Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 10:58:40.856 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49438 10 6452 1 2025-11-30 11:00:05.640 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:00:05.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:56:05.933 00:05:02.752 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:00:41.706 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39466 9 6412 1 2025-11-30 11:01:52.501 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60982 1 40 1 2025-11-30 10:57:59.528 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2608 1 2025-11-30 10:58:06.626 00:05:02.019 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 10:58:06.608 00:05:02.098 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:02:42.538 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60744 10 6452 1 2025-11-30 11:03:42.944 00:00:10.546 TCP 1.101.0.1:3000 -> 23.104.0.1:43696 10 6452 1 2025-11-30 11:00:05.795 00:05:02.870 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:00:05.817 00:05:02.830 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:04:53.899 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 1 40 1 2025-11-30 11:05:05.917 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:05:05.727 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:05:43.934 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36892 10 6452 1 2025-11-30 11:02:05.934 00:05:02.755 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:06:44.297 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59646 9 6412 1 2025-11-30 11:03:19.535 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-30 11:07:44.699 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57894 9 6412 1 2025-11-30 11:04:06.628 00:05:02.020 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:04:06.609 00:05:02.100 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:09:55.833 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55880 1 40 1 2025-11-30 11:10:05.909 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:06:05.821 00:05:02.828 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:10:06.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:06:05.799 00:05:02.869 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:10:45.874 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38220 9 6412 1 2025-11-30 11:11:46.308 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50118 10 6452 1 2025-11-30 11:08:05.940 00:05:02.748 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:08:39.542 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-30 11:12:57.377 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54188 1 40 1 2025-11-30 11:13:57.740 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44728 1 40 1 2025-11-30 11:10:06.608 00:05:02.102 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:10:06.628 00:05:02.022 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:14:47.776 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-11-30 11:15:06.225 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:15:06.317 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:15:48.197 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48396 9 6412 1 2025-11-30 11:12:05.820 00:05:02.831 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:12:05.800 00:05:02.871 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:16:58.964 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45550 1 40 1 2025-11-30 11:17:49.008 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57954 10 6452 1 2025-11-30 11:14:05.942 00:05:02.749 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:13:59.548 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-30 11:18:59.776 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36250 1 40 1 2025-11-30 11:20:05.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:20:06.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:16:06.630 00:05:02.022 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:16:06.611 00:05:02.103 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:20:50.225 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58154 9 6412 1 2025-11-30 11:21:50.587 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41634 10 6452 1 2025-11-30 11:18:05.822 00:05:02.830 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:18:05.802 00:05:02.870 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:22:50.952 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:52204 13 6608 1 2025-11-30 11:19:19.558 00:05:00.959 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2508 1 2025-11-30 11:23:51.393 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42412 10 6452 1 2025-11-30 11:20:05.944 00:05:02.749 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:25:02.164 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45014 1 40 1 2025-11-30 11:25:06.115 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:25:06.321 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:22:06.632 00:05:02.021 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:22:06.611 00:05:02.101 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:26:52.617 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59710 10 6452 1 2025-11-30 11:27:53.031 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44660 9 6412 1 2025-11-30 11:24:05.804 00:05:02.869 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:24:05.823 00:05:02.830 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:24:29.559 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2824 1 2025-11-30 11:28:53.443 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56846 10 6452 1 2025-11-30 11:29:53.847 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33102 9 6412 1 2025-11-30 11:26:05.945 00:05:02.749 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:30:06.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:30:06.240 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:28:06.612 00:05:02.103 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:28:06.634 00:05:02.023 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:33:05.444 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50040 1 40 1 2025-11-30 11:29:49.561 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-30 11:33:55.489 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44228 10 6452 1 2025-11-30 11:30:05.804 00:05:02.872 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:30:05.826 00:05:02.832 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:35:06.214 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:35:06.650 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:35:06.264 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59622 1 40 1 2025-11-30 11:35:56.299 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53532 10 6452 1 2025-11-30 11:32:05.946 00:05:02.751 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:36:56.700 00:00:12.434 TCP 1.101.0.1:3000 -> 23.104.0.1:35456 9 6412 1 2025-11-30 11:34:06.617 00:05:02.101 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:34:06.637 00:05:02.021 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:37:59.173 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49180 10 6452 1 2025-11-30 11:35:09.573 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2508 1 2025-11-30 11:40:06.550 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:40:06.548 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:40:10.299 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51398 1 40 1 2025-11-30 11:36:05.827 00:05:02.831 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:36:05.808 00:05:02.872 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:38:05.948 00:05:02.751 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:40:06.618 00:05:02.100 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:40:06.638 00:05:02.020 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:44:11.886 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43710 1 40 1 2025-11-30 11:40:29.580 00:05:10.015 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-30 11:45:06.714 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:45:06.631 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:45:01.931 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36672 11 6516 1 2025-11-30 11:42:05.809 00:05:02.870 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:42:05.829 00:05:02.830 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:46:02.332 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34576 10 6452 1 2025-11-30 11:47:02.739 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43958 11 6516 1 2025-11-30 11:44:05.949 00:05:02.750 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:48:03.154 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42476 9 6412 1 2025-11-30 11:49:13.894 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58374 1 40 1 2025-11-30 11:45:49.596 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-11-30 11:46:06.621 00:05:02.099 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:50:06.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:50:06.736 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:46:06.642 00:05:02.019 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:51:04.338 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42508 9 6412 1 2025-11-30 11:48:05.811 00:05:02.869 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:48:05.831 00:05:02.829 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:53:05.160 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:59972 10 6452 1 2025-11-30 11:50:05.953 00:05:02.747 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 11:55:07.122 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 11:55:07.121 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 11:55:16.362 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47456 1 40 1 2025-11-30 11:51:09.600 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2856 1 2025-11-30 11:52:06.640 00:05:02.021 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 11:52:06.620 00:05:02.100 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 11:56:06.407 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50730 9 6412 1 2025-11-30 11:57:06.811 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58034 10 6452 1 2025-11-30 11:54:05.815 00:05:02.869 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 11:54:05.835 00:05:02.828 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 11:58:17.539 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38800 1 40 1 Summary: total flows: 132, total bytes: 277868, total packets: 1398, avg bps: 587, avg pps: 0, avg bpp: 198 Time window: 2025-11-30 10:56:05 - 2025-11-30 11:59:08 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0047s User: 0.0009s Wall: 0.0013s flows/second: 99990.6 Runtime: 0.0013s