Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 00:58:55.719 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59776 1 40 1 2025-11-09 00:59:45.517 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 00:59:45.463 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 00:55:53.964 00:05:03.516 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 00:59:45.756 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46334 9 6412 1 2025-11-09 00:56:54.850 00:05:02.669 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 00:56:53.943 00:05:03.556 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:00:46.162 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53522 9 6412 1 2025-11-09 00:56:56.463 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2816 1 2025-11-09 01:01:46.564 00:00:19.810 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 9 6412 1 2025-11-09 00:58:56.152 00:05:01.388 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 00:58:56.172 00:05:01.308 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:04:45.545 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:04:45.546 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:04:57.238 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-11-09 01:01:53.964 00:05:03.519 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:02:16.471 00:05:10.026 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-09 01:02:54.857 00:05:02.665 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:02:53.943 00:05:03.559 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:06:58.208 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54110 9 6412 1 2025-11-09 01:08:08.934 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 1 40 1 2025-11-09 01:04:56.175 00:05:01.307 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:04:56.157 00:05:01.387 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:09:09.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43710 1 40 1 2025-11-09 01:09:45.669 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:09:45.674 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:09:59.381 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47102 9 6412 1 2025-11-09 01:10:59.781 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46014 9 6412 1 2025-11-09 01:07:36.476 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-09 01:07:53.965 00:05:03.518 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:08:54.858 00:05:02.667 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:08:53.946 00:05:03.558 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:14:11.331 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33654 1 40 1 2025-11-09 01:14:46.350 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:14:46.567 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:10:56.155 00:05:01.389 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:10:56.176 00:05:01.308 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:16:12.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 1 40 1 2025-11-09 01:12:56.480 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-09 01:17:02.203 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35200 10 6452 1 2025-11-09 01:13:53.966 00:05:03.519 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:18:12.934 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40738 1 40 1 2025-11-09 01:14:54.861 00:05:02.666 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:14:53.948 00:05:03.558 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:19:02.975 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6452 1 2025-11-09 01:19:45.907 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:19:46.102 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:20:03.412 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42888 10 6452 1 2025-11-09 01:16:56.181 00:05:01.305 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:16:56.161 00:05:01.385 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:22:04.222 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51146 9 6412 1 2025-11-09 01:18:16.487 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2708 1 2025-11-09 01:23:14.991 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40620 1 40 1 2025-11-09 01:19:53.969 00:05:03.517 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:24:45.973 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:24:46.023 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:20:54.863 00:05:02.664 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:20:53.949 00:05:03.558 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:25:05.449 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59602 9 6412 1 2025-11-09 01:26:05.815 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:44506 9 6412 1 2025-11-09 01:22:56.161 00:05:01.386 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:22:56.183 00:05:01.305 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:27:06.197 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48038 9 6412 1 2025-11-09 01:23:36.496 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2768 1 2025-11-09 01:29:07.005 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37764 9 6412 1 2025-11-09 01:29:46.635 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:29:46.503 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:25:53.970 00:05:03.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:30:07.419 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40488 9 6412 1 2025-11-09 01:26:54.862 00:05:02.669 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:26:53.950 00:05:03.561 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:31:18.159 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 1 40 1 2025-11-09 01:28:56.163 00:05:01.389 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:28:56.183 00:05:01.309 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:28:56.499 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2304 1 2025-11-09 01:33:08.602 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34962 9 6412 1 2025-11-09 01:34:19.365 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59110 1 40 1 2025-11-09 01:34:46.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:34:46.217 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:35:09.400 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39456 10 6452 1 2025-11-09 01:31:53.971 00:05:03.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:36:20.168 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33250 1 40 1 2025-11-09 01:32:54.864 00:05:02.668 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:32:53.950 00:05:03.562 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:37:10.206 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41442 10 6452 1 2025-11-09 01:38:10.610 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52258 10 6452 1 2025-11-09 01:34:16.503 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-09 01:34:56.164 00:05:01.389 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:34:56.184 00:05:01.309 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:39:11.016 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57340 9 6412 1 2025-11-09 01:39:46.328 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:39:46.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:40:21.777 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 1 40 1 2025-11-09 01:37:53.971 00:05:03.523 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:42:12.214 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55402 10 6452 1 2025-11-09 01:38:54.868 00:05:02.666 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:38:53.952 00:05:03.562 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:43:12.625 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:39614 10 6452 1 2025-11-09 01:39:36.514 00:05:10.944 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-09 01:44:47.204 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:44:47.203 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:40:56.166 00:05:01.389 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:40:56.184 00:05:01.309 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:45:13.487 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55540 10 6452 1 2025-11-09 01:46:24.264 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42102 1 40 1 2025-11-09 01:47:24.667 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56290 1 40 1 2025-11-09 01:43:53.972 00:05:03.525 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:44:54.869 00:05:02.669 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:44:53.954 00:05:03.563 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:44:56.518 00:05:10.034 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2692 1 2025-11-09 01:49:15.077 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35844 10 6452 1 2025-11-09 01:49:46.472 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:49:46.392 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:50:15.482 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55422 10 6452 1 2025-11-09 01:46:56.166 00:05:01.392 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:46:56.186 00:05:01.312 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:51:15.884 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52946 9 6412 1 2025-11-09 01:52:16.252 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46816 9 6412 1 2025-11-09 01:49:53.976 00:05:03.523 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-09 01:54:17.035 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40628 10 6452 1 2025-11-09 01:50:16.523 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2600 1 2025-11-09 01:54:46.465 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 01:54:46.543 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 01:50:54.874 00:05:02.666 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-09 01:50:53.958 00:05:03.562 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-09 01:55:17.436 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41192 9 6412 1 2025-11-09 01:56:17.848 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40092 10 6452 1 2025-11-09 01:52:56.167 00:05:01.392 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-09 01:52:56.188 00:05:01.312 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-09 01:57:18.208 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 9 6412 1 Summary: total flows: 130, total bytes: 277340, total packets: 1387, avg bps: 595, avg pps: 0, avg bpp: 199 Time window: 2025-11-09 00:55:53 - 2025-11-09 01:57:57 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0035s User: 0.0017s Wall: 0.0026s flows/second: 49242.3 Runtime: 0.0027s