Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 19:55:03.225 00:05:02.536 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 19:56:03.303 00:05:02.478 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:00:10.289 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40312 1 40 1 2025-11-24 19:56:58.555 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-24 20:02:11.096 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41728 1 40 1 2025-11-24 20:02:23.221 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:02:23.191 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 19:59:03.835 00:05:01.967 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 19:59:03.855 00:05:01.886 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:00:03.246 00:05:02.495 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:01:03.227 00:05:02.535 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:02:03.304 00:05:02.478 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:06:02.345 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55844 9 6412 1 2025-11-24 20:02:18.560 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-24 20:07:23.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:07:23.340 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:08:13.514 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39254 1 40 1 2025-11-24 20:05:03.856 00:05:01.886 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:05:03.838 00:05:01.966 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:06:03.249 00:05:02.495 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:10:14.336 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57618 1 40 1 2025-11-24 20:07:03.228 00:05:02.536 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:11:04.378 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56074 9 6412 1 2025-11-24 20:07:38.570 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2648 1 2025-11-24 20:08:03.307 00:05:02.476 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:12:04.739 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44196 9 6412 1 2025-11-24 20:12:23.459 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:12:23.311 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:13:05.154 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55152 9 6412 1 2025-11-24 20:14:05.558 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43212 10 6452 1 2025-11-24 20:11:03.837 00:05:01.967 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:11:03.858 00:05:01.887 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:15:16.339 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56118 1 40 1 2025-11-24 20:12:03.250 00:05:02.495 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:16:16.740 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42896 1 40 1 2025-11-24 20:13:03.231 00:05:02.536 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:12:58.573 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2608 1 2025-11-24 20:17:23.488 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:17:23.358 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:14:03.308 00:05:02.479 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:19:07.624 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53090 9 6412 1 2025-11-24 20:20:08.045 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:46826 9 6412 1 2025-11-24 20:17:03.859 00:05:01.889 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:17:03.838 00:05:01.969 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:21:18.765 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40960 1 40 1 2025-11-24 20:18:03.252 00:05:02.496 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:22:19.183 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50636 1 40 1 2025-11-24 20:22:23.733 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:22:23.407 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:18:18.579 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-24 20:19:03.232 00:05:02.536 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:23:09.220 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39584 9 6412 1 2025-11-24 20:20:03.312 00:05:02.476 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:24:20.002 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38032 1 40 1 2025-11-24 20:25:10.041 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41526 9 6412 1 2025-11-24 20:26:10.445 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37938 10 6452 1 2025-11-24 20:23:03.842 00:05:01.968 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:23:03.860 00:05:01.888 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:27:23.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:27:23.833 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:27:10.806 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35428 10 6452 1 2025-11-24 20:23:38.583 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2688 1 2025-11-24 20:24:03.253 00:05:02.496 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:25:03.232 00:05:02.536 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:29:21.967 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48926 1 40 1 2025-11-24 20:26:03.313 00:05:02.476 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:31:12.419 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:50570 12 10375 1 2025-11-24 20:32:23.803 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:32:23.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:28:58.588 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-24 20:29:03.863 00:05:01.891 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:29:03.843 00:05:01.971 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:33:13.317 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37326 9 6412 1 2025-11-24 20:30:03.254 00:05:02.503 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:34:13.716 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6452 1 2025-11-24 20:31:03.233 00:05:02.543 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:35:24.455 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42286 1 40 1 2025-11-24 20:32:03.314 00:05:02.483 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:36:14.492 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57572 9 6412 1 2025-11-24 20:37:23.834 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:37:14.897 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44346 9 6412 1 2025-11-24 20:37:23.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:38:15.299 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 9 6412 1 2025-11-24 20:34:18.596 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2696 1 2025-11-24 20:35:03.863 00:05:01.895 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:35:03.844 00:05:01.974 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:39:26.077 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60308 1 40 1 2025-11-24 20:36:03.253 00:05:02.504 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:40:26.497 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33772 1 40 1 2025-11-24 20:37:03.235 00:05:02.543 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:38:03.316 00:05:02.483 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:42:23.857 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:42:23.972 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:39:38.606 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2624 1 2025-11-24 20:44:17.784 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55628 10 6452 1 2025-11-24 20:41:03.845 00:05:01.974 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:41:03.865 00:05:01.894 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:45:18.199 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38012 10 6452 1 2025-11-24 20:42:03.257 00:05:02.501 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:46:28.978 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42918 1 40 1 2025-11-24 20:43:03.238 00:05:02.541 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:47:24.378 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:47:24.372 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:47:29.393 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 1 40 1 2025-11-24 20:44:03.319 00:05:02.481 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:48:19.439 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44906 10 6452 1 2025-11-24 20:44:58.614 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-24 20:49:19.803 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41786 10 6452 1 2025-11-24 20:50:31.277 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45398 1 40 1 2025-11-24 20:47:03.866 00:05:01.894 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:47:03.845 00:05:01.974 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:51:21.317 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:36328 12 10369 1 2025-11-24 20:48:03.259 00:05:02.501 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-24 20:52:24.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:52:23.995 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:52:21.792 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46354 10 6452 1 2025-11-24 20:49:03.239 00:05:02.541 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-24 20:53:22.207 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45780 10 6452 1 2025-11-24 20:50:03.321 00:05:02.478 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 20:50:18.623 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-24 20:54:22.613 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48486 10 6452 1 2025-11-24 20:56:23.420 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51508 9 6412 1 2025-11-24 20:53:03.847 00:05:01.973 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-24 20:53:03.867 00:05:01.893 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-24 20:57:24.295 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 20:57:24.204 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 20:57:23.784 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-11-24 20:54:03.262 00:05:02.500 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 Summary: total flows: 128, total bytes: 253072, total packets: 1348, avg bps: 526, avg pps: 0, avg bpp: 187 Time window: 2025-11-24 19:55:03 - 2025-11-24 20:59:05 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0032s User: 0.0021s Wall: 0.0017s flows/second: 73443.4 Runtime: 0.0018s