Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 20:58:55.129 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49234 10 6452 1 2025-11-05 21:00:05.892 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44240 1 40 1 2025-11-05 20:56:53.437 00:05:02.469 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 20:56:52.494 00:05:03.373 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:00:55.931 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45840 10 6452 1 2025-11-05 20:57:00.178 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2608 1 2025-11-05 20:57:52.474 00:05:03.414 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:01:56.341 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43492 9 6412 1 2025-11-05 20:58:54.529 00:05:01.337 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 20:58:54.509 00:05:01.417 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:03:14.028 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:03:14.028 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:03:57.130 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38834 12 6556 1 2025-11-05 21:04:57.533 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32898 10 6452 1 2025-11-05 21:02:20.185 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-05 21:02:52.494 00:05:03.374 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:02:53.439 00:05:02.470 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:07:08.664 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43026 1 40 1 2025-11-05 21:03:52.474 00:05:03.415 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:08:09.069 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38590 1 40 1 2025-11-05 21:08:14.227 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:08:14.021 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:04:54.511 00:05:01.419 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:04:54.531 00:05:01.339 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:08:59.142 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52268 10 6452 1 2025-11-05 21:09:59.557 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:34672 10 6452 1 2025-11-05 21:11:00.085 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37644 9 6412 1 2025-11-05 21:07:40.190 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2580 1 2025-11-05 21:12:00.490 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45982 10 6452 1 2025-11-05 21:08:53.442 00:05:02.468 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:08:52.495 00:05:03.375 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:13:14.162 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:13:00.896 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36362 9 6412 1 2025-11-05 21:13:14.232 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:09:52.476 00:05:03.418 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:14:11.636 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 1 40 1 2025-11-05 21:10:54.532 00:05:01.342 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:10:54.511 00:05:01.423 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:15:12.045 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45546 1 40 1 2025-11-05 21:17:12.869 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50694 1 40 1 2025-11-05 21:13:00.203 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2568 1 2025-11-05 21:18:14.423 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:18:02.906 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:57616 11 6516 1 2025-11-05 21:18:14.421 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:14:52.498 00:05:03.377 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:14:53.443 00:05:02.472 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:19:13.719 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60392 1 40 1 2025-11-05 21:15:52.478 00:05:03.418 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:20:14.132 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48384 1 40 1 2025-11-05 21:16:54.534 00:05:01.343 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:16:54.515 00:05:01.423 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:21:04.176 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55490 10 6452 1 2025-11-05 21:22:14.963 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35844 1 40 1 2025-11-05 21:18:20.215 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-11-05 21:23:14.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:23:14.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:24:05.426 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41788 9 6412 1 2025-11-05 21:20:52.500 00:05:03.379 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:20:53.446 00:05:02.472 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:25:05.838 00:00:10.678 TCP 1.101.0.1:3000 -> 23.104.0.1:60618 9 6412 1 2025-11-05 21:21:52.480 00:05:03.420 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:26:06.556 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-11-05 21:22:54.519 00:05:01.420 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:22:54.538 00:05:01.340 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:27:06.961 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57638 9 6412 1 2025-11-05 21:23:40.220 00:05:10.571 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2624 1 2025-11-05 21:28:14.790 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:28:15.103 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:28:07.368 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35980 9 6412 1 2025-11-05 21:29:18.066 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42412 1 40 1 2025-11-05 21:26:52.500 00:05:03.379 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:26:53.448 00:05:02.471 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:31:18.889 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36410 1 40 1 2025-11-05 21:27:52.481 00:05:03.418 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:32:08.924 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6452 1 2025-11-05 21:28:54.521 00:05:01.419 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:28:54.541 00:05:01.339 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:29:00.227 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-05 21:33:14.758 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:33:14.685 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:33:09.294 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53964 10 6452 1 2025-11-05 21:34:09.702 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58666 10 6452 1 2025-11-05 21:35:10.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33150 10 6452 1 2025-11-05 21:36:20.876 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49324 1 40 1 2025-11-05 21:32:52.502 00:05:03.378 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:32:53.450 00:05:02.471 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:37:10.914 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:55790 9 6412 1 2025-11-05 21:33:52.483 00:05:03.417 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:38:14.697 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:38:14.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:38:21.653 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45406 1 40 1 2025-11-05 21:34:20.230 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2724 1 2025-11-05 21:34:54.523 00:05:01.417 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:34:54.543 00:05:01.337 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:39:22.053 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59652 1 40 1 2025-11-05 21:40:12.118 00:00:10.786 TCP 1.101.0.1:3000 -> 23.104.0.1:38034 10 6452 1 2025-11-05 21:41:12.940 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49228 10 6452 1 2025-11-05 21:42:13.342 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38520 9 6412 1 2025-11-05 21:38:52.504 00:05:03.377 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:38:53.455 00:05:02.466 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:43:14.798 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:43:14.864 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:43:13.743 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51286 10 6452 1 2025-11-05 21:39:40.236 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2416 1 2025-11-05 21:39:52.485 00:05:03.416 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:40:54.528 00:05:01.413 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:40:54.548 00:05:01.334 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:45:14.561 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53132 9 6412 1 2025-11-05 21:47:15.382 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 11 10335 1 2025-11-05 21:48:15.045 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:48:15.166 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:44:53.455 00:05:02.467 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:44:52.508 00:05:03.373 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:45:00.241 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2656 1 2025-11-05 21:45:52.488 00:05:03.413 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:50:27.060 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46766 1 40 1 2025-11-05 21:46:54.550 00:05:01.335 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:46:54.532 00:05:01.414 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:51:17.139 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60592 9 6412 1 2025-11-05 21:53:15.081 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 21:53:15.085 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:53:17.954 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47256 10 6452 1 2025-11-05 21:54:18.351 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42050 9 6412 1 2025-11-05 21:50:20.249 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-05 21:50:52.513 00:05:03.370 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 21:50:53.455 00:05:02.467 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 21:51:52.492 00:05:03.411 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 21:56:29.461 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54982 1 40 1 2025-11-05 21:52:54.551 00:05:01.333 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 21:52:54.532 00:05:01.413 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 21:57:29.859 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40876 1 40 1 2025-11-05 21:58:15.309 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 21:58:15.258 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 133, total bytes: 275443, total packets: 1391, avg bps: 598, avg pps: 0, avg bpp: 198 Time window: 2025-11-05 20:56:52 - 2025-11-05 21:58:15 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0036s User: 0.0027s Wall: 0.0024s flows/second: 55391.0 Runtime: 0.0024s