Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 15:59:01.727 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 1 40 1 2025-10-31 15:59:51.764 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 9 6412 1 2025-10-31 16:00:43.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:00:43.515 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 15:55:52.944 00:05:57.048 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 15:56:50.323 00:05:02.668 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:01:02.494 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39654 1 40 1 2025-10-31 15:56:52.966 00:05:57.001 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 15:56:52.113 00:06:00.838 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-31 16:01:52.538 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33196 9 6412 1 2025-10-31 15:58:52.095 00:05:00.918 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:03:03.279 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45722 1 40 1 2025-10-31 15:59:09.207 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2304 1 2025-10-31 16:03:53.324 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54344 9 6412 1 2025-10-31 16:05:04.022 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 1 40 1 2025-10-31 16:05:43.711 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:05:43.755 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:01:52.952 00:05:57.038 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:02:50.325 00:05:02.671 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:06:54.461 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49060 10 6452 1 2025-10-31 16:02:52.972 00:05:56.999 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:08:05.211 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 1 40 1 2025-10-31 16:04:29.213 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2484 1 2025-10-31 16:04:52.096 00:05:00.920 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:03:52.115 00:06:00.840 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-31 16:08:55.243 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34728 10 6452 1 2025-10-31 16:09:55.650 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40750 9 6412 1 2025-10-31 16:10:43.815 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:10:43.815 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:12:06.791 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41256 1 40 1 2025-10-31 16:07:52.955 00:05:57.036 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:08:50.328 00:05:02.668 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:12:56.822 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47012 9 6412 1 2025-10-31 16:08:52.974 00:05:56.997 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:09:49.217 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2664 1 2025-10-31 16:13:57.221 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 13 10439 1 2025-10-31 16:10:52.098 00:05:00.921 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:15:08.092 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56682 1 40 1 2025-10-31 16:15:43.983 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:15:44.019 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:10:52.118 00:06:00.840 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-31 16:18:09.300 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32782 1 40 1 2025-10-31 16:13:52.956 00:05:57.037 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:14:50.326 00:05:02.678 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:18:59.337 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56954 9 6412 1 2025-10-31 16:15:09.221 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2828 1 2025-10-31 16:14:52.977 00:05:56.995 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:19:59.705 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46096 10 6452 1 2025-10-31 16:20:43.902 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:20:43.972 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:16:52.102 00:05:00.923 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:22:10.866 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40620 1 40 1 2025-10-31 16:17:52.122 00:06:00.842 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-31 16:23:11.295 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 1 40 1 2025-10-31 16:24:01.336 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55906 9 6412 1 2025-10-31 16:20:29.228 00:05:10.030 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-10-31 16:19:52.962 00:05:57.032 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:20:50.328 00:05:02.677 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:25:01.737 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41772 9 6412 1 2025-10-31 16:25:44.078 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:25:43.979 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:20:52.983 00:05:56.991 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:26:02.148 00:00:18.262 TCP 1.101.0.1:3000 -> 23.104.0.1:59840 10 6452 1 2025-10-31 16:22:52.104 00:05:00.922 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:27:10.458 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2025-10-31 16:29:21.602 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32862 1 40 1 2025-10-31 16:24:52.125 00:06:00.841 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-31 16:25:49.258 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2468 1 2025-10-31 16:30:44.324 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:30:44.392 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:25:52.964 00:05:57.032 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:26:50.329 00:05:02.679 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:31:12.010 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 9 6412 1 2025-10-31 16:26:52.983 00:05:56.992 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:28:52.104 00:05:00.922 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:31:09.266 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-31 16:35:44.367 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:35:44.245 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:36:14.923 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50860 10 6452 1 2025-10-31 16:31:52.965 00:05:57.031 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:31:52.124 00:06:00.844 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-31 16:32:50.330 00:05:02.680 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:32:52.985 00:05:56.991 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:38:15.695 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55582 10 6452 1 2025-10-31 16:34:52.104 00:05:00.924 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:39:16.119 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40152 10 6452 1 2025-10-31 16:40:16.483 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47554 9 6412 1 2025-10-31 16:36:29.275 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2792 1 2025-10-31 16:40:44.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:40:44.553 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:41:27.213 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 1 40 1 2025-10-31 16:42:17.251 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47426 9 6412 1 2025-10-31 16:37:52.969 00:05:57.028 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:38:50.330 00:05:02.681 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:38:52.988 00:05:56.989 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:38:52.125 00:06:00.845 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-31 16:44:28.460 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40000 1 40 1 2025-10-31 16:40:52.106 00:05:00.925 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:45:18.500 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48610 9 6412 1 2025-10-31 16:45:44.517 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:45:44.447 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:41:49.283 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-10-31 16:47:29.702 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47692 1 40 1 2025-10-31 16:43:52.969 00:05:57.035 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:44:50.332 00:05:02.681 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:49:30.518 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44070 1 40 1 2025-10-31 16:44:52.991 00:05:56.987 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:50:20.559 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35094 9 6412 1 2025-10-31 16:50:44.472 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:50:44.566 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:45:52.126 00:06:00.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 14 861 1 2025-10-31 16:46:52.119 00:05:00.930 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:47:09.285 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-10-31 16:49:52.972 00:05:57.027 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-10-31 16:50:50.335 00:05:02.704 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-10-31 16:55:22.635 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36696 9 6412 1 2025-10-31 16:55:44.752 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:55:44.764 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:50:53.010 00:05:56.969 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-10-31 16:56:23.035 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56014 9 6412 1 2025-10-31 16:52:29.289 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-10-31 16:52:52.117 00:05:00.943 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-10-31 16:52:52.137 00:05:00.863 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-10-31 16:57:23.437 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46668 9 6412 1 2025-10-31 16:58:34.510 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 1 40 1 Summary: total flows: 125, total bytes: 236289, total packets: 1325, avg bps: 502, avg pps: 0, avg bpp: 178 Time window: 2025-10-31 15:55:52 - 2025-10-31 16:58:34 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0020s User: 0.0030s Wall: 0.0019s flows/second: 65274.9 Runtime: 0.0019s