Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 17:54:57.514 00:05:03.776 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 17:59:12.163 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 1 40 1 2025-11-15 17:55:57.508 00:05:03.802 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:00:12.572 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57320 1 40 1 2025-11-15 17:56:57.971 00:05:03.359 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:01:02.621 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37530 10 6452 1 2025-11-15 17:57:30.205 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2504 1 2025-11-15 18:02:03.039 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59396 9 6412 1 2025-11-15 18:02:58.863 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:02:58.988 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:58:59.376 00:05:01.914 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 17:58:59.356 00:05:01.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:03:13.810 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54948 1 40 1 2025-11-15 18:04:14.219 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46888 1 40 1 2025-11-15 18:00:57.533 00:05:03.757 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:05:14.621 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58966 1 40 1 2025-11-15 18:01:57.510 00:05:03.801 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:06:15.031 00:00:00.002 TCP 1.101.0.1:3000 -> 23.104.0.1:57472 2 80 1 2025-11-15 18:02:50.209 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-11-15 18:02:57.973 00:05:03.359 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:07:15.485 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50272 1 40 1 2025-11-15 18:07:59.234 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:07:59.309 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:08:05.526 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52792 9 6412 1 2025-11-15 18:04:59.358 00:05:01.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:04:59.377 00:05:01.913 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:10:16.669 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59594 1 40 1 2025-11-15 18:06:57.532 00:05:03.761 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:11:06.722 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56480 9 6412 1 2025-11-15 18:07:57.513 00:05:03.800 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:08:10.212 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-15 18:12:59.280 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:12:59.276 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:08:57.975 00:05:03.357 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:13:07.538 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35422 9 6412 1 2025-11-15 18:14:07.941 00:00:10.876 TCP 1.101.0.1:3000 -> 23.104.0.1:42210 9 6412 1 2025-11-15 18:10:59.382 00:05:01.913 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:10:59.362 00:05:01.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:15:08.862 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:50610 10 6452 1 2025-11-15 18:16:09.308 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38694 9 6412 1 2025-11-15 18:12:57.534 00:05:03.760 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:13:30.216 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-15 18:17:59.461 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:17:59.517 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:13:57.515 00:05:03.801 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:14:57.978 00:05:03.358 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:16:59.361 00:05:01.993 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:16:59.382 00:05:01.913 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:21:21.664 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45338 1 40 1 2025-11-15 18:22:59.723 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:18:50.224 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2640 1 2025-11-15 18:22:59.653 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:18:57.537 00:05:03.758 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:23:22.487 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46586 1 40 1 2025-11-15 18:19:57.517 00:05:03.798 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:20:57.990 00:05:03.345 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:25:23.216 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53548 1 40 1 2025-11-15 18:26:23.622 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60368 1 40 1 2025-11-15 18:22:59.364 00:05:01.992 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:22:59.385 00:05:01.912 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:27:13.659 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58832 10 6452 1 2025-11-15 18:27:59.605 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:27:59.509 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:28:14.033 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54800 10 6452 1 2025-11-15 18:24:10.229 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2624 1 2025-11-15 18:24:57.539 00:05:03.757 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:25:57.519 00:05:03.797 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:30:25.205 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35336 1 40 1 2025-11-15 18:26:57.991 00:05:03.346 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:31:25.604 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57112 1 40 1 2025-11-15 18:32:26.021 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 1 40 1 2025-11-15 18:32:59.662 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:32:59.660 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:28:59.365 00:05:01.991 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:28:59.386 00:05:01.911 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:29:30.235 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-11-15 18:34:16.461 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:60300 10 6452 1 2025-11-15 18:30:57.542 00:05:03.756 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:31:57.522 00:05:03.795 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:36:27.630 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53490 1 40 1 2025-11-15 18:32:57.992 00:05:03.346 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:37:17.666 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32864 9 6412 1 2025-11-15 18:38:00.262 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:38:00.316 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:34:50.246 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-15 18:34:59.387 00:05:01.910 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:34:59.368 00:05:01.989 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:39:18.476 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:54878 10 6452 1 2025-11-15 18:36:57.543 00:05:03.755 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:41:19.238 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35214 9 6412 1 2025-11-15 18:37:57.522 00:05:03.796 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:43:00.029 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:42:59.781 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:38:57.994 00:05:03.346 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:40:10.250 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2716 1 2025-11-15 18:44:30.808 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45504 1 40 1 2025-11-15 18:40:59.394 00:05:01.905 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:40:59.373 00:05:01.985 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:45:31.205 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56374 1 40 1 2025-11-15 18:46:31.686 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56722 1 40 1 2025-11-15 18:42:57.543 00:05:03.756 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:47:21.727 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 10 6452 1 2025-11-15 18:48:00.010 00:00:00.051 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:47:59.919 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:43:57.524 00:05:03.795 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:48:22.133 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41990 10 6452 1 2025-11-15 18:44:57.993 00:05:03.347 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:45:30.256 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-15 18:46:59.396 00:05:01.905 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:46:59.376 00:05:01.985 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:52:47.994 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54492 1 40 1 2025-11-15 18:53:00.295 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:53:00.252 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:48:57.546 00:05:03.756 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-15 18:49:57.525 00:05:03.797 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-15 18:54:48.755 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34504 1 40 1 2025-11-15 18:50:50.257 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-15 18:50:57.994 00:05:03.350 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-15 18:55:38.794 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41442 10 6452 1 2025-11-15 18:56:39.164 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34058 9 6412 1 2025-11-15 18:52:59.397 00:05:01.906 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-15 18:52:59.376 00:05:01.987 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-15 18:57:39.570 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34830 10 6452 1 2025-11-15 18:58:00.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 18:58:00.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 18:58:50.346 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40130 1 40 1 Summary: total flows: 126, total bytes: 194136, total packets: 1274, avg bps: 405, avg pps: 0, avg bpp: 152 Time window: 2025-11-15 17:54:57 - 2025-11-15 18:58:50 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0047s User: 0.0012s Wall: 0.0022s flows/second: 57531.3 Runtime: 0.0022s