Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 05:59:06.386 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35672 9 6412 1 2025-12-01 05:56:06.308 00:05:02.724 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:00:28.523 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:00:28.360 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:57:01.018 00:05:10.040 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 2952 1 2025-12-01 06:01:07.458 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59414 9 6412 1 2025-12-01 05:58:06.957 00:05:02.095 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 05:58:06.976 00:05:02.015 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:02:18.257 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51722 1 40 1 2025-12-01 06:03:08.294 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6452 1 2025-12-01 06:00:06.156 00:05:02.860 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:00:06.177 00:05:02.819 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:04:19.028 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53204 1 40 1 2025-12-01 06:05:28.617 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:05:28.724 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:02:06.308 00:05:02.728 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:06:09.484 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 9 6412 1 2025-12-01 06:02:21.058 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2456 1 2025-12-01 06:04:06.978 00:05:02.017 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:04:06.959 00:05:02.098 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:08:10.290 00:00:10.944 TCP 1.101.0.1:3000 -> 23.104.0.1:51956 10 6452 1 2025-12-01 06:09:21.641 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60434 1 40 1 2025-12-01 06:06:06.154 00:05:02.863 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:06:06.176 00:05:02.821 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:10:11.683 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46628 10 6452 1 2025-12-01 06:10:28.945 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:10:28.653 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:11:12.119 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59278 10 6452 1 2025-12-01 06:07:41.064 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2628 1 2025-12-01 06:08:06.312 00:05:02.726 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:12:22.904 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43926 1 40 1 2025-12-01 06:13:23.318 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45506 1 40 1 2025-12-01 06:10:06.979 00:05:02.019 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:10:06.959 00:05:02.100 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:15:24.165 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50588 1 40 1 2025-12-01 06:15:28.754 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:15:28.828 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:12:06.176 00:05:02.823 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:12:06.156 00:05:02.864 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:13:01.074 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2336 1 2025-12-01 06:17:24.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59212 1 40 1 2025-12-01 06:14:06.314 00:05:02.726 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:18:14.964 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40204 10 6452 1 2025-12-01 06:19:15.373 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55082 10 6452 1 2025-12-01 06:16:06.980 00:05:02.020 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:16:06.961 00:05:02.100 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:20:15.779 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58714 9 6412 1 2025-12-01 06:20:28.857 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:20:28.858 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:18:06.177 00:05:02.823 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:18:06.159 00:05:02.862 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:18:21.082 00:05:00.925 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2316 1 2025-12-01 06:22:16.591 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:52880 11 10335 1 2025-12-01 06:20:06.314 00:05:02.726 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:24:27.835 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47368 1 40 1 2025-12-01 06:25:28.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:25:29.130 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:22:06.961 00:05:02.100 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:22:06.982 00:05:02.020 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:23:31.086 00:05:10.025 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 2936 1 2025-12-01 06:24:06.177 00:05:02.825 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:24:06.158 00:05:02.865 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:28:19.139 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51870 10 6452 1 2025-12-01 06:26:06.315 00:05:02.728 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:30:29.026 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:30:29.028 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:30:30.645 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56038 1 40 1 2025-12-01 06:28:06.982 00:05:02.022 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:28:06.962 00:05:02.102 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:32:31.487 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39310 1 40 1 2025-12-01 06:28:51.091 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-12-01 06:33:31.888 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60680 1 40 1 2025-12-01 06:30:06.179 00:05:02.826 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:30:06.159 00:05:02.866 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:34:21.928 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35270 9 6412 1 2025-12-01 06:35:29.413 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:35:29.483 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:35:22.291 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 9 6412 1 2025-12-01 06:32:06.317 00:05:02.727 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:36:22.694 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49634 9 6412 1 2025-12-01 06:37:23.123 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58506 9 6412 1 2025-12-01 06:34:06.962 00:05:02.102 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:34:06.982 00:05:02.023 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:34:11.096 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2708 1 2025-12-01 06:38:23.523 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58690 9 6412 1 2025-12-01 06:39:34.304 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 1 40 1 2025-12-01 06:36:06.180 00:05:02.826 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:36:06.159 00:05:02.867 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:40:29.344 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:40:29.262 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:40:24.342 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39138 9 6412 1 2025-12-01 06:41:24.753 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40996 9 6412 1 2025-12-01 06:38:06.320 00:05:02.726 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:42:25.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37184 9 6412 1 2025-12-01 06:39:31.101 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 06:40:06.985 00:05:02.023 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:40:06.966 00:05:02.102 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:44:25.987 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57326 9 6412 1 2025-12-01 06:45:29.532 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:45:29.333 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:45:26.365 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 9 6412 1 2025-12-01 06:42:06.180 00:05:02.828 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:42:06.162 00:05:02.867 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:46:37.087 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 1 40 1 2025-12-01 06:47:27.132 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34806 10 6452 1 2025-12-01 06:44:06.321 00:05:02.727 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:48:37.911 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56064 1 40 1 2025-12-01 06:44:51.111 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 06:49:27.946 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60558 9 6412 1 2025-12-01 06:46:06.985 00:05:02.025 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:46:06.964 00:05:02.105 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:50:29.559 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:50:29.485 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:48:06.183 00:05:02.830 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 06:48:06.163 00:05:02.870 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:52:29.143 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57372 9 6412 1 2025-12-01 06:50:06.324 00:05:02.731 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 06:50:11.116 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2432 1 2025-12-01 06:54:29.903 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57500 10 6452 1 2025-12-01 06:55:29.661 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:55:29.942 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:55:41.019 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55212 1 40 1 2025-12-01 06:52:06.967 00:05:02.106 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 06:52:06.987 00:05:02.027 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 06:56:31.059 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52386 9 6412 1 2025-12-01 06:57:31.422 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:47628 12 10375 1 2025-12-01 06:54:06.163 00:05:02.871 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 06:54:06.184 00:05:02.830 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 Summary: total flows: 128, total bytes: 259238, total packets: 1351, avg bps: 548, avg pps: 0, avg bpp: 191 Time window: 2025-12-01 05:56:06 - 2025-12-01 06:59:09 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0051s User: 0.0000s Wall: 0.0017s flows/second: 77571.3 Runtime: 0.0017s