Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 22:55:02.832 00:05:02.473 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 22:59:11.076 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42856 9 6412 1 2025-11-23 22:56:02.900 00:05:02.427 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:01:11.894 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39696 9 6412 1 2025-11-23 23:01:57.582 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:01:57.886 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:02:12.299 00:00:10.832 TCP 1.101.0.1:3000 -> 23.104.0.1:58160 9 6412 1 2025-11-23 22:59:03.429 00:05:01.858 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 22:59:03.409 00:05:01.938 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:00:02.855 00:05:02.434 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 22:59:56.851 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2608 1 2025-11-23 23:04:23.946 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35958 1 40 1 2025-11-23 23:01:02.835 00:05:02.474 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:02:02.901 00:05:02.428 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:06:14.345 00:00:20.317 TCP 1.101.0.1:3000 -> 23.104.0.1:55184 9 6412 1 2025-11-23 23:06:58.758 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:06:58.757 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:07:35.092 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56236 1 40 1 2025-11-23 23:08:25.137 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33426 10 6452 1 2025-11-23 23:05:03.410 00:05:01.939 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:05:03.431 00:05:01.859 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:05:16.859 00:05:10.961 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-23 23:09:25.537 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33602 9 6412 1 2025-11-23 23:06:02.855 00:05:02.435 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 23:07:02.834 00:05:02.476 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:11:26.373 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45178 9 6412 1 2025-11-23 23:11:57.937 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:11:57.936 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:08:02.902 00:05:02.429 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:12:26.775 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51718 9 6412 1 2025-11-23 23:13:37.503 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52076 1 40 1 2025-11-23 23:14:27.549 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37922 9 6412 1 2025-11-23 23:10:36.862 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2640 1 2025-11-23 23:11:03.418 00:05:01.933 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:11:03.438 00:05:01.852 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:15:27.959 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35446 10 6452 1 2025-11-23 23:12:02.856 00:05:02.435 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 23:16:38.736 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50778 1 40 1 2025-11-23 23:16:58.069 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:16:58.339 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:13:02.836 00:05:02.475 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:17:28.787 00:00:10.534 TCP 1.101.0.1:3000 -> 23.104.0.1:48512 9 6412 1 2025-11-23 23:14:02.904 00:05:02.429 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:18:39.746 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55446 1 40 1 2025-11-23 23:15:56.874 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-23 23:20:30.195 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34700 10 6452 1 2025-11-23 23:17:03.419 00:05:01.933 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:17:03.439 00:05:01.853 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:21:30.593 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49750 10 6452 1 2025-11-23 23:21:58.321 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:21:58.260 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:18:02.857 00:05:02.438 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 23:19:02.842 00:05:02.474 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:23:41.764 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44928 1 40 1 2025-11-23 23:20:02.908 00:05:02.428 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:21:16.879 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-23 23:25:32.205 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51018 9 6412 1 2025-11-23 23:26:42.937 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 1 40 1 2025-11-23 23:26:58.484 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:26:58.477 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:23:03.420 00:05:01.936 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:23:03.440 00:05:01.856 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:24:02.860 00:05:02.437 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 23:25:02.839 00:05:02.477 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:29:44.163 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34148 1 40 1 2025-11-23 23:26:02.910 00:05:02.428 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:30:44.561 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40692 1 40 1 2025-11-23 23:26:36.888 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2608 1 2025-11-23 23:31:34.600 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60616 9 6412 1 2025-11-23 23:31:58.552 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:31:58.480 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:32:45.332 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 1 40 1 2025-11-23 23:29:03.443 00:05:01.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:29:03.423 00:05:01.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:33:45.742 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52070 1 40 1 2025-11-23 23:30:02.861 00:05:02.437 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 23:31:02.841 00:05:02.477 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:35:36.201 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57066 10 6452 1 2025-11-23 23:32:02.911 00:05:02.428 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:31:56.898 00:05:10.372 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-23 23:36:58.535 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:36:58.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:37:37.010 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60422 10 6452 1 2025-11-23 23:38:37.416 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34564 10 6452 1 2025-11-23 23:35:03.424 00:05:01.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:35:03.444 00:05:01.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:39:37.823 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58676 9 6412 1 2025-11-23 23:36:02.862 00:05:02.435 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 23:40:38.224 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39548 10 6452 1 2025-11-23 23:37:02.842 00:05:02.475 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:37:16.907 00:05:10.087 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2848 1 2025-11-23 23:41:48.932 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35466 1 40 1 2025-11-23 23:41:58.651 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:41:58.733 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:38:02.911 00:05:02.427 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:44:39.784 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:55244 9 6412 1 2025-11-23 23:41:03.447 00:05:01.853 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:41:03.426 00:05:01.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:45:40.222 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45486 10 6452 1 2025-11-23 23:42:02.865 00:05:02.435 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 23:42:36.917 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2488 1 2025-11-23 23:46:40.625 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44132 9 6412 1 2025-11-23 23:46:58.881 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:46:58.893 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:43:02.845 00:05:02.475 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:47:41.029 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59290 10 6452 1 2025-11-23 23:44:02.912 00:05:02.429 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:48:51.759 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 1 40 1 2025-11-23 23:50:42.165 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 10 6452 1 2025-11-23 23:47:03.426 00:05:01.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:47:03.447 00:05:01.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:51:42.569 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41188 9 6412 1 2025-11-23 23:51:58.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:51:58.886 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:48:02.868 00:05:02.434 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-23 23:47:56.926 00:05:10.022 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-11-23 23:52:42.973 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59274 10 6452 1 2025-11-23 23:49:02.848 00:05:02.474 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-23 23:53:43.383 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58480 10 6452 1 2025-11-23 23:50:02.916 00:05:02.426 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-23 23:54:54.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37428 1 40 1 2025-11-23 23:55:54.531 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55142 1 40 1 2025-11-23 23:56:54.933 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41208 1 40 1 2025-11-23 23:56:59.195 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 23:56:59.205 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 23:53:03.449 00:05:01.854 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-23 23:53:03.428 00:05:01.934 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-23 23:53:16.929 00:05:10.680 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-23 23:57:44.973 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36378 9 6412 1 2025-11-23 23:54:02.869 00:05:02.433 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 Summary: total flows: 130, total bytes: 258240, total packets: 1364, avg bps: 537, avg pps: 0, avg bpp: 189 Time window: 2025-11-23 22:55:02 - 2025-11-23 23:59:05 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0044s User: 0.0022s Wall: 0.0020s flows/second: 66633.2 Runtime: 0.0020s