Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 04:58:44.833 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53142 10 6452 1 2025-11-27 04:54:06.880 00:05:57.505 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 04:59:55.601 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 1 40 1 2025-11-27 04:56:04.392 00:05:02.510 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:00:56.006 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60218 1 40 1 2025-11-27 04:56:53.006 00:05:10.052 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-27 04:58:04.919 00:05:01.942 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 04:58:06.921 00:05:57.980 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:03:31.895 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:03:31.861 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:00:04.405 00:05:02.457 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:00:06.881 00:05:57.506 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:02:04.393 00:05:02.510 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:02:13.057 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-27 05:06:49.671 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 9 6412 1 2025-11-27 05:08:00.448 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50558 1 40 1 2025-11-27 05:04:04.922 00:05:01.941 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:08:31.976 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:08:32.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:08:50.486 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35146 9 6412 1 2025-11-27 05:04:06.923 00:05:57.982 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:06:04.408 00:05:02.455 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:10:51.299 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51052 9 6412 1 2025-11-27 05:06:06.884 00:05:57.508 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:07:33.066 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2692 1 2025-11-27 05:11:51.660 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37432 9 6412 1 2025-11-27 05:08:04.395 00:05:02.509 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:13:02.404 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54300 1 40 1 2025-11-27 05:13:31.811 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:13:32.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:13:52.443 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 10 6452 1 2025-11-27 05:10:04.925 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:14:52.799 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53198 10 6452 1 2025-11-27 05:10:06.923 00:05:57.983 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:16:03.527 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33752 1 40 1 2025-11-27 05:12:04.411 00:05:02.453 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:12:06.883 00:05:57.513 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:12:53.071 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-11-27 05:17:54.325 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34698 9 6412 1 2025-11-27 05:14:04.395 00:05:02.510 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:18:32.141 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:18:32.281 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:19:05.012 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 1 40 1 2025-11-27 05:19:55.049 00:00:10.632 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 9 6412 1 2025-11-27 05:16:04.925 00:05:01.940 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:16:06.924 00:05:57.983 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:20:55.721 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6452 1 2025-11-27 05:18:04.416 00:05:02.450 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:18:13.075 00:05:10.015 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-27 05:18:06.885 00:05:57.513 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:22:56.541 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46358 9 6412 1 2025-11-27 05:23:32.157 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:23:32.334 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:20:04.404 00:05:02.504 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:23:56.946 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44772 9 6412 1 2025-11-27 05:22:04.926 00:05:01.943 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:25:57.815 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46878 9 6412 1 2025-11-27 05:22:06.926 00:05:57.981 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:23:33.089 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2544 1 2025-11-27 05:24:04.417 00:05:02.453 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:28:32.331 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:28:32.533 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:24:06.886 00:05:57.514 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:26:04.404 00:05:02.507 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:30:10.297 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35518 1 40 1 2025-11-27 05:31:00.335 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49222 9 6412 1 2025-11-27 05:28:04.927 00:05:01.944 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:32:00.738 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-11-27 05:28:06.932 00:05:57.977 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:28:53.095 00:05:10.016 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-27 05:33:11.498 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37082 1 40 1 2025-11-27 05:33:32.593 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:33:32.339 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:30:04.420 00:05:02.452 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:34:01.534 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48190 9 6412 1 2025-11-27 05:30:06.891 00:05:57.511 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:32:04.410 00:05:02.502 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:36:02.373 00:00:10.924 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 9 6412 1 2025-11-27 05:34:04.928 00:05:01.945 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:38:03.747 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54840 9 6412 1 2025-11-27 05:34:13.112 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2624 1 2025-11-27 05:38:32.587 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:38:32.581 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:34:06.932 00:05:57.977 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:36:04.421 00:05:02.454 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:40:14.896 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50132 1 40 1 2025-11-27 05:36:06.892 00:05:57.509 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:41:04.933 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56734 9 6412 1 2025-11-27 05:38:04.411 00:05:02.505 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:42:05.339 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33250 10 6452 1 2025-11-27 05:43:32.400 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:43:32.412 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:39:33.116 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-27 05:40:04.929 00:05:01.948 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:44:06.130 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52568 9 6412 1 2025-11-27 05:40:06.935 00:05:57.976 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:42:04.421 00:05:02.456 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:42:06.895 00:05:57.508 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:47:07.359 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 9 6412 1 2025-11-27 05:44:04.414 00:05:02.504 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:48:07.726 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 9 6412 1 2025-11-27 05:48:32.837 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:48:32.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:44:53.126 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-11-27 05:46:04.930 00:05:01.948 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:50:08.530 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57762 10 6452 1 2025-11-27 05:46:06.939 00:05:57.976 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:51:08.946 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:34122 10 6452 1 2025-11-27 05:48:04.424 00:05:02.455 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:52:19.693 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60214 1 40 1 2025-11-27 05:48:06.898 00:05:57.507 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 05:53:09.732 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42792 10 6452 1 2025-11-27 05:53:32.672 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 05:53:32.783 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:50:04.417 00:05:02.513 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 05:54:10.121 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34294 10 6452 1 2025-11-27 05:50:13.138 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-27 05:55:20.901 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37502 1 40 1 2025-11-27 05:52:04.934 00:05:01.956 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 05:56:10.945 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38088 9 6412 1 2025-11-27 05:52:06.938 00:05:57.977 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 05:57:11.368 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52568 9 6412 1 2025-11-27 05:54:04.425 00:05:02.465 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 05:58:11.772 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54472 9 6412 1 2025-11-27 05:58:32.793 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 05:58:32.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 126, total bytes: 264248, total packets: 1362, avg bps: 542, avg pps: 0, avg bpp: 194 Time window: 2025-11-27 04:54:06 - 2025-11-27 05:59:06 Total flows processed: 126, passed: 126, Blocks skipped: 0, Bytes read: 13168 Sys: 0.0039s User: 0.0016s Wall: 0.0024s flows/second: 51468.9 Runtime: 0.0025s