Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 15:59:29.369 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50774 9 6412 1 2025-11-27 15:56:04.599 00:05:02.563 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 15:57:33.969 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-11-27 15:58:05.188 00:05:01.935 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 15:58:05.168 00:05:02.015 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:02:30.598 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59366 9 6412 1 2025-11-27 16:03:45.059 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:03:41.379 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46248 1 40 1 2025-11-27 16:03:45.153 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:00:04.589 00:05:02.534 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:00:04.570 00:05:02.574 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:04:41.778 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57194 1 40 1 2025-11-27 16:05:31.818 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49992 10 6452 1 2025-11-27 16:02:04.601 00:05:02.564 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:06:32.220 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 11 6516 1 2025-11-27 16:02:53.979 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2416 1 2025-11-27 16:07:32.622 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 9 6412 1 2025-11-27 16:04:05.170 00:05:02.015 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:04:05.190 00:05:01.935 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:08:45.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:08:45.145 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:06:04.569 00:05:02.576 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:06:04.590 00:05:02.535 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:10:46.260 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45592 1 40 1 2025-11-27 16:11:46.626 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52752 1 40 1 2025-11-27 16:08:04.602 00:05:02.563 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:08:13.998 00:05:00.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2604 1 2025-11-27 16:13:45.423 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:13:45.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:10:05.171 00:05:02.016 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:10:05.192 00:05:01.936 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:14:37.485 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36722 9 6412 1 2025-11-27 16:15:48.260 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 1 40 1 2025-11-27 16:12:04.571 00:05:02.577 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:12:04.591 00:05:02.537 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:16:38.301 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:54568 12 10369 1 2025-11-27 16:13:24.005 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2648 1 2025-11-27 16:17:49.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 1 40 1 2025-11-27 16:14:04.608 00:05:02.560 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:18:45.230 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:18:45.318 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:18:39.178 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41840 10 6452 1 2025-11-27 16:19:50.168 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35168 1 40 1 2025-11-27 16:16:05.194 00:05:01.934 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:16:05.175 00:05:02.014 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:20:40.208 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55848 9 6412 1 2025-11-27 16:18:04.593 00:05:02.536 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:18:04.572 00:05:02.577 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:22:41.012 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43106 9 6412 1 2025-11-27 16:18:44.010 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-27 16:23:45.619 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:23:45.662 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:23:51.781 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 1 40 1 2025-11-27 16:20:04.610 00:05:02.558 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:24:41.818 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34836 10 6452 1 2025-11-27 16:25:52.581 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57120 1 40 1 2025-11-27 16:22:05.194 00:05:01.935 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:22:05.174 00:05:02.016 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:26:52.991 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36570 1 40 1 2025-11-27 16:27:43.030 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60992 10 6452 1 2025-11-27 16:24:04.593 00:05:02.536 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:24:04.572 00:05:02.576 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:24:04.017 00:05:10.034 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-27 16:28:45.590 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:28:45.577 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:28:53.799 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41518 1 40 1 2025-11-27 16:29:43.839 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50268 10 6452 1 2025-11-27 16:26:04.616 00:05:02.553 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:30:44.238 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60538 9 6412 1 2025-11-27 16:31:44.652 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51248 9 6412 1 2025-11-27 16:28:05.197 00:05:01.933 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:28:05.176 00:05:02.013 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:32:45.055 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36732 9 6412 1 2025-11-27 16:29:24.052 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2540 1 2025-11-27 16:33:45.619 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:33:45.800 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:33:45.456 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 9 6412 1 2025-11-27 16:30:04.595 00:05:02.535 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:30:04.574 00:05:02.575 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:34:45.863 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:57894 9 6412 1 2025-11-27 16:35:56.625 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48846 1 40 1 2025-11-27 16:32:04.620 00:05:02.550 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:34:05.199 00:05:01.932 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:34:05.178 00:05:02.013 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:38:45.740 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:38:45.805 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:34:44.063 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2672 1 2025-11-27 16:39:58.294 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40116 1 40 1 2025-11-27 16:36:04.596 00:05:02.534 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:36:04.576 00:05:02.575 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:40:58.685 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47372 1 40 1 2025-11-27 16:41:48.725 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42064 9 6412 1 2025-11-27 16:38:04.621 00:05:02.549 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:42:49.138 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 9 6412 1 2025-11-27 16:43:46.122 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:43:46.200 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:40:05.181 00:05:02.010 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:40:05.200 00:05:01.930 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:40:04.068 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2776 1 2025-11-27 16:45:50.295 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35586 10 6452 1 2025-11-27 16:42:04.578 00:05:02.572 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:42:04.599 00:05:02.532 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:46:50.698 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57960 9 6412 1 2025-11-27 16:48:01.456 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47446 1 40 1 2025-11-27 16:44:04.632 00:05:02.539 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:48:45.841 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:48:46.079 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:49:01.867 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43724 1 40 1 2025-11-27 16:45:24.075 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 16:46:05.181 00:05:02.011 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:46:05.205 00:05:01.927 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:50:52.355 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45676 9 6412 1 2025-11-27 16:51:52.762 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34116 10 6452 1 2025-11-27 16:48:04.603 00:05:02.530 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:48:04.583 00:05:02.570 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:52:53.170 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52508 10 6452 1 2025-11-27 16:53:46.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:53:46.126 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 16:53:53.576 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 9 6412 1 2025-11-27 16:50:04.636 00:05:02.538 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 16:50:44.081 00:05:10.018 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2624 1 2025-11-27 16:54:53.972 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49504 9 6412 1 2025-11-27 16:52:05.185 00:05:02.009 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 16:52:05.205 00:05:01.928 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 16:56:54.793 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52764 10 6452 1 2025-11-27 16:57:55.163 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6452 1 2025-11-27 16:54:04.605 00:05:02.531 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 16:54:04.584 00:05:02.572 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 16:58:46.141 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 16:58:46.206 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 130, total bytes: 261953, total packets: 1360, avg bps: 554, avg pps: 0, avg bpp: 192 Time window: 2025-11-27 15:56:04 - 2025-11-27 16:59:07 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0026s User: 0.0026s Wall: 0.0021s flows/second: 60773.5 Runtime: 0.0022s