Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 21:59:51.337 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32822 1 40 1 2025-12-03 21:56:07.459 00:05:02.948 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:01:45.681 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:01:45.732 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:58:08.134 00:05:02.233 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 21:58:08.115 00:05:02.313 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 21:58:06.411 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2488 1 2025-12-03 22:03:42.541 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38656 10 6452 1 2025-12-03 22:00:07.390 00:05:02.977 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:00:07.370 00:05:03.017 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:04:42.949 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36286 9 6412 1 2025-12-03 22:05:43.356 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38178 9 6412 1 2025-12-03 22:02:07.461 00:05:02.948 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:06:45.647 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:06:45.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:03:26.423 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-12-03 22:07:54.551 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48954 1 40 1 2025-12-03 22:04:08.116 00:05:02.313 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:04:08.136 00:05:02.233 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:08:54.959 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59684 1 40 1 2025-12-03 22:09:55.324 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 1 40 1 2025-12-03 22:06:07.373 00:05:03.016 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:06:07.393 00:05:02.977 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:11:45.617 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:11:45.612 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:08:07.463 00:05:02.947 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:12:46.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48970 9 6412 1 2025-12-03 22:08:46.433 00:05:10.009 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-12-03 22:13:46.929 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58594 10 6452 1 2025-12-03 22:10:08.137 00:05:02.234 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:10:08.116 00:05:02.315 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:14:57.691 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49106 1 40 1 2025-12-03 22:15:58.057 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58944 1 40 1 2025-12-03 22:12:07.395 00:05:02.976 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:12:07.376 00:05:03.016 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:16:45.990 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:16:46.354 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:17:58.888 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49676 1 40 1 2025-12-03 22:14:07.464 00:05:02.949 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:14:06.443 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 41 3016 1 2025-12-03 22:19:59.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40464 1 40 1 2025-12-03 22:16:08.119 00:05:02.314 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:16:08.138 00:05:02.235 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:20:49.723 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36462 10 6452 1 2025-12-03 22:21:46.203 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:21:46.154 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:21:50.152 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53722 10 6452 1 2025-12-03 22:18:07.378 00:05:03.015 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:18:07.396 00:05:02.975 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:19:26.456 00:05:10.042 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2416 1 2025-12-03 22:23:51.069 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-12-03 22:20:07.473 00:05:02.939 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:25:52.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43216 10 6452 1 2025-12-03 22:22:08.139 00:05:02.236 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:22:08.119 00:05:02.316 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:26:46.008 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:26:46.163 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:26:52.919 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60156 11 6516 1 2025-12-03 22:24:07.378 00:05:03.018 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:24:07.400 00:05:02.977 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:24:46.462 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2384 1 2025-12-03 22:28:53.748 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 10 6452 1 2025-12-03 22:29:54.160 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 2025-12-03 22:26:07.477 00:05:02.940 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:30:54.530 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34134 9 6412 1 2025-12-03 22:31:46.206 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:31:46.202 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:31:54.931 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55196 9 6412 1 2025-12-03 22:28:08.124 00:05:02.312 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:28:08.143 00:05:02.233 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:33:57.649 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43660 10 6452 1 2025-12-03 22:30:07.379 00:05:03.018 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:30:07.400 00:05:02.977 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:30:06.466 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2644 1 2025-12-03 22:34:58.057 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49406 10 6452 1 2025-12-03 22:35:58.462 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-12-03 22:32:07.477 00:05:02.942 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:36:46.202 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:36:46.203 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:36:58.862 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37160 10 6452 1 2025-12-03 22:37:59.286 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55768 9 6412 1 2025-12-03 22:34:08.144 00:05:02.234 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:34:08.124 00:05:02.315 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:39:09.980 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34488 1 40 1 2025-12-03 22:35:26.471 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-12-03 22:36:07.402 00:05:02.977 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:36:07.382 00:05:03.018 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:41:00.422 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57408 9 6412 1 2025-12-03 22:41:46.396 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:41:46.444 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:38:07.478 00:05:02.942 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:42:00.825 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45584 9 6412 1 2025-12-03 22:43:01.229 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43610 9 6412 1 2025-12-03 22:40:08.127 00:05:02.315 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:44:01.630 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38280 10 6452 1 2025-12-03 22:40:08.148 00:05:02.234 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:40:46.482 00:05:00.593 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-12-03 22:45:02.035 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35394 9 6412 1 2025-12-03 22:42:07.402 00:05:02.979 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:46:12.805 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 1 40 1 2025-12-03 22:42:07.382 00:05:03.019 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:46:46.441 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:46:46.442 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:47:02.843 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35300 9 6412 1 2025-12-03 22:48:03.265 00:00:10.605 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 9 6412 1 2025-12-03 22:44:07.481 00:05:02.940 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:45:56.486 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2584 1 2025-12-03 22:46:08.147 00:05:02.234 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:46:08.127 00:05:02.314 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:50:14.715 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36832 1 40 1 2025-12-03 22:51:04.757 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:57446 10 6452 1 2025-12-03 22:51:46.718 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:51:46.721 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:48:07.384 00:05:03.019 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:48:07.404 00:05:02.979 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:53:06.306 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46332 9 6412 1 2025-12-03 22:50:07.481 00:05:02.941 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-03 22:54:06.716 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 10 6452 1 2025-12-03 22:55:07.131 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50500 10 6452 1 2025-12-03 22:51:16.493 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-12-03 22:52:08.147 00:05:02.235 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-03 22:52:08.127 00:05:02.315 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-03 22:56:17.859 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51774 1 40 1 2025-12-03 22:56:47.013 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:56:46.992 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:57:18.303 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 1 40 1 2025-12-03 22:54:07.406 00:05:02.980 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-03 22:54:07.386 00:05:03.020 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-03 22:58:08.334 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:60624 10 6464 1 Summary: total flows: 129, total bytes: 271088, total packets: 1381, avg bps: 573, avg pps: 0, avg bpp: 196 Time window: 2025-12-03 21:56:07 - 2025-12-03 22:59:10 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0037s User: 0.0018s Wall: 0.0024s flows/second: 53928.6 Runtime: 0.0024s