Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 05:59:49.734 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50218 1 40 1 2025-10-30 05:55:51.368 00:05:00.816 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 05:55:51.349 00:05:00.896 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:00:02.756 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:00:02.681 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 05:56:49.566 00:05:02.659 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:00:39.780 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:42252 10 6452 1 2025-10-30 05:56:48.978 00:05:03.207 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:01:40.218 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46860 10 6452 1 2025-10-30 05:57:48.957 00:05:03.248 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:02:40.618 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43578 9 6412 1 2025-10-30 05:58:56.222 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-30 06:04:41.430 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41472 9 6412 1 2025-10-30 06:05:02.829 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:05:02.742 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:05:41.838 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33210 9 6412 1 2025-10-30 06:01:51.370 00:05:00.818 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:01:51.351 00:05:00.898 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:02:49.567 00:05:02.670 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:02:48.980 00:05:03.205 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:03:48.961 00:05:03.245 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:07:44.951 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:53890 9 6412 1 2025-10-30 06:04:16.230 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-10-30 06:08:45.337 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41098 9 6412 1 2025-10-30 06:09:45.739 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52314 10 6452 1 2025-10-30 06:10:02.759 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:10:02.756 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:07:51.350 00:05:00.897 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:07:51.370 00:05:00.817 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:08:48.981 00:05:03.206 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:08:49.575 00:05:02.652 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:12:46.962 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36246 9 6412 1 2025-10-30 06:09:36.235 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-10-30 06:09:48.966 00:05:03.241 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:13:47.375 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33176 10 6452 1 2025-10-30 06:14:47.780 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:49008 9 6412 1 2025-10-30 06:15:02.949 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:15:02.718 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:16:48.624 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55754 9 6412 1 2025-10-30 06:13:51.372 00:05:00.815 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:13:51.353 00:05:00.895 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:17:49.033 00:00:10.511 TCP 1.101.0.1:3000 -> 23.104.0.1:44824 14 14292 1 2025-10-30 06:14:49.573 00:05:02.656 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:14:48.983 00:05:03.205 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:18:49.578 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 9 6412 1 2025-10-30 06:14:56.239 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2728 1 2025-10-30 06:15:48.964 00:05:03.246 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:20:00.318 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49114 1 40 1 2025-10-30 06:20:03.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:20:03.152 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:20:50.361 00:00:10.846 TCP 1.101.0.1:3000 -> 23.104.0.1:59012 9 6412 1 2025-10-30 06:23:02.096 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45404 1 40 1 2025-10-30 06:19:51.376 00:05:00.825 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:19:51.355 00:05:00.905 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:23:52.135 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37840 9 6412 1 2025-10-30 06:20:16.247 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-30 06:20:48.998 00:05:00.005 TCP 23.155.0.1:42479 -> 23.152.0.1:179 11 667 1 2025-10-30 06:20:49.577 00:05:02.664 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:25:03.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:25:03.180 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:24:52.539 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37286 9 6412 1 2025-10-30 06:21:48.978 00:05:03.244 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:25:52.900 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55836 10 6452 1 2025-10-30 06:27:03.628 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52742 1 40 1 2025-10-30 06:28:04.033 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56486 1 40 1 2025-10-30 06:28:54.076 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59682 10 6452 1 2025-10-30 06:25:51.358 00:05:00.904 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:25:36.250 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2580 1 2025-10-30 06:25:51.378 00:05:00.824 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:30:03.599 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:30:03.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:25:52.202 00:05:56.801 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:26:49.580 00:05:02.663 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:27:48.981 00:05:03.242 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:31:55.299 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 9 6412 1 2025-10-30 06:35:03.350 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:35:03.337 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:34:56.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-10-30 06:30:56.260 00:05:10.102 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2568 1 2025-10-30 06:31:51.380 00:05:00.823 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:31:51.361 00:05:00.903 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:31:52.203 00:05:56.801 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:32:49.580 00:05:02.663 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:36:57.342 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53974 10 6452 1 2025-10-30 06:33:48.982 00:05:03.242 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:37:57.758 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36974 9 6412 1 2025-10-30 06:38:58.171 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58474 10 6452 1 2025-10-30 06:40:03.570 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:40:03.527 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:36:16.266 00:05:10.167 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-10-30 06:37:51.361 00:05:00.904 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:37:51.384 00:05:00.822 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:41:59.385 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45400 9 6412 1 2025-10-30 06:37:52.202 00:05:56.803 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:38:49.582 00:05:02.667 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:42:59.785 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58500 10 6452 1 2025-10-30 06:39:48.983 00:05:03.244 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:44:10.560 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49012 1 40 1 2025-10-30 06:45:03.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:45:03.697 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:45:10.962 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52466 1 40 1 2025-10-30 06:41:36.278 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-30 06:46:01.002 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54238 10 6452 1 2025-10-30 06:47:01.377 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:51612 9 6412 1 2025-10-30 06:43:51.389 00:05:00.819 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:43:51.368 00:05:00.900 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:48:01.768 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45408 9 6412 1 2025-10-30 06:43:52.208 00:05:56.799 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:44:49.585 00:05:02.663 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:49:12.498 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58024 1 40 1 2025-10-30 06:45:48.985 00:05:03.243 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:50:03.906 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:50:03.990 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:50:12.908 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43060 1 40 1 2025-10-30 06:46:56.290 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2592 1 2025-10-30 06:51:13.338 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43562 1 40 1 2025-10-30 06:49:51.390 00:05:00.819 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-30 06:49:51.371 00:05:00.899 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-30 06:54:14.527 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58906 1 40 1 2025-10-30 06:49:52.208 00:05:56.799 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-30 06:50:49.589 00:05:02.662 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-30 06:55:03.790 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 06:55:03.690 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 06:55:14.893 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46996 2 80 1 2025-10-30 06:51:48.985 00:05:03.244 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-30 06:56:04.934 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44834 9 6412 1 2025-10-30 06:52:16.296 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2580 1 2025-10-30 06:58:05.740 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42654 10 6452 1 Summary: total flows: 128, total bytes: 278529, total packets: 1379, avg bps: 595, avg pps: 0, avg bpp: 201 Time window: 2025-10-30 05:55:51 - 2025-10-30 06:58:16 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0047s User: 0.0009s Wall: 0.0017s flows/second: 76959.7 Runtime: 0.0017s