Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 02:58:48.614 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44670 9 6412 1 2025-11-26 02:55:03.834 00:05:02.559 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 02:56:03.915 00:05:02.497 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 02:56:01.076 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-26 03:00:49.432 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54336 10 6452 1 2025-11-26 03:02:00.172 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50670 1 40 1 2025-11-26 02:58:04.424 00:05:01.950 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:03:00.572 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:03:00.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:03:00.526 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49598 1 40 1 2025-11-26 02:58:06.432 00:05:57.987 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:03:50.565 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55092 9 6412 1 2025-11-26 03:00:03.854 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:04:50.979 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34648 9 6412 1 2025-11-26 03:01:03.833 00:05:02.560 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:01:21.085 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2576 1 2025-11-26 03:06:01.772 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52274 1 40 1 2025-11-26 03:02:03.921 00:05:02.493 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:08:00.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:08:00.542 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:04:04.437 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:08:52.607 00:00:10.513 TCP 1.101.0.1:3000 -> 23.104.0.1:55078 9 6412 1 2025-11-26 03:04:06.434 00:05:57.972 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:10:03.528 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53972 1 40 1 2025-11-26 03:06:03.854 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:06:41.095 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-26 03:10:53.560 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48224 9 6412 1 2025-11-26 03:07:03.836 00:05:02.561 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:08:03.920 00:05:02.495 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:13:00.694 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:13:00.696 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:13:54.791 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 9 6412 1 2025-11-26 03:10:04.426 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:14:55.206 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49602 10 6452 1 2025-11-26 03:10:06.435 00:05:57.973 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:15:55.609 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46538 10 6452 1 2025-11-26 03:12:03.856 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:12:01.102 00:05:10.001 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2480 1 2025-11-26 03:13:03.835 00:05:02.561 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:18:00.737 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:14:03.921 00:05:02.496 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:18:00.981 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:18:06.820 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49098 1 40 1 2025-11-26 03:19:07.248 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35190 1 40 1 2025-11-26 03:16:04.428 00:05:01.950 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:19:57.289 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 10 6452 1 2025-11-26 03:16:06.435 00:05:57.974 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:21:08.030 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 1 40 1 2025-11-26 03:17:21.105 00:05:10.000 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-26 03:18:03.857 00:05:02.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:23:01.073 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:23:01.075 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:19:03.836 00:05:02.561 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:20:03.923 00:05:02.496 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:23:58.838 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54948 10 6452 1 2025-11-26 03:25:59.604 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48736 10 6452 1 2025-11-26 03:22:04.430 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:22:41.105 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2768 1 2025-11-26 03:22:06.437 00:05:57.975 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:27:10.376 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43498 1 40 1 2025-11-26 03:28:01.076 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:28:01.259 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:28:00.412 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44474 9 6412 1 2025-11-26 03:24:03.856 00:05:02.523 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:25:03.838 00:05:02.563 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:29:00.825 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:47676 9 6412 1 2025-11-26 03:26:03.925 00:05:02.496 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:30:01.206 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 9 6412 1 2025-11-26 03:31:01.567 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43516 10 6452 1 2025-11-26 03:28:04.432 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:28:01.107 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2304 1 2025-11-26 03:33:01.148 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:33:01.311 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:28:06.440 00:05:57.974 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:33:12.726 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44972 1 40 1 2025-11-26 03:30:03.859 00:05:02.523 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:31:03.840 00:05:02.564 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:35:03.171 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49970 9 6412 1 2025-11-26 03:32:03.927 00:05:02.496 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:36:03.583 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39488 10 6452 1 2025-11-26 03:33:21.112 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-11-26 03:38:01.480 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:38:01.439 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:34:04.438 00:05:01.944 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:38:14.741 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33862 1 40 1 2025-11-26 03:34:06.442 00:05:57.972 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:36:03.863 00:05:02.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:40:05.199 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41918 10 6452 1 2025-11-26 03:37:03.843 00:05:02.560 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:41:05.611 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36390 9 6412 1 2025-11-26 03:38:03.930 00:05:02.494 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:38:41.118 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2624 1 2025-11-26 03:43:01.206 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:43:01.206 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:43:16.675 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36984 1 40 1 2025-11-26 03:40:04.434 00:05:01.950 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:44:06.715 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44906 10 6452 1 2025-11-26 03:40:06.443 00:05:57.972 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:45:07.084 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53930 9 6412 1 2025-11-26 03:42:03.866 00:05:02.519 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:46:07.491 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43176 10 6452 1 2025-11-26 03:43:03.845 00:05:02.558 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:47:18.219 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 1 40 1 2025-11-26 03:48:01.275 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:48:01.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:44:03.930 00:05:02.495 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:44:01.123 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2380 1 2025-11-26 03:48:08.258 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47486 10 6452 1 2025-11-26 03:49:19.017 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34574 1 40 1 2025-11-26 03:46:04.436 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:50:19.430 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50142 1 40 1 2025-11-26 03:46:06.444 00:05:57.972 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:51:19.909 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52472 1 40 1 2025-11-26 03:48:03.866 00:05:02.518 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:53:01.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:53:01.667 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:49:03.846 00:05:02.558 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 03:53:20.730 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 1 40 1 2025-11-26 03:49:21.131 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2672 1 2025-11-26 03:50:03.933 00:05:02.493 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 03:54:10.772 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 9 6412 1 2025-11-26 03:55:11.179 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49642 10 6452 1 2025-11-26 03:52:04.438 00:05:01.951 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 03:56:11.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51182 9 6412 1 2025-11-26 03:52:06.445 00:05:57.973 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 03:57:11.986 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47970 9 6412 1 2025-11-26 03:58:01.800 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 03:58:01.637 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 03:54:03.868 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 03:58:12.349 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 Summary: total flows: 130, total bytes: 258296, total packets: 1363, avg bps: 537, avg pps: 0, avg bpp: 189 Time window: 2025-11-26 02:55:03 - 2025-11-26 03:59:06 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0053s User: 0.0011s Wall: 0.0025s flows/second: 51217.3 Runtime: 0.0026s