Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 18:58:51.991 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 1 40 1 2025-11-03 18:59:42.024 00:00:11.801 TCP 1.101.0.1:3000 -> 23.104.0.1:59656 10 6452 1 2025-11-03 18:56:52.399 00:05:02.330 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 18:56:51.493 00:05:03.196 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:00:54.244 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49472 1 40 1 2025-11-03 18:57:51.473 00:05:03.236 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:02:13.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:02:14.001 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:58:53.572 00:05:01.178 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:02:44.692 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59616 9 6412 1 2025-11-03 18:58:53.592 00:05:01.098 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 18:58:45.833 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2608 1 2025-11-03 19:03:45.130 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43890 9 6412 1 2025-11-03 19:04:45.532 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47350 9 6412 1 2025-11-03 19:05:56.336 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45120 1 40 1 2025-11-03 19:02:52.400 00:05:02.333 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:02:51.494 00:05:03.198 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:07:14.158 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:07:14.023 00:00:00.051 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:03:51.474 00:05:03.239 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:07:46.943 00:00:10.593 TCP 1.101.0.1:3000 -> 23.104.0.1:35808 10 6452 1 2025-11-03 19:04:05.833 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2564 1 2025-11-03 19:04:53.593 00:05:01.100 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:04:53.572 00:05:01.181 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:09:47.982 00:00:10.669 TCP 1.101.0.1:3000 -> 23.104.0.1:39500 10 6452 1 2025-11-03 19:11:49.058 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47674 10 6452 1 2025-11-03 19:12:14.132 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:12:14.178 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:08:52.406 00:05:02.328 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:08:51.494 00:05:03.198 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:12:49.461 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33256 10 6452 1 2025-11-03 19:09:25.845 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2496 1 2025-11-03 19:09:51.474 00:05:03.239 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:14:00.250 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45018 1 40 1 2025-11-03 19:10:53.594 00:05:01.100 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:10:53.574 00:05:01.180 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:15:00.979 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45334 1 40 1 2025-11-03 19:17:01.797 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51826 1 40 1 2025-11-03 19:17:14.525 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:17:14.632 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:17:51.829 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37158 10 6452 1 2025-11-03 19:14:51.495 00:05:03.198 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:14:52.409 00:05:02.325 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:14:45.851 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-11-03 19:18:52.198 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35450 9 6412 1 2025-11-03 19:15:51.475 00:05:03.239 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:19:52.598 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45692 9 6412 1 2025-11-03 19:16:53.596 00:05:01.099 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:16:53.575 00:05:01.180 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:20:53.006 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 9 6412 1 2025-11-03 19:22:03.772 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 1 40 1 2025-11-03 19:22:14.340 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:22:14.168 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:23:04.148 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38038 1 40 1 2025-11-03 19:23:54.204 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52694 9 6412 1 2025-11-03 19:20:05.856 00:05:10.265 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-03 19:20:51.496 00:05:03.198 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:20:52.421 00:05:02.314 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:21:51.478 00:05:03.237 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:25:54.972 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48652 10 6452 1 2025-11-03 19:22:53.576 00:05:01.179 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:22:53.596 00:05:01.099 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:26:55.376 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37262 10 6452 1 2025-11-03 19:27:14.490 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:27:14.362 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:27:55.774 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:35968 10 6452 1 2025-11-03 19:28:56.199 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49528 10 6452 1 2025-11-03 19:25:25.865 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-03 19:29:56.601 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45044 9 6412 1 2025-11-03 19:26:51.497 00:05:03.199 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:26:52.423 00:05:02.313 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:31:07.413 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58396 1 40 1 2025-11-03 19:27:51.478 00:05:03.238 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:32:14.536 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:32:14.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:28:53.577 00:05:01.179 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:28:53.598 00:05:01.099 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:33:08.241 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36912 1 40 1 2025-11-03 19:33:58.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57954 10 6452 1 2025-11-03 19:30:45.867 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2708 1 2025-11-03 19:35:09.059 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 1 40 1 2025-11-03 19:36:09.484 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 1 40 1 2025-11-03 19:32:51.502 00:05:03.194 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:32:52.423 00:05:02.314 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:36:59.523 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42706 10 6452 1 2025-11-03 19:37:14.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:37:14.499 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:33:51.481 00:05:03.235 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:34:53.598 00:05:01.098 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:34:53.578 00:05:01.179 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:39:10.678 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 1 40 1 2025-11-03 19:36:05.877 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2496 1 2025-11-03 19:41:01.170 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33434 9 6412 1 2025-11-03 19:42:14.757 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:42:14.816 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:42:11.931 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37248 1 40 1 2025-11-03 19:38:52.426 00:05:02.312 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:38:51.505 00:05:03.194 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:43:12.336 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59200 1 40 1 2025-11-03 19:39:51.483 00:05:03.235 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:40:53.581 00:05:01.179 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:40:53.600 00:05:01.098 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:41:25.889 00:05:00.418 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2300 1 2025-11-03 19:46:03.151 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33274 9 6412 1 2025-11-03 19:47:14.562 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:47:14.898 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:44:52.431 00:05:02.312 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:44:51.507 00:05:03.197 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:45:51.486 00:05:03.240 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:50:04.780 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40574 9 6412 1 2025-11-03 19:46:35.891 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-11-03 19:46:53.585 00:05:01.183 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:46:53.604 00:05:01.103 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:52:14.980 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:52:14.885 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:52:05.603 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41776 9 6412 1 2025-11-03 19:53:05.970 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 9 6412 1 2025-11-03 19:54:06.382 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:41278 9 6412 1 2025-11-03 19:50:51.507 00:05:03.202 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-03 19:50:52.435 00:05:02.315 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-03 19:55:17.187 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38554 1 40 1 2025-11-03 19:51:51.488 00:05:03.242 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-03 19:51:55.901 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-03 19:56:07.231 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50564 10 6452 1 2025-11-03 19:52:53.585 00:05:01.185 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-03 19:52:53.605 00:05:01.105 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-03 19:57:14.942 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:57:15.030 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:57:07.648 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44390 11 6516 1 2025-11-03 19:58:18.423 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40838 1 40 1 Summary: total flows: 130, total bytes: 251680, total packets: 1354, avg bps: 546, avg pps: 0, avg bpp: 185 Time window: 2025-11-03 18:56:51 - 2025-11-03 19:58:18 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0045s User: 0.0018s Wall: 0.0019s flows/second: 69037.7 Runtime: 0.0019s