Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 03:55:03.389 00:05:02.542 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 03:59:45.374 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34304 10 6452 1 2025-11-25 03:56:03.490 00:05:02.464 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 03:56:29.244 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-25 04:01:46.155 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56326 10 6452 1 2025-11-25 04:02:32.869 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:02:32.949 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:02:46.518 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51704 9 6412 1 2025-11-25 03:59:03.963 00:05:02.009 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 03:59:03.983 00:05:01.929 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:00:03.413 00:05:02.501 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:01:03.392 00:05:02.541 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:01:49.251 00:05:10.061 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-25 04:05:58.062 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57706 1 40 1 2025-11-25 04:02:03.491 00:05:02.462 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:07:32.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:07:32.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:08:59.258 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51260 1 40 1 2025-11-25 04:05:03.984 00:05:01.929 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:05:03.963 00:05:02.009 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:09:49.298 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39198 9 6412 1 2025-11-25 04:06:03.412 00:05:02.500 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:07:03.393 00:05:02.540 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:07:09.266 00:05:10.958 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-25 04:12:00.501 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39760 1 40 1 2025-11-25 04:08:03.495 00:05:02.459 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:12:33.246 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:12:33.379 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:12:50.537 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45280 10 6452 1 2025-11-25 04:14:01.307 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57320 1 40 1 2025-11-25 04:14:51.339 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37618 9 6412 1 2025-11-25 04:11:03.965 00:05:02.012 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:11:03.986 00:05:01.932 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:15:51.743 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58266 10 6452 1 2025-11-25 04:12:03.414 00:05:02.503 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:12:29.270 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2568 1 2025-11-25 04:13:03.395 00:05:02.543 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:17:32.995 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:17:33.010 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:18:02.847 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44808 1 40 1 2025-11-25 04:14:03.498 00:05:02.460 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:19:03.260 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52598 1 40 1 2025-11-25 04:20:03.661 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53168 1 40 1 2025-11-25 04:21:04.070 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34432 1 40 1 2025-11-25 04:17:03.968 00:05:02.011 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:17:03.988 00:05:01.931 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:17:49.277 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-25 04:22:04.467 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55786 1 40 1 2025-11-25 04:18:03.417 00:05:02.502 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:22:33.258 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:22:33.200 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:22:54.501 00:00:11.309 TCP 1.101.0.1:3000 -> 23.104.0.1:54964 9 6412 1 2025-11-25 04:19:03.396 00:05:02.543 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:20:03.505 00:05:02.454 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:23:55.854 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:53280 10 6452 1 2025-11-25 04:25:06.648 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36582 1 40 1 2025-11-25 04:25:56.687 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56132 9 6412 1 2025-11-25 04:23:03.969 00:05:02.014 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:23:03.988 00:05:01.933 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:23:09.279 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-25 04:27:33.210 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:27:33.493 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:24:03.418 00:05:02.504 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:29:08.303 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58094 1 40 1 2025-11-25 04:25:03.398 00:05:02.544 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:26:03.506 00:05:02.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:29:58.339 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57172 10 6452 1 2025-11-25 04:30:58.744 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50468 10 6452 1 2025-11-25 04:31:59.164 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58380 10 6452 1 2025-11-25 04:32:33.249 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:32:33.312 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:28:29.284 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2608 1 2025-11-25 04:29:03.969 00:05:02.015 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:29:03.990 00:05:01.935 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:30:03.422 00:05:02.503 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:33:59.956 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49508 10 6452 1 2025-11-25 04:31:03.401 00:05:02.546 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:35:00.381 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43460 10 6452 1 2025-11-25 04:32:03.509 00:05:02.461 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:36:11.118 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41984 1 40 1 2025-11-25 04:37:11.529 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40052 1 40 1 2025-11-25 04:37:33.446 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:37:33.518 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:33:49.290 00:05:10.324 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-25 04:35:03.991 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:35:03.972 00:05:02.018 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:39:01.928 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37528 11 6516 1 2025-11-25 04:36:03.423 00:05:02.506 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:40:02.338 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56300 10 6452 1 2025-11-25 04:37:03.405 00:05:02.544 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:41:13.113 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 1 40 1 2025-11-25 04:38:03.510 00:05:02.460 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:42:03.153 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34950 10 6452 1 2025-11-25 04:42:33.550 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:42:33.705 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:43:13.919 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42636 1 40 1 2025-11-25 04:39:09.299 00:05:10.037 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2632 1 2025-11-25 04:41:03.993 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:41:03.973 00:05:02.018 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:42:03.428 00:05:02.504 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:46:04.839 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51954 9 6412 1 2025-11-25 04:43:03.407 00:05:02.545 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:47:33.585 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:47:33.749 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:44:03.511 00:05:02.461 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:48:15.987 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37718 1 40 1 2025-11-25 04:44:29.308 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2624 1 2025-11-25 04:49:06.028 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34852 9 6412 1 2025-11-25 04:47:03.974 00:05:02.018 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:47:03.993 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-25 04:51:06.814 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 10 6452 1 2025-11-25 04:48:03.430 00:05:02.503 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:52:07.259 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51202 10 6452 1 2025-11-25 04:52:33.906 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:52:33.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:49:03.411 00:05:02.544 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-25 04:53:07.666 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:53774 9 6412 1 2025-11-25 04:49:49.317 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-25 04:50:03.511 00:05:02.463 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 04:55:08.444 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 10 6452 1 2025-11-25 04:56:08.850 00:00:10.728 TCP 1.101.0.1:3000 -> 23.104.0.1:37152 9 6412 1 2025-11-25 04:53:03.998 00:05:00.002 TCP 23.155.0.1:179 -> 23.156.0.1:36051 11 667 1 2025-11-25 04:53:03.978 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-25 04:57:19.981 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38138 1 40 1 2025-11-25 04:57:33.943 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 04:57:34.009 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:54:03.433 00:05:02.505 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-25 04:58:10.017 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:34006 11 6504 1 Summary: total flows: 128, total bytes: 238961, total packets: 1339, avg bps: 497, avg pps: 0, avg bpp: 178 Time window: 2025-11-25 03:55:03 - 2025-11-25 04:59:05 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0057s User: 0.0000s Wall: 0.0028s flows/second: 45586.4 Runtime: 0.0028s