Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 20:00:00.424 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47534 10 6452 1 2025-12-02 19:56:06.967 00:05:02.932 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:01:14.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:01:14.297 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:01:00.837 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52882 10 6452 1 2025-12-02 19:57:54.372 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2324 1 2025-12-02 19:58:07.633 00:05:02.231 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 19:58:07.612 00:05:02.311 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:02:01.238 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47894 10 6452 1 2025-12-02 20:00:06.855 00:05:03.008 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:00:06.835 00:05:03.048 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:04:02.046 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60066 9 6412 1 2025-12-02 20:05:02.454 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49016 10 6452 1 2025-12-02 20:02:06.966 00:05:02.936 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:06:14.455 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:06:14.282 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:06:02.818 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:59622 10 6452 1 2025-12-02 20:07:03.193 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38970 9 6412 1 2025-12-02 20:03:14.378 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 43 3104 1 2025-12-02 20:04:07.612 00:05:02.311 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:04:07.632 00:05:02.231 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:06:06.856 00:05:03.008 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:06:06.836 00:05:03.048 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:10:04.400 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60666 9 6412 1 2025-12-02 20:11:14.402 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:11:04.762 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43540 9 6412 1 2025-12-02 20:11:14.528 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:08:06.968 00:05:02.943 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:12:05.166 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38480 10 6452 1 2025-12-02 20:08:34.381 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2416 1 2025-12-02 20:13:15.933 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36002 1 40 1 2025-12-02 20:10:07.634 00:05:02.230 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:10:07.614 00:05:02.311 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:14:05.969 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48078 9 6412 1 2025-12-02 20:15:06.387 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48996 10 6452 1 2025-12-02 20:12:06.856 00:05:03.009 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:12:06.836 00:05:03.049 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:16:14.551 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:16:14.539 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:16:17.160 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58486 1 40 1 2025-12-02 20:17:07.197 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40528 9 6412 1 2025-12-02 20:13:54.385 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2368 1 2025-12-02 20:14:06.971 00:05:02.936 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:18:07.601 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36064 10 6452 1 2025-12-02 20:16:07.615 00:05:02.311 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:16:07.634 00:05:02.231 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:20:08.369 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 10 6452 1 2025-12-02 20:21:14.713 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:21:14.715 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:18:06.837 00:05:03.049 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:18:06.857 00:05:03.009 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:23:09.531 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44638 10 6452 1 2025-12-02 20:19:14.387 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2580 1 2025-12-02 20:20:06.971 00:05:02.936 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:24:09.893 00:00:10.862 TCP 1.101.0.1:3000 -> 23.104.0.1:34942 9 6412 1 2025-12-02 20:22:07.635 00:05:02.232 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:22:07.616 00:05:02.312 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:26:14.558 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:26:14.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:27:21.969 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52524 1 40 1 2025-12-02 20:24:06.861 00:05:03.006 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:24:06.840 00:05:03.046 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:28:22.342 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47774 1 40 1 2025-12-02 20:24:34.396 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-12-02 20:26:06.973 00:05:02.936 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:30:12.774 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-12-02 20:31:15.002 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:31:15.185 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:28:07.636 00:05:02.232 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:28:07.616 00:05:02.313 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:32:23.971 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43866 1 40 1 2025-12-02 20:33:14.009 00:00:10.505 TCP 1.101.0.1:3000 -> 23.104.0.1:53240 10 6452 1 2025-12-02 20:29:54.401 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 42 3084 1 2025-12-02 20:30:06.842 00:05:03.047 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:30:06.862 00:05:03.007 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:35:25.295 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39002 1 40 1 2025-12-02 20:32:06.972 00:05:02.937 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:36:14.981 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:36:14.988 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:36:15.332 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49234 10 6452 1 2025-12-02 20:34:07.617 00:05:02.312 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:34:07.639 00:05:02.231 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:38:16.155 00:00:10.788 TCP 1.101.0.1:3000 -> 23.104.0.1:35466 10 6452 1 2025-12-02 20:35:14.411 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2440 1 2025-12-02 20:39:16.982 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37538 10 6452 1 2025-12-02 20:36:06.862 00:05:03.007 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:36:06.842 00:05:03.047 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:41:14.922 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:41:15.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:41:17.787 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44910 10 6452 1 2025-12-02 20:38:06.973 00:05:02.937 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:42:28.557 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60244 1 40 1 2025-12-02 20:43:18.593 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 10 6452 1 2025-12-02 20:40:07.639 00:05:02.231 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:40:07.620 00:05:02.312 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:40:34.415 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-12-02 20:45:29.789 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52128 1 40 1 2025-12-02 20:42:06.864 00:05:03.007 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:42:06.844 00:05:03.046 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:46:15.305 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:46:15.217 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:46:19.828 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45380 9 6412 1 2025-12-02 20:47:20.239 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48760 9 6412 1 2025-12-02 20:44:06.976 00:05:02.936 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:48:20.643 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47218 10 6452 1 2025-12-02 20:45:45.286 00:05:09.138 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2576 1 2025-12-02 20:46:07.619 00:05:02.312 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:46:07.640 00:05:02.231 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:50:21.417 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55654 10 6452 1 2025-12-02 20:51:15.531 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:51:15.140 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:51:21.776 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:51204 9 6412 1 2025-12-02 20:48:06.867 00:05:03.005 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:48:06.845 00:05:03.046 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:53:22.541 00:00:10.794 TCP 1.101.0.1:3000 -> 23.104.0.1:39914 10 6452 1 2025-12-02 20:50:06.976 00:05:02.935 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-02 20:54:23.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35912 10 6452 1 2025-12-02 20:51:04.424 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-12-02 20:55:23.782 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35586 10 6452 1 2025-12-02 20:52:07.640 00:05:02.232 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-02 20:52:07.622 00:05:02.312 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-02 20:56:15.339 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 20:56:15.386 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 20:56:34.519 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50186 1 40 1 2025-12-02 20:54:06.846 00:05:03.046 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-02 20:54:06.866 00:05:03.006 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-02 20:58:24.949 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:50286 10 6452 1 Summary: total flows: 127, total bytes: 283676, total packets: 1397, avg bps: 599, avg pps: 0, avg bpp: 203 Time window: 2025-12-02 19:56:06 - 2025-12-02 20:59:09 Total flows processed: 127, passed: 127, Blocks skipped: 0, Bytes read: 13272 Sys: 0.0020s User: 0.0031s Wall: 0.0019s flows/second: 65770.7 Runtime: 0.0020s