Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 12:59:10.456 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 12:59:10.019 00:00:00.038 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 12:59:51.133 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45960 1 40 1 2025-11-28 12:56:05.075 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:00:51.534 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 1 40 1 2025-11-28 13:01:52.019 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40204 1 40 1 2025-11-28 12:58:05.633 00:05:01.939 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 12:58:05.613 00:05:02.019 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:02:42.061 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54054 9 6412 1 2025-11-28 13:03:42.466 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 10 6452 1 2025-11-28 12:59:45.812 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-28 13:04:10.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:00:04.938 00:05:02.637 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:04:10.544 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:00:04.918 00:05:02.678 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:04:42.878 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57694 9 6412 1 2025-11-28 13:05:43.294 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36498 9 6412 1 2025-11-28 13:02:05.078 00:05:02.536 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:06:54.087 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50118 1 40 1 2025-11-28 13:07:44.131 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50132 10 6452 1 2025-11-28 13:04:05.634 00:05:01.941 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:04:05.614 00:05:02.021 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:08:54.912 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53126 1 40 1 2025-11-28 13:09:10.419 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:09:10.417 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:05:05.820 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2752 1 2025-11-28 13:09:44.959 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47326 9 6412 1 2025-11-28 13:06:04.938 00:05:02.636 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:06:04.918 00:05:02.676 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:10:45.382 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43150 9 6412 1 2025-11-28 13:08:05.080 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:10:05.616 00:05:02.022 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:14:10.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:14:10.579 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:10:05.636 00:05:01.941 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:10:25.828 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2696 1 2025-11-28 13:14:46.976 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46976 9 6412 1 2025-11-28 13:12:04.919 00:05:02.678 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:12:04.938 00:05:02.639 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:17:58.668 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40116 1 40 1 2025-11-28 13:14:05.081 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:18:59.032 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37732 1 40 1 2025-11-28 13:19:10.713 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:19:10.785 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:19:49.075 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51970 9 6412 1 2025-11-28 13:15:45.833 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-28 13:16:05.637 00:05:01.943 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:16:05.617 00:05:02.023 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:21:49.858 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:49976 9 6412 1 2025-11-28 13:18:04.941 00:05:02.637 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:18:04.920 00:05:02.678 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:22:50.284 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55556 10 6452 1 2025-11-28 13:24:01.009 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59166 1 40 1 2025-11-28 13:24:10.711 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:24:10.711 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:20:05.083 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:24:51.047 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37764 9 6412 1 2025-11-28 13:21:05.839 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-28 13:22:05.618 00:05:02.023 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:22:05.637 00:05:01.943 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:27:52.294 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 10 6452 1 2025-11-28 13:24:04.942 00:05:02.639 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:24:04.922 00:05:02.679 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:28:52.702 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49916 9 6412 1 2025-11-28 13:29:10.573 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:29:10.865 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:29:53.125 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45994 10 6452 1 2025-11-28 13:26:05.086 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:26:25.847 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-28 13:30:53.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45772 10 6452 1 2025-11-28 13:28:05.621 00:05:02.020 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:28:05.642 00:05:01.940 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:32:54.347 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52562 10 6452 1 2025-11-28 13:34:05.076 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51086 1 40 1 2025-11-28 13:30:04.944 00:05:02.638 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:30:04.924 00:05:02.678 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:34:11.081 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:34:11.003 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:31:45.854 00:05:00.944 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2444 1 2025-11-28 13:35:55.540 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:44170 9 6412 1 2025-11-28 13:32:05.086 00:05:02.536 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:36:55.900 00:00:10.836 TCP 1.101.0.1:3000 -> 23.104.0.1:38158 9 6412 1 2025-11-28 13:34:05.623 00:05:02.019 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:37:56.780 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-11-28 13:34:05.644 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:39:11.027 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:39:11.066 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:36:04.944 00:05:02.638 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:40:08.090 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51932 1 40 1 2025-11-28 13:36:04.924 00:05:02.678 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:36:55.863 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2856 1 2025-11-28 13:42:09.040 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41002 1 40 1 2025-11-28 13:38:05.089 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:43:09.447 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49758 1 40 1 2025-11-28 13:40:05.625 00:05:02.022 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:40:05.646 00:05:01.943 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:44:09.854 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 1 40 1 2025-11-28 13:44:11.455 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:44:11.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:42:04.926 00:05:02.680 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:46:10.582 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38062 1 40 1 2025-11-28 13:42:04.947 00:05:02.640 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:42:15.873 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-28 13:47:00.621 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51880 9 6412 1 2025-11-28 13:44:05.091 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:48:11.346 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39108 1 40 1 2025-11-28 13:49:11.364 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:49:11.219 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:49:01.397 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51652 9 6412 1 2025-11-28 13:46:05.627 00:05:02.021 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:46:05.647 00:05:01.941 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:50:01.803 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40526 10 6452 1 2025-11-28 13:51:02.212 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56876 9 6412 1 2025-11-28 13:47:35.877 00:05:10.132 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2544 1 2025-11-28 13:48:04.947 00:05:02.640 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:48:04.926 00:05:02.681 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:52:02.611 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 10 6452 1 2025-11-28 13:53:03.023 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57960 9 6412 1 2025-11-28 13:50:05.093 00:05:02.537 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 13:54:03.423 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39644 9 6412 1 2025-11-28 13:54:11.465 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 13:54:11.460 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 13:55:03.831 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57488 9 6412 1 2025-11-28 13:52:05.647 00:05:01.942 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 13:52:05.627 00:05:02.022 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 13:56:04.231 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49862 9 6412 1 2025-11-28 13:52:55.884 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2604 1 2025-11-28 13:57:14.998 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37360 1 40 1 2025-11-28 13:54:04.947 00:05:02.642 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 13:54:04.928 00:05:02.682 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 13:58:05.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37590 9 6412 1 Summary: total flows: 131, total bytes: 264352, total packets: 1367, avg bps: 559, avg pps: 0, avg bpp: 193 Time window: 2025-11-28 12:56:05 - 2025-11-28 13:59:07 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0053s User: 0.0000s Wall: 0.0018s flows/second: 72813.9 Runtime: 0.0018s