Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 16:59:32.555 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39854 10 6452 1 2025-11-30 16:56:06.062 00:05:02.734 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:00:13.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:00:13.021 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:00:43.290 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37754 1 40 1 2025-11-30 17:01:33.334 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 10 6452 1 2025-11-30 16:58:06.720 00:05:02.040 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 16:58:06.699 00:05:02.120 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:02:44.112 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50218 1 40 1 2025-11-30 17:03:34.153 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43984 10 6452 1 2025-11-30 17:00:05.903 00:05:02.876 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:00:05.924 00:05:02.836 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 16:59:59.970 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-11-30 17:04:34.556 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57538 10 6452 1 2025-11-30 17:05:13.080 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:05:13.088 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:05:45.363 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48384 1 40 1 2025-11-30 17:02:06.066 00:05:02.734 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:06:35.386 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40010 10 6452 1 2025-11-30 17:07:35.792 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45110 10 6452 1 2025-11-30 17:04:06.720 00:05:02.039 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:04:06.700 00:05:02.119 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:08:46.532 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32784 1 40 1 2025-11-30 17:05:19.972 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2792 1 2025-11-30 17:09:36.567 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46026 10 6452 1 2025-11-30 17:06:05.905 00:05:02.875 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:06:05.924 00:05:02.835 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:10:12.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:10:13.169 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:10:36.974 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 10 6452 1 2025-11-30 17:11:47.753 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 1 40 1 2025-11-30 17:08:06.067 00:05:02.735 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:10:06.704 00:05:02.119 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:10:06.724 00:05:02.038 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:10:30.241 00:05:09.744 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-30 17:14:38.646 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55024 9 6412 1 2025-11-30 17:15:13.292 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:15:13.394 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:15:49.421 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49408 1 40 1 2025-11-30 17:12:05.906 00:05:02.877 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:12:05.928 00:05:02.836 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:16:39.460 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56634 10 6452 1 2025-11-30 17:17:39.869 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37698 10 6452 1 2025-11-30 17:14:06.071 00:05:02.733 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:15:49.987 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2564 1 2025-11-30 17:16:06.706 00:05:02.117 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:16:06.727 00:05:02.036 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:20:13.237 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:20:13.407 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:20:41.062 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45112 10 6452 1 2025-11-30 17:21:41.423 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60464 9 6412 1 2025-11-30 17:18:05.928 00:05:02.836 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:18:05.909 00:05:02.876 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:22:52.195 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39870 1 40 1 2025-11-30 17:23:52.605 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35572 1 40 1 2025-11-30 17:20:06.073 00:05:02.731 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:24:53.006 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 1 40 1 2025-11-30 17:25:13.421 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:25:13.488 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:21:09.991 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-30 17:22:06.729 00:05:02.037 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:22:06.707 00:05:02.117 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:26:43.450 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42320 9 6412 1 2025-11-30 17:27:54.203 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49996 1 40 1 2025-11-30 17:24:05.910 00:05:02.874 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:24:05.930 00:05:02.835 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:28:44.242 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48334 10 6452 1 2025-11-30 17:29:44.650 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 9 6412 1 2025-11-30 17:26:06.078 00:05:02.728 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:30:13.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:30:13.468 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:26:29.997 00:05:00.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2236 1 2025-11-30 17:30:45.055 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39522 10 6452 1 2025-11-30 17:31:55.817 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40026 1 40 1 2025-11-30 17:28:06.729 00:05:02.036 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:28:06.710 00:05:02.116 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:32:56.221 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43662 1 40 1 2025-11-30 17:33:57.253 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 1 40 1 2025-11-30 17:30:05.932 00:05:02.835 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:30:05.911 00:05:02.874 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:34:47.293 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59626 9 6412 1 2025-11-30 17:35:13.779 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:35:13.874 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:31:40.005 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 42 3000 1 2025-11-30 17:35:47.696 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55846 9 6412 1 2025-11-30 17:32:06.080 00:05:02.730 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:36:48.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55514 9 6412 1 2025-11-30 17:37:58.861 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46632 1 40 1 2025-11-30 17:34:06.711 00:05:02.121 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:34:06.730 00:05:02.041 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:38:48.904 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60522 10 6452 1 2025-11-30 17:36:05.916 00:05:02.876 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:36:05.936 00:05:02.836 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:40:13.807 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:40:13.709 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:37:00.014 00:05:10.046 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-30 17:38:06.081 00:05:02.732 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:40:06.719 00:05:02.114 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:43:51.083 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55288 10 6452 1 2025-11-30 17:40:06.740 00:05:02.033 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:44:51.491 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47972 10 6452 1 2025-11-30 17:45:13.704 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:45:13.852 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:42:05.917 00:05:02.877 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:42:05.938 00:05:02.836 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:42:20.061 00:05:10.000 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2544 1 2025-11-30 17:47:52.706 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58432 9 6412 1 2025-11-30 17:44:06.081 00:05:02.732 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:49:03.435 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56526 1 40 1 2025-11-30 17:50:03.801 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45066 1 40 1 2025-11-30 17:46:06.720 00:05:02.113 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:46:06.740 00:05:02.033 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:50:13.816 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:50:13.836 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:47:40.062 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2508 1 2025-11-30 17:51:54.246 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49624 10 6452 1 2025-11-30 17:48:05.941 00:05:02.832 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:48:05.922 00:05:02.873 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 17:54:05.387 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 1 40 1 2025-11-30 17:50:06.083 00:05:02.731 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 17:55:05.780 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49892 1 40 1 2025-11-30 17:55:14.008 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:55:14.011 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:56:06.179 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33158 1 40 1 2025-11-30 17:52:06.745 00:05:02.029 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 17:52:06.725 00:05:02.109 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 17:57:06.536 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33076 1 40 1 2025-11-30 17:53:00.069 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-30 17:54:05.942 00:05:02.832 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 17:58:06.938 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56568 1 40 1 2025-11-30 17:54:05.922 00:05:02.872 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 Summary: total flows: 131, total bytes: 232532, total packets: 1330, avg bps: 491, avg pps: 0, avg bpp: 174 Time window: 2025-11-30 16:56:06 - 2025-11-30 17:59:08 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0027s User: 0.0027s Wall: 0.0021s flows/second: 62766.0 Runtime: 0.0021s