Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 07:59:47.378 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51474 1 40 1 2025-12-02 07:56:06.750 00:05:02.886 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:00:37.418 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33854 10 6452 1 2025-12-02 08:00:59.907 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:00:59.923 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:58:07.407 00:05:02.189 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 07:58:07.386 00:05:02.269 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 07:58:23.230 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 32 2176 1 2025-12-02 08:02:38.217 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:52236 11 10335 1 2025-12-02 08:03:38.660 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37086 10 6452 1 2025-12-02 08:00:06.621 00:05:02.976 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:00:06.601 00:05:03.016 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:04:39.078 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34906 9 6412 1 2025-12-02 08:06:00.094 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:06:00.092 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:02:06.750 00:05:02.886 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:06:39.798 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53836 10 6452 1 2025-12-02 08:07:40.165 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39530 9 6412 1 2025-12-02 08:03:43.234 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2512 1 2025-12-02 08:04:07.407 00:05:02.190 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:04:07.387 00:05:02.270 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:08:40.567 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46494 10 6452 1 2025-12-02 08:09:51.310 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 1 40 1 2025-12-02 08:06:06.620 00:05:02.976 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:06:06.602 00:05:03.016 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:10:59.982 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:10:59.984 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:08:06.752 00:05:02.886 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:12:52.519 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45932 1 40 1 2025-12-02 08:09:03.241 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 2976 1 2025-12-02 08:13:42.561 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33726 9 6412 1 2025-12-02 08:10:07.409 00:05:02.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:10:07.388 00:05:02.272 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:14:42.968 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60368 10 6452 1 2025-12-02 08:15:59.876 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:16:00.099 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:12:06.602 00:05:03.018 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:12:06.623 00:05:02.978 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:16:43.748 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45868 10 6452 1 2025-12-02 08:17:44.162 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54840 9 6412 1 2025-12-02 08:14:06.755 00:05:02.887 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:14:23.251 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2416 1 2025-12-02 08:18:44.567 00:00:10.552 TCP 1.101.0.1:3000 -> 23.104.0.1:47324 9 6412 1 2025-12-02 08:19:45.166 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41814 10 6452 1 2025-12-02 08:16:07.411 00:05:02.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:16:07.390 00:05:02.272 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:21:00.318 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:20:56.262 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37202 1 40 1 2025-12-02 08:21:00.372 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:21:56.669 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57094 1 40 1 2025-12-02 08:18:06.623 00:05:02.979 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:18:06.604 00:05:03.018 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:22:46.708 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 9 6412 1 2025-12-02 08:19:43.260 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2708 1 2025-12-02 08:23:47.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49580 10 6452 1 2025-12-02 08:20:06.755 00:05:02.888 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:24:47.539 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55438 9 6412 1 2025-12-02 08:26:00.399 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:26:00.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:25:58.275 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47370 1 40 1 2025-12-02 08:22:07.413 00:05:02.189 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:22:07.394 00:05:02.270 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:26:48.328 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45384 10 6452 1 2025-12-02 08:27:59.168 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38176 1 40 1 2025-12-02 08:24:06.626 00:05:02.977 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:24:06.606 00:05:03.017 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:28:49.210 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 9 6412 1 2025-12-02 08:25:03.265 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2256 1 2025-12-02 08:29:49.611 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49952 10 6452 1 2025-12-02 08:26:06.756 00:05:02.888 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:31:00.420 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:31:00.387 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49506 1 40 1 2025-12-02 08:31:00.470 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:32:00.789 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54820 1 40 1 2025-12-02 08:28:07.394 00:05:02.271 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:28:07.414 00:05:02.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:33:01.194 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41682 1 40 1 2025-12-02 08:33:51.238 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38778 9 6412 1 2025-12-02 08:30:06.629 00:05:02.976 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:30:06.609 00:05:03.015 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:30:23.270 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-12-02 08:34:51.592 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 9 6412 1 2025-12-02 08:36:00.588 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:36:00.403 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:35:51.957 00:00:11.849 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 9 6412 1 2025-12-02 08:32:06.757 00:05:02.891 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:36:53.851 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:58232 9 6412 1 2025-12-02 08:37:54.236 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 9 6412 1 2025-12-02 08:34:07.415 00:05:02.193 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:34:07.395 00:05:02.273 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:38:54.605 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59736 9 6412 1 2025-12-02 08:35:43.271 00:05:01.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 3012 1 2025-12-02 08:39:55.014 00:00:10.633 TCP 1.101.0.1:3000 -> 23.104.0.1:37994 10 6452 1 2025-12-02 08:36:06.631 00:05:02.976 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:36:06.612 00:05:03.016 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:41:00.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:41:00.658 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:40:55.700 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36900 9 6412 1 2025-12-02 08:38:06.759 00:05:02.890 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:41:56.067 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54254 10 6452 1 2025-12-02 08:43:06.831 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55952 1 40 1 2025-12-02 08:40:07.397 00:05:02.271 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:40:07.419 00:05:02.191 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:43:56.876 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:38130 10 6452 1 2025-12-02 08:40:53.276 00:05:10.020 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2680 1 2025-12-02 08:46:00.691 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:46:00.741 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:42:06.618 00:05:03.011 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:42:06.638 00:05:02.971 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:46:08.039 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57396 1 40 1 2025-12-02 08:46:58.087 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58390 9 6412 1 2025-12-02 08:44:06.759 00:05:02.894 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:47:58.454 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 10 6452 1 2025-12-02 08:48:58.863 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:41436 9 6412 1 2025-12-02 08:49:59.293 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44656 10 6452 1 2025-12-02 08:46:07.426 00:05:02.187 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:46:07.407 00:05:02.267 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:46:13.296 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2304 1 2025-12-02 08:51:00.929 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:51:00.840 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:48:06.615 00:05:03.018 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:48:06.635 00:05:02.978 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:53:10.825 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49448 1 40 1 2025-12-02 08:50:06.761 00:05:02.893 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 08:54:11.217 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 1 40 1 2025-12-02 08:55:01.261 00:00:11.537 TCP 1.101.0.1:3000 -> 23.104.0.1:59616 9 6412 1 2025-12-02 08:51:33.305 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2660 1 2025-12-02 08:56:00.960 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 08:56:00.963 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 08:52:07.405 00:05:02.269 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 08:52:07.424 00:05:02.189 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 08:54:06.617 00:05:03.017 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 08:54:06.638 00:05:02.977 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 08:58:13.930 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 1 40 1 Summary: total flows: 134, total bytes: 294019, total packets: 1407, avg bps: 621, avg pps: 0, avg bpp: 208 Time window: 2025-12-02 07:56:06 - 2025-12-02 08:59:09 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0018s User: 0.0036s Wall: 0.0034s flows/second: 39776.1 Runtime: 0.0034s