Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 11:55:03.994 00:05:02.566 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 11:59:32.618 00:00:11.604 TCP 1.101.0.1:3000 -> 23.104.0.1:49306 9 6412 1 2025-11-26 11:56:04.110 00:05:02.470 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:00:34.272 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58656 10 6452 1 2025-11-26 12:01:45.002 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57854 1 40 1 2025-11-26 11:58:04.587 00:05:01.953 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 11:58:06.599 00:05:57.970 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:03:11.829 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:03:11.625 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 11:59:41.745 00:05:00.532 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2668 1 2025-11-26 12:00:04.016 00:05:02.523 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:04:35.839 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49280 9 6412 1 2025-11-26 12:01:03.997 00:05:02.564 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 12:02:04.111 00:05:02.469 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:06:36.644 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:42318 12 10369 1 2025-11-26 12:07:37.088 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55054 10 6452 1 2025-11-26 12:04:04.589 00:05:01.951 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:08:11.426 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:08:11.512 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:08:37.459 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34854 10 6452 1 2025-11-26 12:04:51.746 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2648 1 2025-11-26 12:04:06.599 00:05:57.971 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:09:37.864 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:34866 10 6452 1 2025-11-26 12:06:04.017 00:05:02.524 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:07:03.997 00:05:00.003 TCP 23.152.0.1:179 -> 23.155.0.1:42479 11 686 1 2025-11-26 12:08:04.112 00:05:02.469 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:13:11.660 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:13:11.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:13:39.589 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40210 9 6412 1 2025-11-26 12:10:04.591 00:05:01.950 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:10:11.753 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-26 12:14:39.989 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58152 9 6412 1 2025-11-26 12:10:06.601 00:05:57.971 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:12:04.021 00:05:02.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:16:40.767 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58104 10 6452 1 2025-11-26 12:12:06.561 00:05:57.443 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 12:17:51.526 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47908 1 40 1 2025-11-26 12:14:04.114 00:05:02.469 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:18:11.855 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:18:11.858 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:18:51.884 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42512 1 40 1 2025-11-26 12:15:31.758 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-26 12:19:41.933 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35344 10 6452 1 2025-11-26 12:16:04.592 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:20:52.702 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37794 1 40 1 2025-11-26 12:16:06.606 00:05:57.967 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:21:42.739 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45470 10 6452 1 2025-11-26 12:18:04.023 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:22:43.122 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:60378 9 6412 1 2025-11-26 12:18:06.562 00:05:57.444 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 12:23:12.204 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:23:12.191 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:23:43.504 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60600 10 6452 1 2025-11-26 12:20:04.115 00:05:02.468 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:20:51.762 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-26 12:22:04.593 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:26:44.669 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40706 10 6452 1 2025-11-26 12:22:06.602 00:05:57.972 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:27:45.129 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55528 10 6452 1 2025-11-26 12:24:04.024 00:05:02.518 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:28:11.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:28:11.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:28:45.529 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43700 9 6412 1 2025-11-26 12:24:06.562 00:05:57.444 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 12:29:45.931 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39852 9 6412 1 2025-11-26 12:26:04.114 00:05:02.469 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:26:11.764 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2752 1 2025-11-26 12:30:46.289 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 9 6412 1 2025-11-26 12:31:46.697 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56520 9 6412 1 2025-11-26 12:28:04.594 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:32:47.129 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 9 6412 1 2025-11-26 12:28:06.602 00:05:57.973 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:33:12.128 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:33:11.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:33:47.535 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38108 10 6452 1 2025-11-26 12:30:04.025 00:05:02.518 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:34:47.940 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:39726 10 6452 1 2025-11-26 12:30:06.563 00:05:57.445 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 12:31:31.770 00:05:10.052 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2612 1 2025-11-26 12:35:48.359 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60720 9 6412 1 2025-11-26 12:32:04.115 00:05:02.468 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:37:59.507 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 1 40 1 2025-11-26 12:34:04.596 00:05:01.948 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:38:12.134 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:38:11.954 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:38:49.547 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51884 9 6412 1 2025-11-26 12:34:06.603 00:05:57.973 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:36:04.028 00:05:02.517 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:36:06.563 00:05:57.445 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 12:36:51.772 00:05:10.047 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-26 12:41:50.766 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 10 6452 1 2025-11-26 12:38:04.118 00:05:02.467 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:42:51.166 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37728 9 6412 1 2025-11-26 12:43:12.534 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:43:12.530 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:40:04.596 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:40:06.605 00:05:57.974 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:44:51.974 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35242 10 6452 1 2025-11-26 12:45:52.381 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43688 9 6412 1 2025-11-26 12:42:04.027 00:05:02.520 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:42:11.776 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-26 12:42:06.565 00:05:57.445 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 12:46:52.787 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57660 9 6412 1 2025-11-26 12:47:53.198 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39422 9 6412 1 2025-11-26 12:44:04.122 00:05:02.467 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:48:12.346 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:48:12.215 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:48:53.603 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41012 10 6452 1 2025-11-26 12:46:04.600 00:05:01.949 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:46:06.607 00:05:57.974 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:51:04.748 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57202 1 40 1 2025-11-26 12:47:31.788 00:05:10.023 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-11-26 12:51:54.792 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44464 9 6412 1 2025-11-26 12:48:04.030 00:05:02.521 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:52:55.215 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38672 10 6452 1 2025-11-26 12:48:06.568 00:05:57.442 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-26 12:53:12.344 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:53:12.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 12:54:05.977 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43450 1 40 1 2025-11-26 12:50:04.123 00:05:02.469 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-26 12:54:56.020 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60106 9 6412 1 2025-11-26 12:56:06.750 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60300 1 40 1 2025-11-26 12:52:04.600 00:05:01.953 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-26 12:52:06.610 00:05:57.975 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-26 12:52:51.792 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2624 1 2025-11-26 12:57:57.194 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54804 9 6412 1 2025-11-26 12:54:04.030 00:05:02.523 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-26 12:58:12.362 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 12:58:12.453 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 129, total bytes: 306797, total packets: 1422, avg bps: 638, avg pps: 0, avg bpp: 215 Time window: 2025-11-26 11:55:03 - 2025-11-26 12:59:06 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0055s User: 0.0009s Wall: 0.0021s flows/second: 62134.3 Runtime: 0.0021s