Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 18:58:55.947 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 1 40 1 2025-11-27 18:59:45.981 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41256 10 6452 1 2025-11-27 18:56:04.676 00:05:02.545 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:00:46.387 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40332 9 6412 1 2025-11-27 18:58:05.247 00:05:01.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 18:58:05.267 00:05:01.914 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 18:58:44.269 00:05:10.001 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2692 1 2025-11-27 19:02:57.566 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45242 1 40 1 2025-11-27 19:03:48.822 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:03:48.820 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:03:57.968 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 1 40 1 2025-11-27 19:00:04.642 00:05:02.540 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:00:04.622 00:05:02.580 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:04:48.010 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59742 9 6412 1 2025-11-27 19:02:04.678 00:05:02.545 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:06:48.824 00:00:10.780 TCP 1.101.0.1:3000 -> 23.104.0.1:34218 10 6452 1 2025-11-27 19:07:49.641 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 9 6412 1 2025-11-27 19:04:05.248 00:05:01.994 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:04:05.269 00:05:01.914 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:04:04.270 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2696 1 2025-11-27 19:08:48.994 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:08:48.812 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:08:50.044 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48704 10 6452 1 2025-11-27 19:10:00.779 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45104 1 40 1 2025-11-27 19:06:04.644 00:05:02.539 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:06:04.622 00:05:02.580 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:11:01.185 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38050 1 40 1 2025-11-27 19:11:51.224 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38822 10 6452 1 2025-11-27 19:08:04.678 00:05:02.545 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:13:02.001 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45086 1 40 1 2025-11-27 19:09:24.277 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-27 19:13:48.789 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:13:48.796 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:13:52.039 00:00:10.814 TCP 1.101.0.1:3000 -> 23.104.0.1:44466 9 6412 1 2025-11-27 19:10:05.287 00:05:01.897 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:10:05.267 00:05:01.977 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:15:03.260 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53964 1 40 1 2025-11-27 19:15:53.295 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41748 10 6452 1 2025-11-27 19:12:04.645 00:05:02.541 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:12:04.625 00:05:02.581 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:17:04.075 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38326 1 40 1 2025-11-27 19:17:54.131 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56586 9 6412 1 2025-11-27 19:14:04.679 00:05:02.546 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:18:48.754 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:18:48.852 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:14:44.281 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-27 19:18:54.532 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37628 9 6412 1 2025-11-27 19:19:54.931 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55500 10 6452 1 2025-11-27 19:16:05.290 00:05:01.897 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:16:05.269 00:05:01.978 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:20:55.333 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40916 9 6412 1 2025-11-27 19:18:04.645 00:05:02.549 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:18:04.626 00:05:02.589 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:23:06.515 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43152 1 40 1 2025-11-27 19:23:49.264 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:23:49.200 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:20:04.680 00:05:02.550 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:20:04.285 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-27 19:25:07.340 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40118 1 40 1 2025-11-27 19:22:05.271 00:05:01.980 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:25:57.380 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41330 10 6452 1 2025-11-27 19:22:05.290 00:05:01.900 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:26:57.793 00:00:10.809 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 10 6452 1 2025-11-27 19:24:04.628 00:05:02.582 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:24:04.649 00:05:02.542 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:28:09.008 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 1 40 1 2025-11-27 19:28:49.244 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:28:49.245 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:28:59.047 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 9 6412 1 2025-11-27 19:25:24.296 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2532 1 2025-11-27 19:29:59.446 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34372 10 6452 1 2025-11-27 19:26:04.688 00:05:02.545 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:30:59.847 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38938 10 6452 1 2025-11-27 19:28:05.293 00:05:01.899 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:28:05.274 00:05:01.979 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:33:00.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49138 9 6412 1 2025-11-27 19:33:49.706 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:33:49.614 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:30:04.651 00:05:02.542 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:30:04.631 00:05:02.583 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:34:01.100 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50184 9 6412 1 2025-11-27 19:30:44.307 00:05:10.019 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2792 1 2025-11-27 19:35:01.508 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38774 10 6452 1 2025-11-27 19:32:04.690 00:05:02.543 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:34:05.295 00:05:01.898 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:34:05.276 00:05:01.979 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:38:02.664 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54448 9 6412 1 2025-11-27 19:38:49.367 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:38:49.451 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:36:04.632 00:05:02.583 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:36:04.651 00:05:02.542 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:36:04.324 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 19:38:04.690 00:05:02.543 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:43:04.572 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58624 10 6452 1 2025-11-27 19:43:49.427 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:43:49.563 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:40:05.281 00:05:01.973 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:40:05.301 00:05:01.893 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:45:15.759 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51898 1 40 1 2025-11-27 19:41:24.330 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-27 19:42:04.632 00:05:02.583 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:42:04.653 00:05:02.542 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:46:05.812 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58462 11 6516 1 2025-11-27 19:47:06.215 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:46490 11 10335 1 2025-11-27 19:44:04.692 00:05:02.544 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:48:06.701 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 9 6412 1 2025-11-27 19:48:49.443 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:48:49.517 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:46:05.303 00:05:01.892 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:46:05.284 00:05:01.973 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:50:17.905 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 1 40 1 2025-11-27 19:46:44.339 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-11-27 19:51:07.946 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52072 9 6412 1 2025-11-27 19:48:04.633 00:05:02.584 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:48:04.652 00:05:02.544 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:52:08.375 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38622 9 6412 1 2025-11-27 19:53:49.901 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:53:49.905 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:50:04.694 00:05:02.543 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-27 19:54:09.211 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47588 10 6452 1 2025-11-27 19:55:19.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37314 1 40 1 2025-11-27 19:52:05.304 00:05:01.893 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-27 19:52:05.285 00:05:01.973 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-27 19:52:04.343 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2420 1 2025-11-27 19:56:09.939 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 9 6412 1 2025-11-27 19:57:20.700 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45820 1 40 1 2025-11-27 19:54:04.653 00:05:02.544 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-27 19:54:04.633 00:05:02.584 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-27 19:58:21.068 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 1 40 1 2025-11-27 19:58:49.957 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:58:50.089 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 131, total bytes: 268467, total packets: 1372, avg bps: 567, avg pps: 0, avg bpp: 195 Time window: 2025-11-27 18:56:04 - 2025-11-27 19:59:07 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0033s User: 0.0022s Wall: 0.0021s flows/second: 63279.3 Runtime: 0.0021s