Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 10:59:19.244 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60638 10 6452 1 2025-12-01 10:55:31.427 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2508 1 2025-12-01 10:56:06.384 00:05:02.773 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:00:19.649 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6452 1 2025-12-01 11:00:34.887 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:00:34.885 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:01:32.508 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 1 40 1 2025-12-01 10:58:07.033 00:05:02.142 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 10:58:07.053 00:05:02.062 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:02:22.555 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46202 9 6412 1 2025-12-01 11:03:22.917 00:00:11.212 TCP 1.101.0.1:3000 -> 23.104.0.1:56220 9 6412 1 2025-12-01 11:00:06.221 00:05:02.915 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:00:06.241 00:05:02.874 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:04:34.533 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45540 1 40 1 2025-12-01 11:00:51.437 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 11:05:34.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:05:34.898 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59900 1 40 1 2025-12-01 11:05:34.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:02:06.384 00:05:02.773 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:06:36.023 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56722 1 40 1 2025-12-01 11:07:36.442 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57416 1 40 1 2025-12-01 11:04:07.034 00:05:02.143 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:04:07.054 00:05:02.063 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:08:36.851 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41082 1 40 1 2025-12-01 11:09:26.883 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52740 9 6412 1 2025-12-01 11:06:06.224 00:05:02.912 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:06:06.247 00:05:02.871 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:06:11.451 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-12-01 11:10:34.691 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:10:34.692 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:10:37.630 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49228 1 40 1 2025-12-01 11:11:27.674 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58986 10 6452 1 2025-12-01 11:08:06.385 00:05:02.772 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:12:28.087 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51552 9 6412 1 2025-12-01 11:13:39.230 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34984 1 40 1 2025-12-01 11:10:07.035 00:05:02.143 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:10:07.056 00:05:02.062 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:15:34.658 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:15:34.843 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:15:29.672 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:46232 9 6412 1 2025-12-01 11:11:31.458 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 2936 1 2025-12-01 11:12:06.228 00:05:02.910 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:12:06.249 00:05:02.870 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:17:40.877 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48854 1 40 1 2025-12-01 11:14:06.387 00:05:02.772 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:18:30.921 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55306 11 6516 1 2025-12-01 11:19:31.340 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49142 10 6452 1 2025-12-01 11:16:07.055 00:05:02.064 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:16:07.036 00:05:02.144 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:20:34.738 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:20:34.911 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:20:31.747 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49354 9 6412 1 2025-12-01 11:16:51.468 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2520 1 2025-12-01 11:21:42.526 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58892 1 40 1 2025-12-01 11:18:06.229 00:05:02.910 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:18:06.249 00:05:02.871 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:22:32.563 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:54366 11 10335 1 2025-12-01 11:23:33.042 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44612 10 6452 1 2025-12-01 11:20:06.388 00:05:02.771 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:24:33.487 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51578 10 6452 1 2025-12-01 11:25:34.959 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:25:34.978 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:22:07.057 00:05:02.062 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:22:07.038 00:05:02.143 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:22:11.472 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2564 1 2025-12-01 11:27:44.989 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54708 1 40 1 2025-12-01 11:24:06.252 00:05:02.868 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:24:06.231 00:05:02.908 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:28:35.042 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 9 6412 1 2025-12-01 11:29:35.439 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 9 6412 1 2025-12-01 11:26:06.390 00:05:02.770 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:30:35.244 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:30:35.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:30:35.854 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:43918 10 6452 1 2025-12-01 11:27:31.479 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 11:28:07.038 00:05:02.144 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:28:07.058 00:05:02.063 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:33:47.497 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 1 40 1 2025-12-01 11:30:06.254 00:05:02.867 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:30:06.235 00:05:02.907 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:35:35.419 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:35:35.190 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:35:48.309 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47684 1 40 1 2025-12-01 11:32:06.392 00:05:02.772 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:36:38.343 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60920 9 6412 1 2025-12-01 11:32:51.486 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-12-01 11:37:49.085 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 1 40 1 2025-12-01 11:34:07.065 00:05:02.058 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:34:07.045 00:05:02.138 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:38:39.133 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41618 10 6452 1 2025-12-01 11:39:39.536 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59184 9 6412 1 2025-12-01 11:36:06.235 00:05:02.907 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:36:06.255 00:05:02.867 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:40:35.524 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:40:35.210 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:40:39.946 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33644 9 6412 1 2025-12-01 11:38:06.394 00:05:02.769 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:38:11.494 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2792 1 2025-12-01 11:42:51.130 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54642 1 40 1 2025-12-01 11:43:41.161 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36478 10 6452 1 2025-12-01 11:40:07.088 00:05:02.035 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:40:07.067 00:05:02.116 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:44:51.981 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50268 1 40 1 2025-12-01 11:45:35.292 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:45:35.382 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:45:42.022 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-12-01 11:42:06.239 00:05:02.908 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:42:06.259 00:05:02.868 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:46:42.439 00:00:10.819 TCP 1.101.0.1:3000 -> 23.104.0.1:51706 9 6412 1 2025-12-01 11:43:31.497 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-12-01 11:44:06.396 00:05:02.769 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:48:43.716 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49846 9 6412 1 2025-12-01 11:49:44.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35816 10 6452 1 2025-12-01 11:46:07.073 00:05:02.114 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:46:07.092 00:05:02.035 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:50:35.572 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:50:35.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:50:54.922 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 1 40 1 2025-12-01 11:51:55.340 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43694 1 40 1 2025-12-01 11:48:06.260 00:05:02.866 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:48:06.240 00:05:02.905 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:52:45.376 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54926 10 6452 1 2025-12-01 11:48:51.500 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2708 1 2025-12-01 11:53:56.155 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47446 1 40 1 2025-12-01 11:50:06.397 00:05:02.768 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 11:54:46.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 9 6412 1 2025-12-01 11:55:36.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 11:55:36.136 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 11:52:07.078 00:05:02.109 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 11:52:07.098 00:05:02.028 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 11:56:57.371 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44692 1 40 1 2025-12-01 11:57:58.356 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36806 1 40 1 2025-12-01 11:54:06.241 00:05:02.905 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 11:54:06.261 00:05:02.866 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 11:54:11.504 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 Summary: total flows: 135, total bytes: 258379, total packets: 1395, avg bps: 539, avg pps: 0, avg bpp: 185 Time window: 2025-12-01 10:55:31 - 2025-12-01 11:59:21 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0036s User: 0.0027s Wall: 0.0020s flows/second: 66048.2 Runtime: 0.0021s