Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 12:59:14.959 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35146 9 6412 1 2025-11-27 12:56:04.550 00:05:02.549 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 12:56:23.711 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-27 13:01:15.780 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59616 9 6412 1 2025-11-27 12:58:05.110 00:05:02.008 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 12:58:05.130 00:05:01.928 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:02:16.192 00:00:10.593 TCP 1.101.0.1:3000 -> 23.104.0.1:43864 9 6412 1 2025-11-27 13:03:16.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51308 10 6452 1 2025-11-27 13:03:41.596 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:03:41.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:00:04.536 00:05:02.524 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:00:04.518 00:05:02.563 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:04:17.232 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59878 9 6412 1 2025-11-27 13:01:43.719 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-27 13:02:04.551 00:05:02.549 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:06:18.005 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 12 10375 1 2025-11-27 13:07:18.450 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40126 10 6452 1 2025-11-27 13:04:05.132 00:05:01.931 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:04:05.112 00:05:02.012 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:08:41.649 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:08:41.373 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:09:29.593 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 1 40 1 2025-11-27 13:06:04.539 00:05:02.525 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:06:04.520 00:05:02.565 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:10:29.997 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37444 1 40 1 2025-11-27 13:07:03.728 00:05:10.033 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-27 13:11:30.420 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47566 1 40 1 2025-11-27 13:08:04.552 00:05:02.553 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:12:20.475 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 9 6412 1 2025-11-27 13:13:20.840 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50796 9 6412 1 2025-11-27 13:13:41.549 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:13:41.777 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:10:05.133 00:05:01.931 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:10:05.114 00:05:02.012 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:14:21.210 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60966 9 6412 1 2025-11-27 13:15:21.611 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43904 9 6412 1 2025-11-27 13:12:04.520 00:05:02.569 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:12:04.540 00:05:02.528 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:16:22.030 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58854 9 6412 1 2025-11-27 13:12:23.761 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2608 1 2025-11-27 13:17:22.390 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54868 10 6452 1 2025-11-27 13:14:04.552 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:18:22.799 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 9 6412 1 2025-11-27 13:18:41.851 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:18:41.775 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:16:05.137 00:05:01.932 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:16:05.118 00:05:02.012 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:20:33.974 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48742 1 40 1 2025-11-27 13:21:24.014 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40936 10 6452 1 2025-11-27 13:17:43.767 00:05:10.928 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2736 1 2025-11-27 13:18:04.544 00:05:02.525 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:18:04.523 00:05:02.565 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:22:24.421 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60318 10 6464 1 2025-11-27 13:23:35.208 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53728 1 40 1 2025-11-27 13:23:41.918 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:23:41.914 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:20:04.555 00:05:02.560 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:24:35.606 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 1 40 1 2025-11-27 13:22:05.138 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:22:05.118 00:05:02.019 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:23:03.769 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-27 13:27:26.448 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:44954 10 6452 1 2025-11-27 13:24:04.532 00:05:02.564 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:24:04.551 00:05:02.525 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:28:42.049 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:28:42.303 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:26:04.558 00:05:02.560 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:31:28.050 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47018 10 6452 1 2025-11-27 13:28:05.140 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:28:05.120 00:05:02.018 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:28:23.774 00:05:10.087 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2544 1 2025-11-27 13:33:42.148 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:33:42.000 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:30:04.534 00:05:02.563 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:30:04.555 00:05:02.523 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:34:29.242 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47168 10 6452 1 2025-11-27 13:35:40.005 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56064 1 40 1 2025-11-27 13:32:04.557 00:05:02.564 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:36:30.040 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48430 10 6452 1 2025-11-27 13:37:30.438 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51046 10 6452 1 2025-11-27 13:33:43.777 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-11-27 13:34:05.142 00:05:01.940 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:34:05.122 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:38:41.213 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36134 1 40 1 2025-11-27 13:38:42.358 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:38:42.351 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:39:31.245 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49498 10 6452 1 2025-11-27 13:36:04.534 00:05:02.567 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:36:04.556 00:05:02.527 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:41:32.026 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 9 6412 1 2025-11-27 13:38:04.561 00:05:02.561 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:42:32.453 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50680 10 6452 1 2025-11-27 13:39:03.782 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2432 1 2025-11-27 13:43:42.343 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:43:42.244 00:00:00.018 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:40:05.123 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:40:05.142 00:05:01.940 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:45:33.705 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54624 9 6412 1 2025-11-27 13:42:04.536 00:05:02.566 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:42:04.557 00:05:02.527 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:46:34.132 00:00:11.437 TCP 1.101.0.1:3000 -> 23.104.0.1:49688 11 10335 1 2025-11-27 13:47:46.064 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56492 1 40 1 2025-11-27 13:44:04.563 00:05:02.561 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:44:23.787 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2656 1 2025-11-27 13:48:42.636 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:48:42.548 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:49:36.542 00:00:10.573 TCP 1.101.0.1:3000 -> 23.104.0.1:46984 9 6412 1 2025-11-27 13:46:05.123 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:46:05.145 00:05:01.939 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:50:37.152 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42232 10 6452 1 2025-11-27 13:51:37.561 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47346 9 6412 1 2025-11-27 13:48:04.557 00:05:02.527 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:48:04.537 00:05:02.567 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:53:42.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:49:43.798 00:05:00.404 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2564 1 2025-11-27 13:53:42.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:53:48.711 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57724 1 40 1 2025-11-27 13:50:04.564 00:05:02.561 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 13:52:05.145 00:05:01.939 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 13:52:05.125 00:05:02.019 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 13:56:39.555 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43980 10 6452 1 2025-11-27 13:57:50.332 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52456 1 40 1 2025-11-27 13:54:04.537 00:05:02.567 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 13:54:04.558 00:05:02.527 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 13:58:42.570 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 13:58:42.426 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 13:58:40.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50898 10 6452 1 Summary: total flows: 127, total bytes: 278630, total packets: 1380, avg bps: 589, avg pps: 0, avg bpp: 201 Time window: 2025-11-27 12:56:04 - 2025-11-27 13:59:07 Total flows processed: 127, passed: 127, Blocks skipped: 0, Bytes read: 13272 Sys: 0.0012s User: 0.0035s Wall: 0.0024s flows/second: 53358.4 Runtime: 0.0024s