Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 03:59:46.815 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50268 10 6452 1 2025-11-04 03:56:52.626 00:05:02.295 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 03:56:51.663 00:05:03.218 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:00:57.585 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 1 40 1 2025-11-04 03:56:56.560 00:05:10.022 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-04 03:57:51.643 00:05:03.258 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:01:57.991 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55730 1 40 1 2025-11-04 04:02:24.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:02:24.674 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 03:58:53.752 00:05:01.190 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 03:58:53.772 00:05:01.110 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:03:48.436 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34828 9 6412 1 2025-11-04 04:04:48.844 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43084 10 6452 1 2025-11-04 04:02:16.564 00:05:00.949 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2444 1 2025-11-04 04:02:52.628 00:05:02.295 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:02:51.665 00:05:03.217 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:06:49.613 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51730 9 6412 1 2025-11-04 04:07:24.917 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:07:24.851 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:03:51.645 00:05:03.257 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:07:50.017 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60132 10 6452 1 2025-11-04 04:04:53.753 00:05:01.190 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:04:53.773 00:05:01.110 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:08:50.419 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51444 9 6412 1 2025-11-04 04:10:01.154 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 1 40 1 2025-11-04 04:11:01.518 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40426 1 40 1 2025-11-04 04:07:26.569 00:05:10.075 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2860 1 2025-11-04 04:11:51.555 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 10 6452 1 2025-11-04 04:12:24.819 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:12:24.819 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:08:52.629 00:05:02.295 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:08:51.666 00:05:03.217 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:12:51.968 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60404 10 6452 1 2025-11-04 04:09:51.648 00:05:03.256 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:14:02.703 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46630 1 40 1 2025-11-04 04:10:53.774 00:05:01.110 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:10:53.754 00:05:01.190 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:14:52.740 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:56646 9 6412 1 2025-11-04 04:15:53.163 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42724 10 6452 1 2025-11-04 04:12:46.571 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2296 1 2025-11-04 04:16:53.536 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46892 9 6412 1 2025-11-04 04:17:25.223 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:17:25.321 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:17:53.905 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36852 10 6452 1 2025-11-04 04:14:51.671 00:05:03.215 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:14:52.630 00:05:02.297 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:19:04.680 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40236 1 40 1 2025-11-04 04:15:51.650 00:05:03.255 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:19:54.722 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37266 9 6412 1 2025-11-04 04:16:53.776 00:05:01.112 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:16:53.756 00:05:01.192 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:18:06.578 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2656 1 2025-11-04 04:22:25.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:22:24.997 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:23:06.259 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42896 1 40 1 2025-11-04 04:23:56.295 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39374 10 6452 1 2025-11-04 04:20:51.673 00:05:03.220 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:20:52.631 00:05:02.302 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:25:07.028 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58144 1 40 1 2025-11-04 04:21:51.655 00:05:03.258 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:25:57.076 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60878 9 6412 1 2025-11-04 04:22:53.776 00:05:01.117 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:22:53.756 00:05:01.197 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:27:25.228 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:27:25.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:23:26.591 00:05:10.033 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-04 04:28:58.245 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40874 10 6452 1 2025-11-04 04:29:58.649 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 9 6412 1 2025-11-04 04:26:52.633 00:05:02.301 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:26:51.682 00:05:03.213 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:27:51.661 00:05:03.253 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:31:59.473 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60600 10 6452 1 2025-11-04 04:32:25.385 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:32:25.323 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:28:53.759 00:05:01.197 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:28:53.780 00:05:01.116 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:28:46.602 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-04 04:32:59.871 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34856 10 6452 1 2025-11-04 04:35:00.727 00:00:11.150 TCP 1.101.0.1:3000 -> 23.104.0.1:59244 9 6412 1 2025-11-04 04:36:12.368 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 1 40 1 2025-11-04 04:32:51.684 00:05:03.213 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:32:52.634 00:05:02.303 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:37:02.412 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47410 9 6412 1 2025-11-04 04:37:25.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:37:25.479 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:33:51.663 00:05:03.253 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:38:02.818 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52952 10 6452 1 2025-11-04 04:34:06.611 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2884 1 2025-11-04 04:34:53.760 00:05:01.197 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:34:53.781 00:05:01.116 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:40:13.992 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 1 40 1 2025-11-04 04:41:14.384 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 1 40 1 2025-11-04 04:42:04.425 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46206 10 6452 1 2025-11-04 04:42:25.543 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:42:25.428 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:38:51.685 00:05:03.215 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:38:52.635 00:05:02.304 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:43:15.194 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32820 1 40 1 2025-11-04 04:39:26.624 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2416 1 2025-11-04 04:39:51.667 00:05:03.256 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:44:05.230 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40304 9 6412 1 2025-11-04 04:40:53.761 00:05:01.201 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:40:53.783 00:05:01.121 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:45:05.628 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34436 10 6452 1 2025-11-04 04:47:06.617 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53256 10 6661 1 2025-11-04 04:47:25.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:47:25.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:48:07.024 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44484 10 6661 1 2025-11-04 04:44:52.638 00:05:02.306 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:44:51.691 00:05:03.213 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:44:46.629 00:05:10.026 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2384 1 2025-11-04 04:49:07.435 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 10 6661 1 2025-11-04 04:45:51.670 00:05:03.253 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:46:53.763 00:05:01.201 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:46:53.783 00:05:01.121 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:52:19.017 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36024 1 40 1 2025-11-04 04:52:25.705 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:52:25.629 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:53:09.050 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57574 10 6661 1 2025-11-04 04:50:06.640 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2512 1 2025-11-04 04:50:51.691 00:05:03.214 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-04 04:50:52.641 00:05:02.304 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-04 04:55:20.247 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 1 40 1 2025-11-04 04:51:51.670 00:05:03.255 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-04 04:56:10.287 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36968 9 6621 1 2025-11-04 04:52:53.788 00:05:01.118 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-04 04:52:53.768 00:05:01.198 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-04 04:57:25.905 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:57:10.650 00:00:10.586 TCP 1.101.0.1:3000 -> 23.104.0.1:45116 10 6661 1 2025-11-04 04:57:25.863 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 130, total bytes: 272218, total packets: 1381, avg bps: 594, avg pps: 0, avg bpp: 197 Time window: 2025-11-04 03:56:51 - 2025-11-04 04:57:54 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0046s User: 0.0000s Wall: 0.0019s flows/second: 66837.4 Runtime: 0.0020s