Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 14:54:55.975 00:05:04.154 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 14:55:35.787 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2640 1 2025-11-13 14:55:55.956 00:05:04.194 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 14:59:56.159 00:00:14.852 TCP 1.101.0.1:3000 -> 23.104.0.1:46164 12 10369 1 2025-11-13 14:56:56.940 00:05:03.229 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:01:11.535 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52782 1 40 1 2025-11-13 15:01:57.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:01:57.754 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:02:01.575 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36738 10 6452 1 2025-11-13 14:58:58.363 00:05:01.826 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 14:58:58.382 00:05:01.747 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:00:55.976 00:05:04.155 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:00:55.789 00:05:10.848 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-13 15:05:02.739 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42632 10 6452 1 2025-11-13 15:01:55.956 00:05:04.196 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:06:03.142 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52372 10 6452 1 2025-11-13 15:02:56.942 00:05:03.231 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:06:58.025 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:06:57.982 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:07:13.869 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35694 1 40 1 2025-11-13 15:08:03.906 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52260 10 6452 1 2025-11-13 15:04:58.363 00:05:01.829 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:04:58.384 00:05:01.748 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:09:14.676 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36980 1 40 1 2025-11-13 15:10:04.711 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45032 10 6452 1 2025-11-13 15:06:15.798 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-13 15:06:55.978 00:05:04.154 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:07:55.959 00:05:04.194 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:11:58.202 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:11:58.505 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:12:15.812 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36996 1 40 1 2025-11-13 15:08:56.942 00:05:03.231 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:13:16.217 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52262 1 40 1 2025-11-13 15:14:06.256 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 9 6412 1 2025-11-13 15:10:58.365 00:05:01.833 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:10:58.383 00:05:01.753 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:15:06.659 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59628 10 6452 1 2025-11-13 15:11:35.802 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-13 15:16:07.020 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40062 10 6452 1 2025-11-13 15:16:58.134 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:12:55.981 00:05:04.154 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:16:58.139 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:13:55.960 00:05:04.195 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:14:56.946 00:05:03.230 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:19:18.568 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35258 1 40 1 2025-11-13 15:16:58.385 00:05:01.751 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:16:58.365 00:05:01.832 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:16:55.810 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2812 1 2025-11-13 15:21:08.980 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38550 9 6412 1 2025-11-13 15:21:58.484 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:21:58.551 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:22:09.383 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2025-11-13 15:18:55.984 00:05:04.153 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:19:55.964 00:05:04.193 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:24:10.211 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47136 9 6412 1 2025-11-13 15:20:56.948 00:05:03.230 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:22:15.826 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2664 1 2025-11-13 15:22:58.365 00:05:01.833 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:26:58.319 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:26:58.237 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:22:58.386 00:05:01.752 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:27:11.391 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52058 10 6452 1 2025-11-13 15:28:11.798 00:00:10.507 TCP 1.101.0.1:3000 -> 23.104.0.1:33712 9 6412 1 2025-11-13 15:24:55.986 00:05:04.154 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:29:12.343 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2025-11-13 15:25:55.965 00:05:04.195 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:30:23.057 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 1 40 1 2025-11-13 15:26:56.948 00:05:03.231 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:27:35.837 00:05:09.997 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2416 1 2025-11-13 15:31:58.415 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:31:58.477 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:32:13.538 00:00:10.866 TCP 1.101.0.1:3000 -> 23.104.0.1:45434 9 6412 1 2025-11-13 15:28:58.386 00:05:01.753 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:28:58.367 00:05:01.834 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:33:24.767 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 1 40 1 2025-11-13 15:34:14.809 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 12 10369 1 2025-11-13 15:30:55.986 00:05:04.155 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:35:25.608 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 1 40 1 2025-11-13 15:31:55.970 00:05:04.190 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:36:15.650 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35508 12 6556 1 2025-11-13 15:32:56.952 00:05:03.228 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:36:58.585 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:36:58.458 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:32:55.845 00:05:09.993 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2512 1 2025-11-13 15:37:16.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45580 9 6412 1 2025-11-13 15:34:58.383 00:05:01.818 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:34:58.405 00:05:01.738 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:39:16.877 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60888 10 6452 1 2025-11-13 15:40:17.292 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37050 9 6412 1 2025-11-13 15:36:55.991 00:05:04.150 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:41:17.694 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40774 10 6452 1 2025-11-13 15:41:58.532 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:41:58.673 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:37:55.972 00:05:04.189 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:38:15.838 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-13 15:42:18.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-11-13 15:38:56.953 00:05:03.229 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:40:58.404 00:05:01.738 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:40:58.384 00:05:01.819 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:45:29.728 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39562 1 40 1 2025-11-13 15:46:59.097 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:46:59.016 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:42:55.995 00:05:04.147 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:47:38.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38830 1 40 1 2025-11-13 15:43:35.846 00:05:10.017 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2700 1 2025-11-13 15:43:55.977 00:05:04.186 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:48:39.094 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33962 1 40 1 2025-11-13 15:44:56.957 00:05:03.226 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:49:39.501 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42410 1 40 1 2025-11-13 15:50:29.544 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35918 10 6452 1 2025-11-13 15:46:58.384 00:05:01.819 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:46:58.405 00:05:01.738 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:51:58.896 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:51:58.838 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:52:30.323 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38616 9 6412 1 2025-11-13 15:48:55.998 00:05:04.146 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 15:48:55.863 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-13 15:53:41.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57574 1 40 1 2025-11-13 15:49:55.979 00:05:04.186 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 15:54:41.597 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 1 40 1 2025-11-13 15:50:56.958 00:05:03.226 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 15:55:42.006 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48096 1 40 1 2025-11-13 15:56:32.047 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50248 10 6452 1 2025-11-13 15:56:58.879 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:56:58.879 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:52:58.406 00:05:01.738 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 15:52:58.385 00:05:01.819 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 15:54:15.872 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2640 1 2025-11-13 15:58:43.139 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 1 40 1 Summary: total flows: 129, total bytes: 249518, total packets: 1381, avg bps: 515, avg pps: 0, avg bpp: 180 Time window: 2025-11-13 14:54:55 - 2025-11-13 15:59:25 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0038s User: 0.0013s Wall: 0.0024s flows/second: 52802.3 Runtime: 0.0025s