Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 08:59:34.093 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 08:59:34.201 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 08:56:05.438 00:05:02.619 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 08:59:57.223 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:50690 10 6452 1 2025-11-29 09:01:07.980 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37920 1 40 1 2025-11-29 08:58:06.052 00:05:01.965 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 08:58:06.033 00:05:02.044 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 08:58:07.467 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-29 09:02:58.427 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56150 10 6452 1 2025-11-29 09:00:05.312 00:05:02.705 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:03:58.830 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40864 9 6412 1 2025-11-29 09:00:05.293 00:05:02.745 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:04:34.313 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:04:34.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:05:09.576 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48246 1 40 1 2025-11-29 09:05:59.609 00:00:11.040 TCP 1.101.0.1:3000 -> 23.104.0.1:54322 10 6452 1 2025-11-29 09:02:05.442 00:05:02.615 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:07:00.685 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38798 9 6412 1 2025-11-29 09:03:27.476 00:05:10.022 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2592 1 2025-11-29 09:04:06.053 00:05:01.966 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:04:06.032 00:05:02.046 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:09:01.503 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52646 9 6412 1 2025-11-29 09:09:34.508 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:09:34.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:06:05.293 00:05:02.745 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:06:05.313 00:05:02.706 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:08:05.442 00:05:02.616 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:12:13.164 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55868 1 40 1 2025-11-29 09:08:47.498 00:05:10.158 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-11-29 09:13:03.219 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38118 10 6452 1 2025-11-29 09:10:06.053 00:05:01.976 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:10:06.033 00:05:02.060 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:14:34.559 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:14:34.706 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:15:14.344 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60376 1 40 1 2025-11-29 09:12:05.296 00:05:02.771 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:12:05.315 00:05:02.731 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:16:04.390 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 10 6452 1 2025-11-29 09:17:04.755 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:34392 12 10375 1 2025-11-29 09:14:05.443 00:05:02.642 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:18:15.569 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55412 1 40 1 2025-11-29 09:14:07.510 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2468 1 2025-11-29 09:19:34.898 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:19:34.708 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:16:06.055 00:05:01.996 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:16:06.035 00:05:02.076 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:21:06.398 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58376 9 6412 1 2025-11-29 09:18:05.295 00:05:02.776 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:18:05.317 00:05:02.735 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:22:17.172 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36764 1 40 1 2025-11-29 09:19:27.521 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-29 09:20:05.446 00:05:02.648 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:24:34.831 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:24:34.757 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:25:18.359 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58598 1 40 1 2025-11-29 09:22:06.035 00:05:02.079 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:22:06.055 00:05:01.998 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:26:18.764 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34598 1 40 1 2025-11-29 09:27:08.803 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37320 9 6412 1 2025-11-29 09:24:05.297 00:05:02.776 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:24:05.318 00:05:02.736 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:28:09.164 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34520 9 6412 1 2025-11-29 09:24:47.524 00:05:10.001 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-29 09:29:34.930 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:29:35.073 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:26:05.448 00:05:02.646 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:30:09.974 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 10 6452 1 2025-11-29 09:28:06.036 00:05:02.079 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:28:06.055 00:05:01.999 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:33:21.575 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34214 1 40 1 2025-11-29 09:30:05.298 00:05:02.776 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:30:05.319 00:05:02.736 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:30:07.526 00:05:10.384 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2304 1 2025-11-29 09:34:34.856 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:34:35.029 00:00:00.050 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:35:11.975 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42708 9 6412 1 2025-11-29 09:32:05.450 00:05:02.646 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:36:12.374 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57716 10 6452 1 2025-11-29 09:37:24.272 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60548 1 40 1 2025-11-29 09:34:06.039 00:05:02.079 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:34:06.059 00:05:01.999 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:38:24.674 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53406 1 40 1 2025-11-29 09:39:25.039 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46608 1 40 1 2025-11-29 09:39:35.237 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:39:35.244 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:35:27.528 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2544 1 2025-11-29 09:36:05.299 00:05:02.780 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:36:05.320 00:05:02.739 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:40:15.091 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55866 9 6412 1 2025-11-29 09:41:15.497 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48124 9 6412 1 2025-11-29 09:38:05.451 00:05:02.653 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:40:06.084 00:05:01.982 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:40:06.063 00:05:02.062 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:44:35.206 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:44:35.274 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:40:47.530 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2796 1 2025-11-29 09:45:17.128 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39188 9 6412 1 2025-11-29 09:42:05.302 00:05:02.783 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:42:05.321 00:05:02.743 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:46:27.861 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 1 40 1 2025-11-29 09:47:28.271 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 1 40 1 2025-11-29 09:44:05.453 00:05:02.654 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:49:35.350 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:49:35.166 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:46:06.073 00:05:02.052 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:46:06.093 00:05:01.973 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:46:07.535 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-29 09:50:29.478 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36760 1 40 1 2025-11-29 09:51:29.855 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 1 40 1 2025-11-29 09:48:05.301 00:05:02.786 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:48:05.322 00:05:02.745 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:52:19.893 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54710 10 6452 1 2025-11-29 09:53:20.255 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35108 10 6452 1 2025-11-29 09:50:05.455 00:05:02.653 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-29 09:54:30.997 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39330 1 40 1 2025-11-29 09:54:35.583 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 09:54:35.296 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 09:55:21.023 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40050 10 6452 1 2025-11-29 09:51:27.544 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2644 1 2025-11-29 09:52:06.095 00:05:01.975 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-29 09:52:06.076 00:05:02.059 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-29 09:57:32.116 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 1 40 1 2025-11-29 09:54:05.323 00:05:02.752 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-29 09:54:05.303 00:05:02.792 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-29 09:58:22.152 00:00:19.303 TCP 1.101.0.1:3000 -> 23.104.0.1:56602 9 6412 1 Summary: total flows: 125, total bytes: 217031, total packets: 1297, avg bps: 459, avg pps: 0, avg bpp: 167 Time window: 2025-11-29 08:56:05 - 2025-11-29 09:59:08 Total flows processed: 125, passed: 125, Blocks skipped: 0, Bytes read: 13064 Sys: 0.0030s User: 0.0030s Wall: 0.0026s flows/second: 48077.8 Runtime: 0.0026s