Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 22:58:55.760 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54156 1 40 1 2025-11-05 22:59:45.809 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-11-05 23:00:46.220 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33976 10 6452 1 2025-11-05 22:56:52.530 00:05:03.372 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 22:56:53.471 00:05:02.471 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:01:56.951 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42276 1 40 1 2025-11-05 22:57:52.511 00:05:03.414 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 22:58:54.563 00:05:01.402 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:02:57.365 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46866 1 40 1 2025-11-05 22:58:54.585 00:05:01.321 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:03:16.585 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:03:16.181 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 22:59:40.349 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2788 1 2025-11-05 23:04:58.144 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40320 1 40 1 2025-11-05 23:02:52.532 00:05:03.376 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:06:48.578 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34778 10 6452 1 2025-11-05 23:02:53.473 00:05:02.475 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:07:48.982 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34318 9 6412 1 2025-11-05 23:03:52.513 00:05:03.415 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:08:16.425 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:08:16.584 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:08:49.382 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50760 10 6452 1 2025-11-05 23:04:54.585 00:05:01.324 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:04:54.564 00:05:01.404 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:05:00.363 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2416 1 2025-11-05 23:11:00.576 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 1 40 1 2025-11-05 23:08:52.534 00:05:03.376 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:08:53.475 00:05:02.476 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:13:16.694 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:13:16.617 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:09:52.514 00:05:03.417 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:13:51.378 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:56900 10 6464 1 2025-11-05 23:10:20.365 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2576 1 2025-11-05 23:10:54.593 00:05:01.318 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:10:54.573 00:05:01.399 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:14:51.834 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40288 10 6452 1 2025-11-05 23:15:52.239 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55930 10 6464 1 2025-11-05 23:16:52.655 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34792 9 6412 1 2025-11-05 23:17:53.057 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42954 9 6412 1 2025-11-05 23:18:17.685 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:18:17.755 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:14:52.537 00:05:03.374 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:14:53.478 00:05:02.475 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:19:03.777 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36270 1 40 1 2025-11-05 23:15:40.369 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-05 23:15:52.518 00:05:03.413 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:19:53.813 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37396 10 6452 1 2025-11-05 23:16:54.595 00:05:01.318 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:16:54.574 00:05:01.398 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:20:54.218 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53966 10 6452 1 2025-11-05 23:21:54.623 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52496 9 6412 1 2025-11-05 23:23:05.412 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47094 1 40 1 2025-11-05 23:23:16.840 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:23:16.884 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:24:05.815 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32922 1 40 1 2025-11-05 23:20:52.540 00:05:03.374 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:20:53.478 00:05:02.476 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:25:06.205 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33994 1 40 1 2025-11-05 23:21:00.372 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-05 23:21:52.520 00:05:03.413 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:25:56.246 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51896 10 6452 1 2025-11-05 23:22:54.580 00:05:01.395 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:22:54.599 00:05:01.315 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:27:57.078 00:00:11.176 TCP 1.101.0.1:3000 -> 23.104.0.1:41624 10 6452 1 2025-11-05 23:28:17.012 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:28:16.924 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:28:58.294 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49630 9 6412 1 2025-11-05 23:26:20.381 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-05 23:26:53.481 00:05:02.476 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:26:52.540 00:05:03.376 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:27:52.522 00:05:03.414 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:32:10.571 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59436 1 40 1 2025-11-05 23:28:54.584 00:05:01.393 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:28:54.605 00:05:01.312 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:33:00.611 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42558 10 6452 1 2025-11-05 23:33:16.996 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:33:17.123 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:34:01.026 00:00:10.813 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6452 1 2025-11-05 23:35:12.256 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 1 40 1 2025-11-05 23:31:40.387 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2620 1 2025-11-05 23:36:12.619 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40940 1 40 1 2025-11-05 23:32:52.543 00:05:03.375 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:32:53.484 00:05:02.475 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:37:02.661 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54962 10 6452 1 2025-11-05 23:33:52.523 00:05:03.415 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:38:03.093 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43094 10 6452 1 2025-11-05 23:38:17.269 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:38:17.402 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:34:54.585 00:05:01.394 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:34:54.616 00:05:01.304 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:39:03.492 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45932 10 6452 1 2025-11-05 23:37:00.399 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2656 1 2025-11-05 23:41:04.303 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52780 10 6452 1 2025-11-05 23:42:04.668 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33008 10 6452 1 2025-11-05 23:38:52.543 00:05:03.376 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:38:53.484 00:05:02.477 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:43:05.077 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57028 9 6412 1 2025-11-05 23:43:17.175 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:43:17.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:39:52.524 00:05:03.416 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:40:54.607 00:05:01.315 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:40:54.587 00:05:01.395 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:45:28.278 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42702 1 40 1 2025-11-05 23:46:28.683 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45540 1 40 1 2025-11-05 23:42:20.415 00:05:10.018 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-05 23:47:29.088 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38508 1 40 1 2025-11-05 23:48:17.195 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:48:17.351 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:48:19.130 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49112 9 6412 1 2025-11-05 23:44:53.485 00:05:02.478 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:44:52.545 00:05:03.378 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:49:19.534 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37156 9 6412 1 2025-11-05 23:45:52.527 00:05:03.415 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:50:30.305 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46132 1 40 1 2025-11-05 23:46:54.609 00:05:01.314 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:46:54.588 00:05:01.394 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:51:30.668 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47680 1 40 1 2025-11-05 23:47:40.432 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2608 1 2025-11-05 23:53:17.003 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:53:17.002 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:53:31.460 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55178 1 40 1 2025-11-05 23:54:31.815 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46120 1 40 1 2025-11-05 23:50:52.549 00:05:03.374 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-05 23:50:53.486 00:05:02.478 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-05 23:55:21.856 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:44218 10 6452 1 2025-11-05 23:51:52.531 00:05:03.415 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-05 23:56:32.757 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40072 1 40 1 2025-11-05 23:52:54.610 00:05:01.315 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-05 23:52:54.590 00:05:01.394 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-05 23:53:00.437 00:05:10.044 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-05 23:57:33.241 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48704 1 40 1 2025-11-05 23:58:17.536 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 23:58:17.743 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 23:58:23.280 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54560 10 6452 1 Summary: total flows: 134, total bytes: 252388, total packets: 1366, avg bps: 545, avg pps: 0, avg bpp: 184 Time window: 2025-11-05 22:56:52 - 2025-11-05 23:58:33 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0034s User: 0.0017s Wall: 0.0020s flows/second: 66005.5 Runtime: 0.0021s