Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 19:58:45.834 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35464 9 6412 1 2025-11-30 19:55:30.240 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2872 1 2025-11-30 19:59:46.238 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50220 10 6452 1 2025-11-30 19:56:06.112 00:05:02.738 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:00:16.479 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:00:16.391 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:00:46.632 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60936 10 6452 1 2025-11-30 20:01:57.403 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47120 1 40 1 2025-11-30 19:58:06.769 00:05:02.101 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 19:58:06.790 00:05:02.021 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:02:47.440 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59718 10 6452 1 2025-11-30 20:00:05.960 00:05:02.870 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:00:05.982 00:05:02.830 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:04:58.564 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46812 1 40 1 2025-11-30 20:00:50.250 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-30 20:05:17.043 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:05:17.042 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:02:06.115 00:05:02.736 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:06:59.328 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35234 1 40 1 2025-11-30 20:07:49.375 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35488 10 6452 1 2025-11-30 20:04:06.790 00:05:02.021 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:04:06.770 00:05:02.102 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:08:49.781 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43062 9 6412 1 2025-11-30 20:06:05.962 00:05:02.869 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:06:05.983 00:05:02.829 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:10:16.650 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:06:10.261 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2628 1 2025-11-30 20:10:16.650 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:10:50.606 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49024 9 6412 1 2025-11-30 20:08:06.117 00:05:02.736 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:12:51.384 00:00:10.943 TCP 1.101.0.1:3000 -> 23.104.0.1:57048 11 10335 1 2025-11-30 20:13:52.371 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60504 10 6452 1 2025-11-30 20:10:06.791 00:05:02.023 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:10:06.771 00:05:02.103 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:14:52.734 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46590 9 6412 1 2025-11-30 20:15:16.914 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:15:16.777 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:11:30.268 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-30 20:12:05.966 00:05:02.868 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:15:53.133 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55728 10 6452 1 2025-11-30 20:12:05.987 00:05:02.828 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:17:53.935 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49408 10 6452 1 2025-11-30 20:14:06.116 00:05:02.740 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:18:54.336 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57334 9 6412 1 2025-11-30 20:19:54.703 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42262 10 6452 1 2025-11-30 20:16:06.792 00:05:02.024 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:16:06.771 00:05:02.104 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:20:16.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:20:16.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:16:50.272 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-30 20:20:55.131 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56092 9 6412 1 2025-11-30 20:22:05.931 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51596 1 40 1 2025-11-30 20:18:05.988 00:05:02.828 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:18:05.968 00:05:02.868 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:22:55.980 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48754 9 6412 1 2025-11-30 20:23:56.378 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38814 10 6452 1 2025-11-30 20:20:06.118 00:05:02.739 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:25:07.095 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41932 1 40 1 2025-11-30 20:25:16.998 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:25:16.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:22:06.777 00:05:02.103 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:26:07.501 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43228 1 40 1 2025-11-30 20:22:06.797 00:05:02.023 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:22:10.281 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2872 1 2025-11-30 20:27:07.906 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 1 40 1 2025-11-30 20:24:05.974 00:05:02.866 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:24:05.994 00:05:02.825 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:28:58.354 00:00:10.846 TCP 1.101.0.1:3000 -> 23.104.0.1:48998 9 6412 1 2025-11-30 20:29:59.244 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48660 9 6412 1 2025-11-30 20:26:06.121 00:05:02.740 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:30:17.207 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:30:17.133 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:30:59.647 00:00:10.514 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-11-30 20:27:30.284 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2464 1 2025-11-30 20:32:00.221 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53538 9 6412 1 2025-11-30 20:28:06.798 00:05:02.023 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:28:06.779 00:05:02.103 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:33:10.912 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43832 1 40 1 2025-11-30 20:30:05.976 00:05:02.866 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:30:05.997 00:05:02.826 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:34:00.947 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:58688 9 6412 1 2025-11-30 20:35:11.784 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59862 1 40 1 2025-11-30 20:35:17.211 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:35:17.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:32:06.120 00:05:02.743 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:36:01.821 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38192 10 6452 1 2025-11-30 20:32:50.295 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-30 20:37:02.228 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44814 9 6412 1 2025-11-30 20:34:06.799 00:05:02.025 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:34:06.779 00:05:02.105 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:38:02.598 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47908 10 6452 1 2025-11-30 20:39:02.999 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44544 9 6412 1 2025-11-30 20:36:05.977 00:05:02.867 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:36:05.999 00:05:02.827 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:40:03.409 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54846 9 6412 1 2025-11-30 20:40:17.336 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:40:17.221 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:38:06.121 00:05:02.744 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:42:14.578 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41122 1 40 1 2025-11-30 20:38:10.299 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2508 1 2025-11-30 20:43:04.617 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54946 9 6412 1 2025-11-30 20:40:06.800 00:05:02.024 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:40:06.779 00:05:02.105 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:44:15.314 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56672 1 40 1 2025-11-30 20:45:17.420 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:45:17.357 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:42:05.980 00:05:02.867 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:42:06.001 00:05:02.826 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:43:30.302 00:05:10.861 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-30 20:44:06.123 00:05:02.743 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:48:16.826 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 1 40 1 2025-11-30 20:49:06.862 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:52730 10 6452 1 2025-11-30 20:46:06.800 00:05:02.025 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:46:06.781 00:05:02.105 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:50:17.589 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:50:17.591 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:51:07.699 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57390 9 6412 1 2025-11-30 20:48:06.002 00:05:02.824 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:48:05.982 00:05:02.865 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:48:50.309 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-30 20:53:08.853 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54238 10 6452 1 2025-11-30 20:50:06.124 00:05:02.741 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 20:54:09.251 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41960 9 6412 1 2025-11-30 20:55:20.020 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 1 40 1 2025-11-30 20:55:17.612 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 20:55:17.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 20:52:06.782 00:05:02.107 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:52:06.802 00:05:02.026 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 20:56:10.088 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41798 10 6452 1 2025-11-30 20:57:20.778 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60240 1 40 1 2025-11-30 20:54:06.003 00:05:02.825 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 20:54:05.982 00:05:02.867 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 20:54:10.312 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2876 1 2025-11-30 20:58:10.817 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58806 9 6412 1 Summary: total flows: 134, total bytes: 296955, total packets: 1448, avg bps: 620, avg pps: 0, avg bpp: 205 Time window: 2025-11-30 19:55:30 - 2025-11-30 20:59:20 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0068s User: 0.0000s Wall: 0.0026s flows/second: 51520.5 Runtime: 0.0026s