Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 01:58:58.733 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 1 40 1 2025-11-29 01:59:25.925 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 01:59:25.980 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 01:59:59.508 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41572 1 40 1 2025-11-29 01:56:05.316 00:05:02.592 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:00:59.875 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34008 1 40 1 2025-11-29 01:57:06.845 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-29 02:01:49.906 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52544 11 6516 1 2025-11-29 01:58:05.891 00:05:01.978 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 01:58:05.870 00:05:02.058 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:02:50.329 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36592 10 6452 1 2025-11-29 02:03:50.693 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47698 10 6452 1 2025-11-29 02:00:05.157 00:05:02.732 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:00:05.176 00:05:02.692 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:04:26.025 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:04:26.183 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:05:01.384 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 1 40 1 2025-11-29 02:05:51.421 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60468 10 6452 1 2025-11-29 02:02:05.317 00:05:02.592 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:02:26.853 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2792 1 2025-11-29 02:07:02.196 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35142 1 40 1 2025-11-29 02:07:52.235 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46480 9 6412 1 2025-11-29 02:04:05.872 00:05:02.058 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:04:05.891 00:05:01.978 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:09:26.213 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:09:26.306 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:10:03.374 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53964 1 40 1 2025-11-29 02:06:05.158 00:05:02.733 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:06:05.178 00:05:02.692 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:11:04.015 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48456 1 40 1 2025-11-29 02:07:46.856 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2576 1 2025-11-29 02:11:54.049 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55222 9 6412 1 2025-11-29 02:08:05.317 00:05:02.593 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:12:54.457 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50548 9 6412 1 2025-11-29 02:10:05.892 00:05:01.979 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:10:05.872 00:05:02.059 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:14:26.247 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:14:26.243 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:15:05.702 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49324 1 40 1 2025-11-29 02:12:05.180 00:05:02.693 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:12:05.159 00:05:02.734 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:17:06.520 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36982 1 40 1 2025-11-29 02:13:06.862 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-29 02:18:06.918 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53194 1 40 1 2025-11-29 02:14:05.319 00:05:02.597 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:19:26.396 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:19:26.339 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:16:05.873 00:05:02.064 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:19:57.378 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42992 10 6452 1 2025-11-29 02:16:05.893 00:05:01.983 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:21:08.162 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50680 1 40 1 2025-11-29 02:18:05.161 00:05:02.736 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:22:08.569 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59838 1 40 1 2025-11-29 02:18:05.183 00:05:02.695 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:18:26.874 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-29 02:22:58.603 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34790 10 6452 1 2025-11-29 02:20:05.320 00:05:02.608 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:24:26.281 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:24:26.381 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:25:10.341 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34180 1 40 1 2025-11-29 02:26:00.390 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57424 10 6452 1 2025-11-29 02:22:05.894 00:05:01.992 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:22:05.873 00:05:02.073 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:27:11.168 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46836 1 40 1 2025-11-29 02:23:46.880 00:05:10.016 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-29 02:24:05.184 00:05:02.702 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:24:05.163 00:05:02.743 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:28:01.215 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49670 9 6412 1 2025-11-29 02:29:26.350 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:29:26.468 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:26:05.320 00:05:02.607 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:31:02.449 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39868 10 6452 1 2025-11-29 02:28:05.885 00:05:02.062 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:28:05.906 00:05:01.981 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:32:02.816 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:44810 10 6452 1 2025-11-29 02:33:03.201 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 10 6452 1 2025-11-29 02:29:06.897 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2856 1 2025-11-29 02:30:05.184 00:05:02.703 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:30:05.165 00:05:02.743 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:34:03.609 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52614 9 6412 1 2025-11-29 02:34:26.518 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:34:26.521 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:35:04.011 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45982 10 6452 1 2025-11-29 02:32:05.322 00:05:02.605 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:36:14.736 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57964 1 40 1 2025-11-29 02:37:04.788 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 10 6452 1 2025-11-29 02:34:05.907 00:05:01.980 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:34:05.888 00:05:02.061 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:38:05.200 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58032 10 6452 1 2025-11-29 02:34:26.903 00:05:10.037 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2420 1 2025-11-29 02:39:26.717 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:39:26.713 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:36:05.186 00:05:02.701 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:36:05.166 00:05:02.742 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:40:05.965 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35042 9 6412 1 2025-11-29 02:41:16.752 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43592 1 40 1 2025-11-29 02:38:05.329 00:05:02.600 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:43:07.205 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49752 10 6452 1 2025-11-29 02:39:46.917 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-29 02:40:05.908 00:05:01.980 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:40:05.890 00:05:02.060 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:44:07.606 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 9 6412 1 2025-11-29 02:44:26.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:44:26.900 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:42:05.186 00:05:02.703 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:42:05.166 00:05:02.743 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:46:08.418 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:51580 10 6452 1 2025-11-29 02:44:05.329 00:05:02.600 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:45:06.931 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-29 02:49:27.184 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:49:27.138 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:46:05.891 00:05:02.058 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:46:05.911 00:05:01.978 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:50:09.976 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39890 9 6412 1 2025-11-29 02:51:20.748 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56082 1 40 1 2025-11-29 02:48:05.187 00:05:02.702 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:48:05.167 00:05:02.742 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:53:21.629 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33946 1 40 1 2025-11-29 02:50:05.330 00:05:02.599 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 02:54:27.111 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 02:54:26.855 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 02:50:26.938 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-29 02:55:12.078 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 10 6452 1 2025-11-29 02:52:05.893 00:05:02.057 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 02:52:05.913 00:05:01.977 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 02:57:23.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51124 1 40 1 2025-11-29 02:54:05.169 00:05:02.741 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 02:54:05.189 00:05:02.702 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 02:58:13.299 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 9 6412 1 Summary: total flows: 129, total bytes: 232692, total packets: 1331, avg bps: 492, avg pps: 0, avg bpp: 174 Time window: 2025-11-29 01:56:05 - 2025-11-29 02:59:07 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0046s User: 0.0015s Wall: 0.0021s flows/second: 61814.8 Runtime: 0.0021s