Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 10:54:45.125 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-03 10:59:06.929 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34198 10 6452 1 2025-11-03 11:00:17.709 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52020 1 40 1 2025-11-03 10:56:51.363 00:05:03.149 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 10:56:52.199 00:05:02.352 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:01:07.750 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54772 10 6452 1 2025-11-03 10:57:51.341 00:05:03.190 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:02:04.379 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:02:04.324 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:02:08.152 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51494 10 6452 1 2025-11-03 10:58:53.432 00:05:01.080 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 10:58:53.413 00:05:01.159 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:04:08.967 00:00:10.971 TCP 1.101.0.1:3000 -> 23.104.0.1:35356 10 6452 1 2025-11-03 11:00:05.134 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2900 1 2025-11-03 11:05:09.974 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-11-03 11:06:10.382 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33870 10 6452 1 2025-11-03 11:02:51.363 00:05:03.153 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:02:52.199 00:05:02.356 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:07:04.835 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:07:05.029 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:03:51.344 00:05:03.193 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:08:11.166 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:55832 11 6504 1 2025-11-03 11:04:53.417 00:05:01.160 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:04:53.436 00:05:01.079 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:09:11.624 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41868 9 6412 1 2025-11-03 11:05:25.141 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2384 1 2025-11-03 11:10:12.023 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2025-11-03 11:11:22.785 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55562 1 40 1 2025-11-03 11:12:04.523 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:12:04.391 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:12:12.834 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51384 9 6412 1 2025-11-03 11:08:51.365 00:05:03.151 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:08:52.202 00:05:02.355 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:13:23.621 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59944 1 40 1 2025-11-03 11:09:51.344 00:05:03.192 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:10:53.416 00:05:01.162 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:10:53.435 00:05:01.082 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:10:45.149 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2592 1 2025-11-03 11:15:24.448 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41584 1 40 1 2025-11-03 11:16:24.855 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59084 1 40 1 2025-11-03 11:17:04.520 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:17:04.516 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:18:15.309 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40398 9 6412 1 2025-11-03 11:14:51.367 00:05:03.153 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:14:52.203 00:05:02.356 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:19:15.713 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50986 10 6452 1 2025-11-03 11:15:51.347 00:05:03.194 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:16:05.156 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-03 11:20:16.132 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55814 9 6412 1 2025-11-03 11:16:53.438 00:05:01.082 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:16:53.418 00:05:01.163 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:21:16.496 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60676 9 6412 1 2025-11-03 11:22:04.520 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:22:04.612 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:22:16.897 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55430 10 6452 1 2025-11-03 11:23:17.273 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45218 10 6452 1 2025-11-03 11:24:17.681 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34802 9 6412 1 2025-11-03 11:20:52.205 00:05:02.360 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:20:51.368 00:05:03.156 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:25:18.108 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:49882 11 10329 1 2025-11-03 11:21:25.164 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2672 1 2025-11-03 11:21:51.349 00:05:03.196 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:26:18.583 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51266 9 6412 1 2025-11-03 11:22:53.440 00:05:01.086 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:22:53.419 00:05:01.166 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:27:04.730 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:27:04.831 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:27:18.989 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35036 9 6412 1 2025-11-03 11:29:20.372 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45930 9 6412 1 2025-11-03 11:30:31.152 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 1 40 1 2025-11-03 11:26:52.206 00:05:02.359 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:26:51.372 00:05:03.154 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:26:45.175 00:05:10.015 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2804 1 2025-11-03 11:31:21.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 10 6452 1 2025-11-03 11:27:51.350 00:05:03.195 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:32:04.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:32:04.594 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:32:31.965 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54024 1 40 1 2025-11-03 11:28:53.421 00:05:01.165 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:28:53.441 00:05:01.085 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:33:32.335 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57918 1 40 1 2025-11-03 11:34:32.742 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44230 1 40 1 2025-11-03 11:35:22.792 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:34492 12 10375 1 2025-11-03 11:32:05.188 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-03 11:32:52.206 00:05:02.360 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:32:51.371 00:05:03.156 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:37:05.016 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:37:04.853 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:37:34.039 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45264 1 40 1 2025-11-03 11:33:51.352 00:05:03.196 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:38:24.083 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41054 9 6412 1 2025-11-03 11:34:53.441 00:05:01.086 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:34:53.422 00:05:01.165 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:39:34.848 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33658 1 40 1 2025-11-03 11:40:24.888 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48788 10 6452 1 2025-11-03 11:37:25.191 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2592 1 2025-11-03 11:41:25.305 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49008 9 6412 1 2025-11-03 11:42:05.013 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:42:04.874 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:42:36.102 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53986 1 40 1 2025-11-03 11:38:51.371 00:05:03.156 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:38:52.216 00:05:02.351 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:43:26.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46810 10 6452 1 2025-11-03 11:39:51.352 00:05:03.195 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:44:36.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 1 40 1 2025-11-03 11:40:53.422 00:05:01.165 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:40:53.444 00:05:01.084 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:45:26.955 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 9 6412 1 2025-11-03 11:46:27.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43206 9 6412 1 2025-11-03 11:42:45.197 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-03 11:47:05.330 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:47:05.215 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:47:27.769 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:32978 10 6452 1 2025-11-03 11:48:28.211 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48306 9 6412 1 2025-11-03 11:44:51.372 00:05:03.159 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:44:52.216 00:05:02.355 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:45:51.352 00:05:03.200 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:50:28.987 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47188 9 6412 1 2025-11-03 11:46:53.443 00:05:01.088 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:46:53.423 00:05:01.168 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:51:29.387 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52240 9 6412 1 2025-11-03 11:52:05.331 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:52:05.244 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:48:05.201 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2672 1 2025-11-03 11:53:40.498 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44046 1 40 1 2025-11-03 11:54:40.902 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50854 1 40 1 2025-11-03 11:50:51.373 00:05:03.161 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 11:50:52.219 00:05:02.355 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 11:55:41.301 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36918 1 40 1 2025-11-03 11:51:51.352 00:05:03.202 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 11:56:41.667 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48636 1 40 1 2025-11-03 11:52:53.424 00:05:01.171 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 11:52:53.444 00:05:01.091 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 11:57:05.435 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 11:57:05.484 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 11:53:25.205 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-03 11:57:31.704 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46744 10 6452 1 2025-11-03 11:58:42.493 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44912 1 40 1 Summary: total flows: 138, total bytes: 300816, total packets: 1453, avg bps: 627, avg pps: 0, avg bpp: 207 Time window: 2025-11-03 10:54:45 - 2025-11-03 11:58:42 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0036s User: 0.0024s Wall: 0.0019s flows/second: 72706.2 Runtime: 0.0019s