Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 18:54:42.016 00:05:10.030 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-12-01 18:58:58.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47780 10 6452 1 2025-12-01 18:56:06.522 00:05:02.814 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 18:59:58.777 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:51852 9 6412 1 2025-12-01 19:00:44.294 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:00:44.341 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:00:59.163 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38426 9 6412 1 2025-12-01 18:58:07.187 00:05:02.170 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:01:59.574 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37956 10 6452 1 2025-12-01 18:58:07.207 00:05:02.090 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:03:10.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59438 1 40 1 2025-12-01 19:04:00.382 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41786 10 6452 1 2025-12-01 19:00:06.369 00:05:02.930 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:00:06.351 00:05:02.970 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:00:02.049 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2644 1 2025-12-01 19:05:11.155 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60866 1 40 1 2025-12-01 19:05:44.331 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:05:44.231 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:02:06.525 00:05:02.814 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:06:11.558 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56740 1 40 1 2025-12-01 19:07:01.601 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53674 9 6412 1 2025-12-01 19:04:07.207 00:05:02.091 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:04:07.188 00:05:02.171 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:09:12.737 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57716 1 40 1 2025-12-01 19:05:22.063 00:05:10.015 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-12-01 19:06:06.370 00:05:02.929 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:06:06.351 00:05:02.970 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:10:02.776 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 9 6412 1 2025-12-01 19:10:44.389 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:10:44.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:11:03.163 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51992 9 6412 1 2025-12-01 19:08:06.527 00:05:02.814 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:12:03.569 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38330 10 6452 1 2025-12-01 19:13:03.985 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40684 9 6412 1 2025-12-01 19:10:07.208 00:05:02.093 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:10:07.188 00:05:02.173 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:10:42.077 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2324 1 2025-12-01 19:15:04.785 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47190 9 6412 1 2025-12-01 19:15:44.497 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:15:44.502 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:12:06.371 00:05:02.930 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:12:06.352 00:05:02.970 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:16:15.522 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52578 1 40 1 2025-12-01 19:14:06.528 00:05:02.815 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:19:06.388 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51780 9 6412 1 2025-12-01 19:16:07.211 00:05:02.091 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:16:07.190 00:05:02.171 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:16:02.087 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 42 2984 1 2025-12-01 19:20:17.166 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 1 40 1 2025-12-01 19:20:44.535 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:20:44.614 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:21:07.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50250 9 6412 1 2025-12-01 19:18:06.354 00:05:02.969 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:18:06.373 00:05:02.929 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:22:17.981 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36268 1 40 1 2025-12-01 19:23:18.376 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 1 40 1 2025-12-01 19:20:06.528 00:05:02.815 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:21:22.092 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2456 1 2025-12-01 19:25:44.732 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:25:44.663 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:22:07.191 00:05:02.172 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:22:07.211 00:05:02.092 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:27:10.198 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42248 10 6452 1 2025-12-01 19:24:06.354 00:05:02.969 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:24:06.374 00:05:02.929 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:28:20.973 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45858 1 40 1 2025-12-01 19:29:11.014 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52452 9 6412 1 2025-12-01 19:26:06.529 00:05:02.815 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:30:11.415 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36360 10 6452 1 2025-12-01 19:30:44.982 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:30:44.823 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:26:42.100 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2708 1 2025-12-01 19:31:11.816 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:59078 9 6412 1 2025-12-01 19:28:07.213 00:05:02.091 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:28:07.193 00:05:02.171 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:32:22.489 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43402 1 40 1 2025-12-01 19:33:12.531 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46792 10 6452 1 2025-12-01 19:30:06.375 00:05:02.930 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:30:06.355 00:05:02.970 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:35:44.994 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:35:44.930 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:32:06.531 00:05:02.815 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:32:02.110 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 19:36:13.734 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33954 10 6452 1 2025-12-01 19:34:07.196 00:05:02.171 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:34:07.215 00:05:02.091 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:38:14.537 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51194 10 6452 1 2025-12-01 19:39:25.335 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49596 1 40 1 2025-12-01 19:36:06.380 00:05:02.926 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:36:06.359 00:05:02.966 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:40:15.372 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 9 6412 1 2025-12-01 19:40:44.876 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:40:45.088 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:41:15.788 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55446 10 6452 1 2025-12-01 19:37:22.117 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2384 1 2025-12-01 19:38:06.534 00:05:02.813 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:42:26.532 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52242 1 40 1 2025-12-01 19:43:16.571 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45948 11 6516 1 2025-12-01 19:40:07.197 00:05:02.170 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:40:07.216 00:05:02.090 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:44:16.974 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49168 9 6412 1 2025-12-01 19:45:17.341 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 9 6412 1 2025-12-01 19:45:45.196 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:45:45.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:42:06.380 00:05:02.927 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:42:06.361 00:05:02.966 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:46:17.719 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34576 10 6452 1 2025-12-01 19:42:42.122 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2696 1 2025-12-01 19:47:18.133 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 9 6412 1 2025-12-01 19:44:06.532 00:05:02.815 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:48:18.538 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58342 10 6452 1 2025-12-01 19:49:18.944 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:54560 13 6608 1 2025-12-01 19:46:07.196 00:05:02.171 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:46:07.216 00:05:02.091 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:50:29.767 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 1 40 1 2025-12-01 19:50:45.344 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:50:45.246 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:51:19.803 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52850 9 6412 1 2025-12-01 19:48:06.383 00:05:02.925 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:48:06.362 00:05:02.966 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:48:02.128 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2808 1 2025-12-01 19:52:20.208 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33440 10 6452 1 2025-12-01 19:53:20.617 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34288 10 6452 1 2025-12-01 19:50:06.534 00:05:02.815 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 19:54:21.017 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47502 10 6452 1 2025-12-01 19:55:45.494 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:55:45.379 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:52:07.219 00:05:02.089 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-01 19:52:07.200 00:05:02.170 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-01 19:56:32.202 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50098 1 40 1 2025-12-01 19:53:22.137 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-12-01 19:57:32.598 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39304 1 40 1 2025-12-01 19:54:06.384 00:05:02.926 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-01 19:54:06.365 00:05:02.966 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-01 19:58:22.639 00:00:10.980 TCP 1.101.0.1:3000 -> 23.104.0.1:55682 9 6412 1 Summary: total flows: 135, total bytes: 292876, total packets: 1447, avg bps: 605, avg pps: 0, avg bpp: 202 Time window: 2025-12-01 18:54:42 - 2025-12-01 19:59:09 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0061s User: 0.0008s Wall: 0.0033s flows/second: 41285.5 Runtime: 0.0033s