:13.492 00:05:10.123 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-10-28 21:57:48.924 00:05:02.680 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 21:56:51.564 00:05:56.722 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 21:57:50.711 00:05:00.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 21:57:51.584 00:05:56.683 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:03:15.336 00:00:10.784 TCP 1.101.0.1:3000 -> 23.104.0.1:33908 9 6412 1 2025-10-28 22:04:24.347 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:04:24.305 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:04:26.489 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33906 1 40 1 2025-10-28 22:05:16.530 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52642 9 6412 1 2025-10-28 22:01:50.694 00:05:00.932 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:02:33.497 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-28 22:07:17.365 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58616 10 6452 1 2025-10-28 22:02:51.564 00:05:56.725 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:03:50.714 00:05:00.851 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:03:48.926 00:05:02.680 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:08:17.771 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35264 10 6452 1 2025-10-28 22:03:51.584 00:05:56.684 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:09:24.363 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:09:24.608 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:09:18.172 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39152 9 6412 1 2025-10-28 22:11:18.997 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48798 9 6412 1 2025-10-28 22:07:50.695 00:05:00.931 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:07:53.509 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2584 1 2025-10-28 22:12:19.412 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33096 10 6452 1 2025-10-28 22:08:51.565 00:05:56.729 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:09:50.716 00:05:00.850 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:09:48.926 00:05:02.680 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:14:24.835 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:14:24.732 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:09:51.586 00:05:56.689 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:16:21.080 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53276 10 6452 1 2025-10-28 22:13:13.511 00:05:01.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2364 1 2025-10-28 22:13:50.696 00:05:00.930 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:18:21.897 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 9 6412 1 2025-10-28 22:19:24.599 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:19:24.485 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:19:32.687 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46532 1 40 1 2025-10-28 22:15:48.939 00:05:02.670 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:14:51.566 00:05:56.730 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:15:50.717 00:05:00.852 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:20:22.723 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54092 10 6452 1 2025-10-28 22:15:51.587 00:05:56.690 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:18:23.515 00:05:10.015 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2600 1 2025-10-28 22:23:23.922 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41098 9 6412 1 2025-10-28 22:19:50.697 00:05:00.932 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:24:24.645 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:24:24.572 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:24:24.301 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40622 9 6412 1 2025-10-28 22:25:35.035 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59936 1 40 1 2025-10-28 22:20:51.569 00:05:56.728 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:21:48.942 00:05:02.668 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:21:50.718 00:05:00.852 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:21:51.591 00:05:56.687 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:27:25.480 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52452 9 6412 1 2025-10-28 22:23:43.530 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-10-28 22:28:36.266 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45314 1 40 1 2025-10-28 22:29:24.694 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:29:24.822 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:25:50.698 00:05:00.933 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:30:37.071 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56236 1 40 1 2025-10-28 22:31:37.511 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43026 1 40 1 2025-10-28 22:26:51.570 00:05:56.729 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:27:50.720 00:05:00.855 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:27:48.943 00:05:02.672 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:32:27.548 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6452 1 2025-10-28 22:27:51.591 00:05:56.688 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:29:03.539 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2724 1 2025-10-28 22:34:24.614 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:34:24.715 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:34:28.385 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36930 9 6412 1 2025-10-28 22:35:28.793 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49948 9 6412 1 2025-10-28 22:31:50.701 00:05:00.935 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:36:29.201 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59238 9 6412 1 2025-10-28 22:32:51.574 00:05:56.726 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:33:50.722 00:05:00.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:33:48.944 00:05:02.674 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:34:23.550 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2568 1 2025-10-28 22:38:30.010 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48846 10 6452 1 2025-10-28 22:33:51.595 00:05:56.686 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:39:24.763 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:39:24.845 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:39:30.411 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36816 9 6412 1 2025-10-28 22:41:31.214 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6452 1 2025-10-28 22:37:50.704 00:05:00.933 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:42:41.979 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35504 1 40 1 2025-10-28 22:43:42.382 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41628 1 40 1 2025-10-28 22:38:51.577 00:05:56.725 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:39:43.563 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2304 1 2025-10-28 22:39:50.723 00:05:00.855 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:39:48.946 00:05:02.672 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:44:24.834 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:44:25.088 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:39:51.596 00:05:56.685 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:45:43.186 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50420 1 40 1 2025-10-28 22:47:33.628 00:00:10.951 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-10-28 22:43:50.705 00:05:00.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:48:34.617 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43714 10 6452 1 2025-10-28 22:45:03.569 00:05:10.017 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-10-28 22:49:25.296 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:49:25.134 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:49:34.981 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57080 9 6412 1 2025-10-28 22:44:51.578 00:05:56.724 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:45:50.724 00:05:00.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:45:48.948 00:05:02.671 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:50:35.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60696 10 6452 1 2025-10-28 22:45:51.598 00:05:56.684 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:51:35.797 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57634 10 6452 1 2025-10-28 22:53:46.942 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48770 1 40 1 2025-10-28 22:49:50.705 00:05:00.935 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-28 22:54:25.226 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:54:24.931 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:50:23.586 00:05:10.017 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2604 1 2025-10-28 22:54:47.353 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47492 1 40 1 2025-10-28 22:50:51.578 00:05:56.729 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-28 22:51:50.726 00:05:00.855 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-28 22:51:48.950 00:05:02.672 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-28 22:51:51.600 00:05:56.687 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-28 22:57:38.203 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60664 9 6412 1 Summary: total flows: 125, total bytes: 251412, total packets: 1346, avg bps: 540, avg pps: 0, avg bpp: 186 Time window: 2025-10-28 21:55:50 - 2025-10-28 22:57:48 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0032s User: 0.0024s Wall: 0.0018s flows/second: 71186.4 Runtime: 0.0018s