Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 00:58:49.287 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38934 9 6412 1 2025-11-16 00:54:57.708 00:05:03.725 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 00:59:49.692 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43918 10 6452 1 2025-11-16 00:55:57.688 00:05:03.765 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 00:56:01.468 00:05:56.734 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:01:00.494 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 1 40 1 2025-11-16 01:02:00.892 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50942 1 40 1 2025-11-16 00:57:50.711 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2640 1 2025-11-16 00:58:59.545 00:05:01.888 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:02:50.930 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49590 10 6452 1 2025-11-16 00:58:59.527 00:05:01.967 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:03:07.665 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:03:07.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:03:51.336 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42924 10 6452 1 2025-11-16 01:04:51.745 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 10 6452 1 2025-11-16 01:00:57.707 00:05:03.726 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:01:57.687 00:05:03.766 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:06:02.527 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52074 1 40 1 2025-11-16 01:02:01.473 00:05:56.731 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:07:02.933 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45386 1 40 1 2025-11-16 01:03:10.716 00:05:10.063 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2504 1 2025-11-16 01:08:07.501 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:08:07.933 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:04:59.528 00:05:01.967 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:08:53.380 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 9 6412 1 2025-11-16 01:04:59.549 00:05:01.886 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:09:53.776 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33710 10 6452 1 2025-11-16 01:06:57.709 00:05:03.725 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:12:04.952 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48096 1 40 1 2025-11-16 01:07:57.691 00:05:03.765 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:08:30.721 00:05:10.056 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2664 1 2025-11-16 01:08:01.474 00:05:56.731 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:12:55.000 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55070 10 6452 1 2025-11-16 01:13:07.643 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:13:07.946 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:10:59.550 00:05:01.885 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:10:59.530 00:05:01.966 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:15:06.175 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 1 40 1 2025-11-16 01:15:56.212 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 9 6412 1 2025-11-16 01:12:57.712 00:05:03.723 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:17:06.936 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 1 40 1 2025-11-16 01:13:57.692 00:05:03.763 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:13:50.725 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-11-16 01:18:07.352 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52058 1 40 1 2025-11-16 01:18:07.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:18:07.990 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:14:01.477 00:05:56.730 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:18:57.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45234 9 6412 1 2025-11-16 01:16:59.532 00:05:01.966 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:16:59.553 00:05:01.885 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:20:58.220 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54286 9 6412 1 2025-11-16 01:21:58.625 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:38802 12 10375 1 2025-11-16 01:18:57.714 00:05:03.724 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:22:59.127 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-11-16 01:23:08.071 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:23:07.921 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:19:10.727 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-11-16 01:19:57.695 00:05:03.764 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:20:01.477 00:05:56.730 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:24:59.940 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34120 10 6452 1 2025-11-16 01:22:59.561 00:05:01.878 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:22:59.541 00:05:01.957 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:27:00.745 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:43986 11 10335 1 2025-11-16 01:28:08.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:28:08.220 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:28:01.229 00:00:10.729 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 9 6412 1 2025-11-16 01:24:30.744 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-16 01:24:57.724 00:05:03.714 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:29:12.361 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50500 1 40 1 2025-11-16 01:25:57.704 00:05:03.754 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:30:12.765 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44734 1 40 1 2025-11-16 01:26:01.479 00:05:56.732 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:31:13.169 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42900 1 40 1 2025-11-16 01:28:59.562 00:05:01.877 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:28:59.542 00:05:01.958 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:33:07.996 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:33:08.258 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:29:50.751 00:05:10.018 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2664 1 2025-11-16 01:30:57.731 00:05:03.708 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:35:04.386 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-11-16 01:31:57.709 00:05:03.750 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:36:04.789 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:46012 11 6516 1 2025-11-16 01:32:01.480 00:05:56.732 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:37:15.582 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44766 1 40 1 2025-11-16 01:38:08.709 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:38:08.709 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:38:05.618 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46712 9 6412 1 2025-11-16 01:34:59.544 00:05:01.956 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:34:59.565 00:05:01.876 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:39:06.044 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46168 10 6452 1 2025-11-16 01:35:10.770 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2584 1 2025-11-16 01:40:06.447 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 9 6412 1 2025-11-16 01:36:57.732 00:05:03.709 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:41:06.849 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37328 9 6412 1 2025-11-16 01:37:57.711 00:05:03.751 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:42:07.265 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:54190 12 10375 1 2025-11-16 01:38:01.482 00:05:56.733 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:43:08.339 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:43:08.338 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:43:18.073 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60196 1 40 1 2025-11-16 01:44:08.133 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36246 9 6412 1 2025-11-16 01:40:30.776 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2508 1 2025-11-16 01:40:59.546 00:05:01.957 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:40:59.566 00:05:01.877 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:42:57.732 00:05:03.711 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:47:09.310 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 9 6412 1 2025-11-16 01:43:57.713 00:05:03.752 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:48:08.502 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:48:08.586 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:44:01.483 00:05:56.735 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:49:10.086 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56190 10 6452 1 2025-11-16 01:45:50.788 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2508 1 2025-11-16 01:46:59.569 00:05:01.876 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:46:59.548 00:05:01.957 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:48:57.734 00:05:03.712 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-16 01:53:08.569 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:53:08.571 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:53:11.702 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 9 6412 1 2025-11-16 01:49:57.713 00:05:03.752 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-16 01:54:12.074 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 9 6412 1 2025-11-16 01:50:01.484 00:05:56.736 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-16 01:55:12.435 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39266 9 6412 1 2025-11-16 01:51:10.797 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-16 01:56:23.131 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42070 1 40 1 2025-11-16 01:52:59.551 00:05:01.955 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-16 01:52:59.572 00:05:01.874 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-16 01:57:13.168 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55458 9 6412 1 2025-11-16 01:58:09.360 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:58:08.932 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:58:13.570 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 10 6452 1 Summary: total flows: 130, total bytes: 282661, total packets: 1384, avg bps: 594, avg pps: 0, avg bpp: 204 Time window: 2025-11-16 00:54:57 - 2025-11-16 01:58:23 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0030s User: 0.0020s Wall: 0.0027s flows/second: 47583.5 Runtime: 0.0028s