Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 01:58:42.876 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40278 10 6452 1 2025-11-07 02:00:54.072 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 1 40 1 2025-11-07 01:55:56.468 00:05:56.554 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 01:56:53.953 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 01:56:56.489 00:05:56.513 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 01:58:55.213 00:05:01.259 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 01:58:55.192 00:05:01.339 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 01:58:52.584 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-07 02:03:49.138 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:03:48.999 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:03:44.934 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53830 9 6412 1 2025-11-07 02:04:45.332 00:00:18.682 TCP 1.101.0.1:3000 -> 23.104.0.1:46836 10 6452 1 2025-11-07 02:01:56.471 00:05:56.552 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:02:53.956 00:05:02.554 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:06:54.443 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38398 9 6412 1 2025-11-07 02:02:56.491 00:05:56.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:07:54.844 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2025-11-07 02:04:12.590 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-07 02:08:48.934 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:08:49.234 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:04:55.208 00:05:01.323 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:04:55.229 00:05:01.242 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:08:55.246 00:00:11.074 TCP 1.101.0.1:3000 -> 23.104.0.1:40946 9 6412 1 2025-11-07 02:09:56.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43378 10 6452 1 2025-11-07 02:10:56.761 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49130 9 6412 1 2025-11-07 02:07:56.470 00:05:56.554 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:08:53.958 00:05:02.554 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:13:07.943 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38512 1 40 1 2025-11-07 02:09:32.597 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-07 02:13:49.150 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:13:49.061 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:08:56.491 00:05:56.513 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:13:57.980 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6452 1 2025-11-07 02:10:55.210 00:05:01.325 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:10:55.230 00:05:01.244 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:16:09.124 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36192 1 40 1 2025-11-07 02:16:59.162 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45846 9 6412 1 2025-11-07 02:17:59.579 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2025-11-07 02:18:49.222 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:18:49.353 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:13:56.472 00:05:56.554 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:14:53.960 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:14:52.604 00:05:10.818 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2748 1 2025-11-07 02:18:59.983 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38400 9 6412 1 2025-11-07 02:14:56.494 00:05:56.513 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:20:00.343 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 9 6412 1 2025-11-07 02:16:55.230 00:05:01.244 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:16:55.211 00:05:01.324 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:21:11.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37358 1 40 1 2025-11-07 02:22:11.534 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57016 1 40 1 2025-11-07 02:23:01.573 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:54546 9 6412 1 2025-11-07 02:23:49.240 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:23:49.307 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:24:01.929 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35710 9 6412 1 2025-11-07 02:20:12.613 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2528 1 2025-11-07 02:19:56.475 00:05:56.553 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:20:53.961 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:25:02.332 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46504 10 6452 1 2025-11-07 02:20:56.495 00:05:56.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:26:02.735 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2025-11-07 02:22:55.212 00:05:01.324 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:22:55.234 00:05:01.243 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:27:03.136 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58848 10 6452 1 2025-11-07 02:28:03.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41040 10 6452 1 2025-11-07 02:28:49.295 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:28:49.556 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:29:03.945 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 9 6412 1 2025-11-07 02:25:32.617 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2608 1 2025-11-07 02:30:04.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58504 9 6412 1 2025-11-07 02:25:56.476 00:05:56.553 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:26:53.961 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:31:15.130 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40286 1 40 1 2025-11-07 02:26:56.495 00:05:56.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:32:05.169 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57776 10 6452 1 2025-11-07 02:28:55.234 00:05:01.244 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:28:55.214 00:05:01.324 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:33:05.575 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33450 10 6452 1 2025-11-07 02:33:49.660 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:33:49.611 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:34:05.982 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55608 10 6452 1 2025-11-07 02:30:52.620 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-07 02:35:06.390 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55896 10 6452 1 2025-11-07 02:31:56.477 00:05:56.555 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:32:53.963 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:37:07.206 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 9 6412 1 2025-11-07 02:32:56.498 00:05:56.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:38:17.934 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50942 1 40 1 2025-11-07 02:38:50.076 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:38:49.664 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:34:55.235 00:05:01.245 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:34:55.216 00:05:01.325 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:39:07.974 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:54236 9 6412 1 2025-11-07 02:40:08.351 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36416 9 6412 1 2025-11-07 02:36:12.626 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-11-07 02:41:19.085 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 1 40 1 2025-11-07 02:42:19.472 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 1 40 1 2025-11-07 02:37:56.479 00:05:56.553 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:38:53.964 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:43:09.502 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37744 10 6452 1 2025-11-07 02:43:50.131 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:43:50.130 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:38:56.500 00:05:56.513 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:40:55.216 00:05:01.324 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:40:55.236 00:05:01.244 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:45:10.879 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59722 10 6452 1 2025-11-07 02:41:32.637 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2700 1 2025-11-07 02:46:11.294 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6452 1 2025-11-07 02:47:11.709 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:43344 12 10375 1 2025-11-07 02:48:22.549 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48278 1 40 1 2025-11-07 02:48:49.832 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:48:49.669 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:43:56.480 00:05:56.553 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:44:53.972 00:05:02.550 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:49:12.589 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50284 9 6412 1 2025-11-07 02:44:56.499 00:05:56.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:50:12.993 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55860 9 6412 1 2025-11-07 02:46:55.218 00:05:01.325 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:46:55.237 00:05:01.245 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:46:52.649 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2656 1 2025-11-07 02:51:13.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34142 10 6452 1 2025-11-07 02:52:13.796 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39188 9 6412 1 2025-11-07 02:53:50.105 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:53:49.874 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:54:14.560 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 9 6412 1 2025-11-07 02:49:56.482 00:05:56.553 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-07 02:50:53.972 00:05:02.551 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-07 02:55:14.968 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6452 1 2025-11-07 02:50:56.503 00:05:56.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-07 02:52:12.658 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-07 02:52:55.238 00:05:01.245 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-07 02:52:55.218 00:05:01.325 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-07 02:57:26.161 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34860 1 40 1 2025-11-07 02:58:16.205 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46982 10 6452 1 2025-11-07 02:58:50.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:58:50.637 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 135, total bytes: 326419, total packets: 1457, avg bps: 691, avg pps: 0, avg bpp: 224 Time window: 2025-11-07 01:55:56 - 2025-11-07 02:58:50 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0035s User: 0.0009s Wall: 0.0025s flows/second: 54634.4 Runtime: 0.0025s