Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 20:59:11.222 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47088 9 6412 1 2025-11-30 20:56:06.127 00:05:02.743 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:00:17.552 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:00:17.645 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:00:11.625 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55358 10 6452 1 2025-11-30 21:01:22.319 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50822 1 40 1 2025-11-30 20:58:06.784 00:05:02.106 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 20:58:06.804 00:05:02.026 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:02:22.741 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 1 40 1 2025-11-30 21:03:23.158 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35752 1 40 1 2025-11-30 20:59:30.316 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-30 21:00:06.005 00:05:02.824 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:00:05.985 00:05:02.865 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:05:18.230 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:05:17.932 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:05:13.594 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 10 6452 1 2025-11-30 21:02:06.129 00:05:02.741 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:07:14.409 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37716 10 6452 1 2025-11-30 21:04:06.784 00:05:02.106 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:04:06.805 00:05:02.026 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:04:50.325 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-11-30 21:09:25.535 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41756 1 40 1 2025-11-30 21:06:06.006 00:05:02.825 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:06:05.986 00:05:02.866 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:10:18.142 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:10:18.079 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:10:25.939 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50932 1 40 1 2025-11-30 21:11:15.981 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45888 10 6452 1 2025-11-30 21:08:06.133 00:05:02.740 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:12:26.708 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57822 1 40 1 2025-11-30 21:13:16.748 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39818 10 6452 1 2025-11-30 21:10:06.806 00:05:02.026 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:10:06.786 00:05:02.107 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:10:10.338 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-30 21:14:17.129 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60072 9 6412 1 2025-11-30 21:15:17.941 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:15:17.803 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:12:06.007 00:05:02.826 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:12:05.986 00:05:02.867 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:16:17.892 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32894 9 6412 1 2025-11-30 21:14:06.133 00:05:02.740 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:18:18.712 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52022 9 6412 1 2025-11-30 21:19:19.125 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45668 10 6452 1 2025-11-30 21:15:30.355 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2368 1 2025-11-30 21:16:06.808 00:05:02.026 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:16:06.788 00:05:02.107 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:20:18.150 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:20:18.202 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:20:19.541 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39980 9 6412 1 2025-11-30 21:21:19.902 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:48036 10 6452 1 2025-11-30 21:18:06.007 00:05:02.833 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:18:05.985 00:05:02.875 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:22:20.343 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43552 10 6452 1 2025-11-30 21:23:20.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45332 9 6412 1 2025-11-30 21:20:06.140 00:05:02.742 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:24:31.518 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60240 1 40 1 2025-11-30 21:20:50.365 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 3016 1 2025-11-30 21:25:18.011 00:00:00.051 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:25:18.205 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:25:31.922 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54000 1 40 1 2025-11-30 21:22:06.788 00:05:02.113 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:22:06.808 00:05:02.032 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:24:05.988 00:05:02.874 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:24:06.008 00:05:02.833 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:29:23.136 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55024 9 6412 1 2025-11-30 21:26:06.139 00:05:02.743 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:30:18.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:30:18.272 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:26:10.372 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-30 21:31:23.996 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46782 10 6452 1 2025-11-30 21:28:06.810 00:05:02.032 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:28:06.789 00:05:02.113 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:32:34.770 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50186 1 40 1 2025-11-30 21:33:35.129 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47068 1 40 1 2025-11-30 21:30:05.992 00:05:02.870 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:30:06.013 00:05:02.829 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:34:25.171 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38188 9 6412 1 2025-11-30 21:35:18.421 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:35:18.429 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:31:30.375 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2684 1 2025-11-30 21:32:06.140 00:05:02.743 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:36:36.293 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49990 1 40 1 2025-11-30 21:34:06.792 00:05:02.113 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:34:06.812 00:05:02.033 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:38:26.740 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37168 10 6452 1 2025-11-30 21:39:27.157 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6452 1 2025-11-30 21:36:05.993 00:05:02.872 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:36:06.013 00:05:02.831 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:40:18.472 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:40:18.606 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:40:27.568 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54458 9 6412 1 2025-11-30 21:36:40.734 00:05:09.659 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2252 1 2025-11-30 21:38:06.154 00:05:02.731 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:43:29.962 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48900 9 6412 1 2025-11-30 21:40:06.812 00:05:02.033 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:40:06.793 00:05:02.114 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:44:30.382 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55990 9 6412 1 2025-11-30 21:45:18.819 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:45:18.690 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:42:06.020 00:05:02.827 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:42:05.998 00:05:02.869 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:42:00.393 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-30 21:46:31.159 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33256 10 6452 1 2025-11-30 21:47:31.561 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59078 9 6412 1 2025-11-30 21:44:06.156 00:05:02.732 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:48:31.958 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40280 9 6412 1 2025-11-30 21:49:32.385 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36496 10 6452 1 2025-11-30 21:46:06.794 00:05:02.114 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:46:06.815 00:05:02.034 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:50:18.861 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:50:18.536 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:50:32.793 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40352 10 6452 1 2025-11-30 21:47:20.397 00:05:10.056 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2744 1 2025-11-30 21:48:06.020 00:05:02.828 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:48:06.000 00:05:02.868 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:52:43.953 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44954 1 40 1 2025-11-30 21:53:33.997 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42176 9 6412 1 2025-11-30 21:50:06.159 00:05:02.730 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 21:55:18.703 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:55:18.844 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:55:34.825 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34840 10 6452 1 2025-11-30 21:52:06.797 00:05:02.112 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-30 21:52:06.817 00:05:02.031 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-30 21:56:35.236 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38816 10 6452 1 2025-11-30 21:52:30.927 00:05:09.485 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2544 1 2025-11-30 21:54:06.022 00:05:02.827 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-30 21:54:06.003 00:05:02.867 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-30 21:58:36.038 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 9 6412 1 Summary: total flows: 128, total bytes: 270732, total packets: 1374, avg bps: 572, avg pps: 0, avg bpp: 197 Time window: 2025-11-30 20:56:06 - 2025-11-30 21:59:08 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0038s User: 0.0029s Wall: 0.0027s flows/second: 47322.2 Runtime: 0.0027s