Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 05:54:55.774 00:05:04.142 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 05:59:18.114 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34626 10 6452 1 2025-11-13 05:55:55.753 00:05:04.183 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:00:18.537 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 9 6412 1 2025-11-13 05:56:56.781 00:05:03.176 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:01:18.951 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 10 6452 1 2025-11-13 05:57:34.982 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-13 06:01:47.193 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:01:46.965 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:02:19.393 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52736 10 6452 1 2025-11-13 05:58:58.185 00:05:01.792 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 05:58:58.204 00:05:01.712 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:03:30.132 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41046 1 40 1 2025-11-13 06:04:30.539 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54008 1 40 1 2025-11-13 06:00:55.775 00:05:04.141 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:05:20.572 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43772 9 6412 1 2025-11-13 06:01:55.757 00:05:04.182 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:06:20.975 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40226 9 6412 1 2025-11-13 06:06:47.106 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:06:47.164 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:02:56.782 00:05:03.177 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:02:54.992 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-13 06:07:21.383 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58894 9 6412 1 2025-11-13 06:08:32.164 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 1 40 1 2025-11-13 06:04:58.208 00:05:01.711 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:04:58.188 00:05:01.791 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:09:22.202 00:00:10.750 TCP 1.101.0.1:3000 -> 23.104.0.1:59734 9 6412 1 2025-11-13 06:10:33.369 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56626 1 40 1 2025-11-13 06:06:55.776 00:05:04.143 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:11:33.769 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 1 40 1 2025-11-13 06:11:47.160 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:11:47.308 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:07:55.756 00:05:04.185 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:08:14.996 00:05:00.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2348 1 2025-11-13 06:12:23.805 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2025-11-13 06:08:56.784 00:05:03.175 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:14:24.702 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 9 6412 1 2025-11-13 06:10:58.210 00:05:01.709 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:10:58.191 00:05:01.789 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:15:25.082 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53512 9 6412 1 2025-11-13 06:16:25.443 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 9 6412 1 2025-11-13 06:16:47.635 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:16:47.883 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:12:55.778 00:05:04.144 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:13:25.007 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2752 1 2025-11-13 06:13:55.758 00:05:04.184 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:18:26.300 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 9 6412 1 2025-11-13 06:14:56.785 00:05:03.178 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:19:26.708 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56816 9 6412 1 2025-11-13 06:20:27.131 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48602 10 6452 1 2025-11-13 06:16:58.191 00:05:01.794 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:16:58.212 00:05:01.715 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:21:27.491 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44806 10 6452 1 2025-11-13 06:21:47.557 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:21:47.516 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:22:27.891 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33112 10 6452 1 2025-11-13 06:18:45.013 00:05:10.040 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-13 06:18:55.790 00:05:04.137 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:23:28.311 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50690 10 6452 1 2025-11-13 06:19:55.760 00:05:04.188 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:24:28.674 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48594 9 6412 1 2025-11-13 06:20:56.790 00:05:03.178 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:25:29.084 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33340 9 6412 1 2025-11-13 06:26:29.448 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58380 10 6452 1 2025-11-13 06:26:47.457 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:26:47.452 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:22:58.213 00:05:01.715 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:22:58.193 00:05:01.796 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:24:05.053 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2560 1 2025-11-13 06:24:55.784 00:05:04.145 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:29:40.980 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59290 1 40 1 2025-11-13 06:25:55.764 00:05:04.185 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:30:31.019 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59296 10 6452 1 2025-11-13 06:26:56.790 00:05:03.181 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:31:31.422 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:50010 10 6452 1 2025-11-13 06:31:47.605 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:31:47.685 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:32:42.202 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53138 1 40 1 2025-11-13 06:28:58.215 00:05:01.716 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:28:58.195 00:05:01.798 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:29:25.060 00:05:10.217 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-11-13 06:33:42.566 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38936 1 40 1 2025-11-13 06:34:32.605 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35876 9 6412 1 2025-11-13 06:30:55.785 00:05:04.148 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:35:33.017 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-11-13 06:31:55.765 00:05:04.187 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:36:47.844 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:36:47.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:32:56.791 00:05:03.182 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:37:44.191 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49424 1 40 1 2025-11-13 06:38:44.552 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59932 1 40 1 2025-11-13 06:34:45.071 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-13 06:34:58.196 00:05:01.796 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:34:58.216 00:05:01.717 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:39:45.033 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33554 1 40 1 2025-11-13 06:36:55.785 00:05:04.148 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:41:45.781 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49230 1 40 1 2025-11-13 06:41:47.806 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:41:47.942 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:37:55.766 00:05:04.188 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:42:35.818 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40080 9 6412 1 2025-11-13 06:38:56.793 00:05:03.183 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:43:36.219 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60392 10 6452 1 2025-11-13 06:40:05.078 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2672 1 2025-11-13 06:44:36.624 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50880 10 6452 1 2025-11-13 06:40:58.198 00:05:01.797 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:40:58.217 00:05:01.718 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:46:47.953 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:46:37.438 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36268 10 6452 1 2025-11-13 06:46:48.127 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:42:55.786 00:05:04.150 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:47:37.831 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57210 10 6452 1 2025-11-13 06:43:55.767 00:05:04.191 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:44:56.797 00:05:03.181 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:45:25.089 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-13 06:46:58.203 00:05:01.795 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:46:58.224 00:05:01.715 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:51:39.377 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35924 9 6412 1 2025-11-13 06:51:47.960 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:51:48.118 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:52:50.125 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42250 1 40 1 2025-11-13 06:48:55.787 00:05:04.151 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 06:53:50.494 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35108 1 40 1 2025-11-13 06:49:55.767 00:05:04.191 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 06:54:40.544 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 9 6412 1 2025-11-13 06:50:45.095 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2640 1 2025-11-13 06:50:56.796 00:05:03.182 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 06:55:51.294 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45922 1 40 1 2025-11-13 06:56:48.143 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:56:48.145 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:56:41.331 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:45450 9 6412 1 2025-11-13 06:52:58.203 00:05:01.797 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 06:52:58.225 00:05:01.715 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 06:57:52.072 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33270 1 40 1 Summary: total flows: 134, total bytes: 283660, total packets: 1396, avg bps: 599, avg pps: 0, avg bpp: 203 Time window: 2025-11-13 05:54:55 - 2025-11-13 06:58:00 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0043s User: 0.0011s Wall: 0.0018s flows/second: 73067.7 Runtime: 0.0019s