Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 19:54:46.389 00:05:10.044 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-28 19:58:46.954 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44940 9 6412 1 2025-11-28 19:59:18.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 19:59:18.836 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 19:59:57.700 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32856 1 40 1 2025-11-28 19:56:05.200 00:05:02.546 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:00:47.736 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42450 10 6452 1 2025-11-28 19:58:05.775 00:05:01.936 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 19:58:05.754 00:05:02.016 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:02:48.527 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47264 10 6452 1 2025-11-28 20:03:59.351 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53070 1 40 1 2025-11-28 19:59:07.725 00:05:57.313 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:00:05.039 00:05:02.674 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:04:18.751 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:00:06.393 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-28 20:04:18.562 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:04:59.769 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36180 1 40 1 2025-11-28 20:02:05.199 00:05:02.553 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:04:05.755 00:05:02.018 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:04:05.774 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:09:01.378 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37936 1 40 1 2025-11-28 20:09:18.688 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:09:18.841 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:05:26.400 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2588 1 2025-11-28 20:09:51.416 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45808 9 6412 1 2025-11-28 20:05:07.733 00:05:57.315 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:06:05.058 00:05:02.656 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:10:51.817 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57220 10 6452 1 2025-11-28 20:11:52.221 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57684 10 6452 1 2025-11-28 20:08:05.202 00:05:02.555 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:10:05.778 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:10:05.759 00:05:02.018 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:14:18.801 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:14:18.811 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:10:46.408 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-28 20:15:03.798 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47316 1 40 1 2025-11-28 20:15:53.840 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-11-28 20:11:07.733 00:05:57.319 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:12:05.071 00:05:02.646 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:16:54.251 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53364 10 6452 1 2025-11-28 20:17:54.655 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2025-11-28 20:14:05.202 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:18:55.059 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33592 9 6412 1 2025-11-28 20:19:19.033 00:00:00.041 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:19:19.040 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:19:55.478 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39006 9 6412 1 2025-11-28 20:16:05.762 00:05:02.018 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:16:05.783 00:05:01.938 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:16:06.413 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2712 1 2025-11-28 20:17:07.738 00:05:57.325 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:21:56.262 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51898 10 6452 1 2025-11-28 20:18:05.073 00:05:02.647 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:22:56.661 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33738 10 6452 1 2025-11-28 20:20:05.205 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:23:57.062 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37418 10 6452 1 2025-11-28 20:24:19.271 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:24:19.323 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:25:07.799 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59726 1 40 1 2025-11-28 20:21:26.416 00:05:10.001 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2592 1 2025-11-28 20:22:05.763 00:05:02.017 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:22:05.784 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:26:08.208 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51458 1 40 1 2025-11-28 20:27:08.611 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36640 1 40 1 2025-11-28 20:23:07.740 00:05:57.323 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:24:05.083 00:05:02.639 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:27:58.650 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46078 11 6516 1 2025-11-28 20:29:09.416 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54560 1 40 1 2025-11-28 20:29:19.304 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:29:19.240 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:30:09.824 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55562 1 40 1 2025-11-28 20:26:05.205 00:05:02.556 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:26:46.416 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2480 1 2025-11-28 20:30:59.865 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:38110 9 6412 1 2025-11-28 20:28:05.765 00:05:02.017 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:32:10.613 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42992 1 40 1 2025-11-28 20:28:05.784 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:30:05.083 00:05:02.640 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:29:07.740 00:06:00.002 TCP 23.152.0.1:179 -> 23.155.0.1:42479 13 790 1 2025-11-28 20:34:19.542 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:34:19.441 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:35:11.797 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 1 40 1 2025-11-28 20:32:05.207 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:36:12.203 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44902 1 40 1 2025-11-28 20:32:06.418 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2604 1 2025-11-28 20:37:12.614 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48584 1 40 1 2025-11-28 20:34:05.765 00:05:02.019 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:34:05.786 00:05:01.939 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:38:02.651 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41740 10 6452 1 2025-11-28 20:39:13.419 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40848 1 40 1 2025-11-28 20:39:19.320 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:39:19.605 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:36:05.090 00:05:02.634 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:36:05.070 00:05:02.674 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:40:13.825 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45684 1 40 1 2025-11-28 20:37:26.429 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-28 20:38:05.208 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:42:04.291 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34366 9 6412 1 2025-11-28 20:40:05.788 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:40:05.768 00:05:02.017 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:44:15.419 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40434 1 40 1 2025-11-28 20:44:19.774 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:44:19.901 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:45:15.834 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54888 1 40 1 2025-11-28 20:42:05.072 00:05:02.673 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:42:05.092 00:05:02.634 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:42:46.438 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2548 1 2025-11-28 20:47:06.298 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60550 10 6452 1 2025-11-28 20:44:05.208 00:05:02.558 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:48:06.707 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34934 9 6412 1 2025-11-28 20:49:17.499 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44926 1 40 1 2025-11-28 20:49:19.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:49:19.679 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:46:05.788 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:46:05.770 00:05:02.017 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:50:07.538 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39820 10 6452 1 2025-11-28 20:51:18.265 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46398 1 40 1 2025-11-28 20:48:05.092 00:05:02.634 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:48:05.073 00:05:02.673 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:48:06.450 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2796 1 2025-11-28 20:52:18.669 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56770 1 40 1 2025-11-28 20:53:19.034 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37902 1 40 1 2025-11-28 20:50:05.210 00:05:02.557 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 20:54:19.863 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 20:54:19.435 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43110 1 40 1 2025-11-28 20:54:19.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 20:55:09.474 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41410 9 6412 1 2025-11-28 20:52:05.791 00:05:01.937 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-28 20:52:05.772 00:05:02.017 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-28 20:56:20.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 1 40 1 2025-11-28 20:57:20.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49076 1 40 1 2025-11-28 20:53:26.462 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-28 20:54:05.094 00:05:02.636 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-28 20:54:05.075 00:05:02.676 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-28 20:58:10.708 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57164 9 6412 1 Summary: total flows: 134, total bytes: 222364, total packets: 1351, avg bps: 460, avg pps: 0, avg bpp: 164 Time window: 2025-11-28 19:54:46 - 2025-11-28 20:59:07 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0053s User: 0.0009s Wall: 0.0020s flows/second: 68191.8 Runtime: 0.0020s