Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 08:59:31.194 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45836 1 40 1 2025-10-29 08:59:37.318 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:59:37.323 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:55:50.906 00:05:00.941 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:00:31.587 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48168 1 40 1 2025-10-29 09:01:21.624 00:00:10.717 TCP 1.101.0.1:3000 -> 23.104.0.1:44786 9 6412 1 2025-10-29 08:56:51.823 00:05:57.340 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 08:57:34.454 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-29 08:56:51.784 00:05:56.710 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 08:57:50.927 00:05:00.861 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:02:32.766 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53990 1 40 1 2025-10-29 08:57:51.803 00:05:56.670 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:04:34.689 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 1 40 1 2025-10-29 09:04:37.508 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:04:37.445 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:01:50.908 00:05:00.939 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:06:25.131 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58744 9 6412 1 2025-10-29 09:02:54.455 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-10-29 09:07:35.900 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45610 1 40 1 2025-10-29 09:02:51.827 00:05:57.351 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:02:51.788 00:05:56.707 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:03:50.928 00:05:00.859 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:08:36.260 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 1 40 1 2025-10-29 09:03:51.806 00:05:56.668 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:09:37.760 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:09:36.664 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51600 1 40 1 2025-10-29 09:09:37.593 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:10:26.709 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50782 10 6452 1 2025-10-29 09:11:27.129 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38148 9 6412 1 2025-10-29 09:07:50.908 00:05:00.941 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:08:14.460 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-10-29 09:13:27.931 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36770 10 6452 1 2025-10-29 09:08:51.788 00:05:56.708 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:08:51.827 00:05:57.348 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:09:50.932 00:05:00.859 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:14:38.418 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:14:28.336 00:00:11.424 TCP 1.101.0.1:3000 -> 23.104.0.1:48958 9 6412 1 2025-10-29 09:14:38.359 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:09:51.807 00:05:56.668 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:15:29.795 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52488 10 6452 1 2025-10-29 09:16:40.579 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34356 1 40 1 2025-10-29 09:13:25.325 00:05:09.143 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2580 1 2025-10-29 09:17:30.613 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33786 9 6412 1 2025-10-29 09:13:50.913 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:18:41.303 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34724 1 40 1 2025-10-29 09:19:37.800 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:19:37.806 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:19:31.344 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52938 9 6412 1 2025-10-29 09:14:51.831 00:05:57.346 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:14:51.791 00:05:56.704 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:15:50.932 00:05:00.859 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:15:51.811 00:05:56.670 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:22:32.570 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50066 10 6452 1 2025-10-29 09:18:44.470 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2404 1 2025-10-29 09:23:32.971 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-10-29 09:19:50.914 00:05:00.939 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:24:37.847 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:24:37.931 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:24:33.386 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56780 9 6412 1 2025-10-29 09:25:44.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 1 40 1 2025-10-29 09:20:51.791 00:05:56.709 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:20:51.832 00:05:57.346 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:21:50.934 00:05:00.859 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:26:34.206 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33278 10 6452 1 2025-10-29 09:21:51.813 00:05:56.669 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:27:44.983 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35106 1 40 1 2025-10-29 09:24:04.473 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2684 1 2025-10-29 09:28:45.388 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53236 1 40 1 2025-10-29 09:29:37.923 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:29:37.913 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:25:50.915 00:05:00.939 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:30:35.834 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46270 10 6452 1 2025-10-29 09:31:46.603 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35078 1 40 1 2025-10-29 09:26:51.792 00:05:56.710 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:26:51.832 00:05:57.347 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:27:50.936 00:05:00.859 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:27:51.812 00:05:56.669 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:32:47.002 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56150 1 40 1 2025-10-29 09:29:24.485 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2536 1 2025-10-29 09:33:47.423 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37522 1 40 1 2025-10-29 09:34:38.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:34:38.311 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:34:47.837 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 1 40 1 2025-10-29 09:35:37.876 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 9 6412 1 2025-10-29 09:31:50.917 00:05:00.940 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:32:51.834 00:05:57.347 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:32:51.794 00:05:56.709 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:33:50.937 00:05:00.858 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:33:51.814 00:05:56.671 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:34:44.492 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2504 1 2025-10-29 09:39:38.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:39:38.249 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:39:51.854 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52322 10 6452 1 2025-10-29 09:37:50.922 00:05:00.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:42:03.055 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60242 1 40 1 2025-10-29 09:42:53.146 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36808 9 6412 1 2025-10-29 09:38:51.794 00:05:56.713 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:38:51.835 00:05:57.347 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:39:50.942 00:05:00.856 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:43:53.549 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44428 9 6412 1 2025-10-29 09:40:04.505 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-10-29 09:44:38.381 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:44:38.158 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:39:51.816 00:05:56.672 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:44:53.956 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 10 6452 1 2025-10-29 09:43:50.923 00:05:00.936 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:49:05.896 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55606 1 40 1 2025-10-29 09:45:24.513 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2584 1 2025-10-29 09:49:38.426 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:49:38.097 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:44:51.838 00:05:57.345 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:44:51.798 00:05:56.712 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:45:50.943 00:05:00.855 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:49:55.939 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40050 10 6452 1 2025-10-29 09:45:51.818 00:05:56.672 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:50:56.344 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44594 9 6412 1 2025-10-29 09:52:07.118 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59488 1 40 1 2025-10-29 09:49:50.923 00:05:00.936 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-29 09:54:38.475 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:54:38.407 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:50:44.520 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2812 1 2025-10-29 09:50:51.838 00:05:57.346 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-29 09:50:51.798 00:05:56.712 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-29 09:51:50.946 00:05:00.855 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-29 09:51:51.819 00:05:56.671 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-29 09:57:59.118 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40060 9 6412 1 Summary: total flows: 126, total bytes: 213260, total packets: 1297, avg bps: 456, avg pps: 0, avg bpp: 164 Time window: 2025-10-29 08:55:50 - 2025-10-29 09:58:09 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0038s User: 0.0019s Wall: 0.0018s flows/second: 71717.0 Runtime: 0.0018s