Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 03:54:55.332 00:05:04.066 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 03:59:01.305 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 11 10329 1 2025-11-12 03:55:55.312 00:05:04.106 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:00:01.786 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47170 10 6452 1 2025-11-12 03:56:56.304 00:05:03.135 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:01:16.097 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:01:16.101 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 03:57:52.712 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2404 1 2025-11-12 04:02:02.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55246 10 6452 1 2025-11-12 03:58:57.655 00:05:01.744 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 03:58:57.636 00:05:01.824 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:04:13.750 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43416 1 40 1 2025-11-12 04:00:55.335 00:05:04.065 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:05:03.788 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49296 9 6412 1 2025-11-12 04:01:55.315 00:05:04.105 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:06:15.759 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:06:15.947 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:02:56.306 00:05:03.133 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:03:12.717 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2828 1 2025-11-12 04:08:05.226 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32920 10 6452 1 2025-11-12 04:04:57.657 00:05:01.744 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:04:57.637 00:05:01.824 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:09:05.631 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38024 9 6412 1 2025-11-12 04:10:06.036 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:51348 9 6412 1 2025-11-12 04:06:55.336 00:05:04.065 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:11:15.804 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:11:15.878 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:11:06.417 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50900 10 6452 1 2025-11-12 04:07:55.317 00:05:04.104 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:08:32.723 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-12 04:08:56.307 00:05:03.135 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:14:17.996 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53256 1 40 1 2025-11-12 04:10:57.637 00:05:01.825 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:10:57.660 00:05:01.744 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:15:08.030 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56556 10 6452 1 2025-11-12 04:16:16.375 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:16:18.795 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52422 1 40 1 2025-11-12 04:16:16.144 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:12:55.339 00:05:04.063 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:17:08.831 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45348 10 6452 1 2025-11-12 04:13:55.319 00:05:04.104 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:13:52.730 00:05:10.024 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2688 1 2025-11-12 04:18:19.576 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60446 1 40 1 2025-11-12 04:14:56.308 00:05:03.134 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:19:09.618 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44850 10 6452 1 2025-11-12 04:16:57.642 00:05:01.821 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:16:57.663 00:05:01.740 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:21:15.971 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:21:16.144 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:22:10.790 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59838 10 6452 1 2025-11-12 04:18:55.339 00:05:04.064 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:19:12.756 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-12 04:23:21.698 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45460 1 40 1 2025-11-12 04:19:55.320 00:05:04.104 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:20:56.310 00:05:03.136 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:25:22.484 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 1 40 1 2025-11-12 04:26:16.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:26:16.251 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:26:12.519 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 10 6452 1 2025-11-12 04:22:57.646 00:05:01.817 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:22:57.667 00:05:01.737 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:24:32.768 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2404 1 2025-11-12 04:24:55.343 00:05:04.063 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:29:13.757 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38724 9 6412 1 2025-11-12 04:25:55.321 00:05:04.103 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:30:14.163 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-11-12 04:26:56.311 00:05:03.135 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:31:16.445 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:31:16.211 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:31:14.564 00:00:17.275 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 9 6412 1 2025-11-12 04:28:57.653 00:05:01.813 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:28:57.673 00:05:01.732 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:29:52.781 00:05:10.020 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-12 04:30:55.343 00:05:04.062 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:35:23.381 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 9 6412 1 2025-11-12 04:31:55.322 00:05:04.104 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:36:16.319 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:36:16.573 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:36:23.794 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36916 10 6452 1 2025-11-12 04:32:56.311 00:05:03.135 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:37:34.567 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60694 1 40 1 2025-11-12 04:34:57.674 00:05:01.733 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:34:57.655 00:05:01.813 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:35:12.801 00:05:00.337 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2736 1 2025-11-12 04:39:25.020 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60748 10 6452 1 2025-11-12 04:40:35.795 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45768 1 40 1 2025-11-12 04:36:55.344 00:05:04.063 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:41:16.579 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:41:16.871 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:41:25.835 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41566 10 6452 1 2025-11-12 04:37:55.324 00:05:04.104 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:42:26.244 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51412 9 6412 1 2025-11-12 04:38:56.312 00:05:03.135 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:43:26.648 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 9 6412 1 2025-11-12 04:40:22.811 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2560 1 2025-11-12 04:40:57.654 00:05:01.814 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:40:57.674 00:05:01.734 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:45:27.410 00:00:10.726 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-11-12 04:46:16.603 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:46:16.549 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:46:38.543 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 1 40 1 2025-11-12 04:42:55.345 00:05:04.063 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:43:55.326 00:05:04.104 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:48:28.967 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-11-12 04:44:56.314 00:05:03.134 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:49:29.385 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-11-12 04:45:42.824 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-11-12 04:50:40.169 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46692 1 40 1 2025-11-12 04:46:57.678 00:05:01.732 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:46:57.657 00:05:01.812 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:51:16.709 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:51:16.830 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:52:30.608 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51410 9 6412 1 2025-11-12 04:48:55.346 00:05:04.064 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-12 04:53:31.011 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-11-12 04:49:55.325 00:05:04.105 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-12 04:50:56.318 00:05:03.132 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:51:02.830 00:05:10.526 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-12 04:55:31.824 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33880 9 6412 1 2025-11-12 04:56:16.748 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:56:16.662 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:52:57.658 00:05:01.813 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-12 04:52:57.679 00:05:01.733 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-12 04:57:42.995 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 1 40 1 Summary: total flows: 124, total bytes: 255405, total packets: 1350, avg bps: 539, avg pps: 0, avg bpp: 189 Time window: 2025-11-12 03:54:55 - 2025-11-12 04:57:59 Total flows processed: 124, passed: 124, Blocks skipped: 0, Bytes read: 12960 Sys: 0.0056s User: 0.0009s Wall: 0.0018s flows/second: 67031.0 Runtime: 0.0019s