Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 16:59:35.693 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33682 1 40 1 2025-12-04 16:56:07.806 00:05:02.998 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:00:25.729 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:44402 9 6412 1 2025-12-04 17:01:26.153 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39826 10 6452 1 2025-12-04 17:02:08.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:02:08.550 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 16:58:08.504 00:05:02.260 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 16:58:08.485 00:05:02.340 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 16:58:17.963 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-12-04 17:00:07.757 00:05:03.008 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:00:07.734 00:05:03.049 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:04:37.746 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55952 1 40 1 2025-12-04 17:05:27.786 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58608 10 6452 1 2025-12-04 17:02:07.808 00:05:02.996 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:07:08.401 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:07:08.401 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:07:28.610 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35820 10 6452 1 2025-12-04 17:03:37.973 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-12-04 17:04:08.507 00:05:02.262 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:04:08.486 00:05:02.341 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:08:29.017 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34118 10 6452 1 2025-12-04 17:09:29.415 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47978 10 6452 1 2025-12-04 17:06:07.736 00:05:03.051 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:06:07.757 00:05:03.011 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:10:40.194 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38328 1 40 1 2025-12-04 17:11:41.088 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54128 1 40 1 2025-12-04 17:12:08.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:12:08.608 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:08:07.810 00:05:02.999 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:12:31.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36700 9 6412 1 2025-12-04 17:08:57.978 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-12-04 17:10:08.510 00:05:02.258 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:10:08.490 00:05:02.338 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:14:31.946 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38840 9 6412 1 2025-12-04 17:15:42.753 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 1 40 1 2025-12-04 17:12:07.758 00:05:03.010 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:12:07.738 00:05:03.051 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:16:32.794 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40370 10 6452 1 2025-12-04 17:17:08.665 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:17:08.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:14:07.814 00:05:02.995 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:14:17.985 00:05:00.426 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2708 1 2025-12-04 17:18:33.572 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48516 9 6412 1 2025-12-04 17:19:44.359 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52046 1 40 1 2025-12-04 17:16:08.495 00:05:02.334 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:16:08.516 00:05:02.253 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:20:34.397 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47788 10 6452 1 2025-12-04 17:22:08.971 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:22:08.709 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:18:07.759 00:05:03.010 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:18:07.740 00:05:03.050 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:22:45.567 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59772 1 40 1 2025-12-04 17:19:27.998 00:05:00.053 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2580 1 2025-12-04 17:23:35.606 00:00:10.485 TCP 1.101.0.1:3000 -> 23.104.0.1:52228 9 6412 1 2025-12-04 17:20:07.817 00:05:02.996 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:24:46.496 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49508 1 40 1 2025-12-04 17:25:46.909 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36252 1 40 1 2025-12-04 17:22:08.518 00:05:02.252 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:22:08.498 00:05:02.333 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:27:08.807 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:27:08.871 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:27:37.366 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37224 10 6452 1 2025-12-04 17:24:07.761 00:05:03.011 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:24:07.741 00:05:03.052 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:24:38.007 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-12-04 17:29:38.812 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37176 10 6452 1 2025-12-04 17:26:07.819 00:05:02.994 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:30:39.216 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36184 9 6412 1 2025-12-04 17:31:49.993 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 1 40 1 2025-12-04 17:32:09.006 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:32:08.963 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:28:08.519 00:05:02.255 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:28:08.500 00:05:02.336 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:32:50.359 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55548 1 40 1 2025-12-04 17:33:52.131 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36250 1 40 1 2025-12-04 17:29:58.016 00:05:10.037 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-12-04 17:30:07.764 00:05:03.010 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:30:07.745 00:05:03.050 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:34:42.168 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39972 9 6412 1 2025-12-04 17:32:07.820 00:05:02.995 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:37:09.194 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:37:09.100 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:34:08.520 00:05:02.254 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:34:08.499 00:05:02.335 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:35:18.054 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-12-04 17:39:44.128 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50550 9 6412 1 2025-12-04 17:36:07.744 00:05:03.055 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:36:07.764 00:05:03.015 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:40:44.528 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38914 9 6412 1 2025-12-04 17:41:44.935 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51048 10 6452 1 2025-12-04 17:42:09.508 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:42:09.504 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:38:07.820 00:05:03.000 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:43:45.718 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49390 9 6412 1 2025-12-04 17:40:08.522 00:05:02.258 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:40:08.503 00:05:02.339 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:40:38.056 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2632 1 2025-12-04 17:45:56.910 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48812 1 40 1 2025-12-04 17:42:07.766 00:05:03.015 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:42:07.745 00:05:03.055 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:46:57.327 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 1 40 1 2025-12-04 17:47:09.440 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:47:09.286 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:47:47.367 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48872 9 6412 1 2025-12-04 17:44:07.830 00:05:02.991 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:48:47.742 00:00:11.426 TCP 1.101.0.1:3000 -> 23.104.0.1:34772 11 10329 1 2025-12-04 17:49:59.573 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44836 1 40 1 2025-12-04 17:45:58.063 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2872 1 2025-12-04 17:46:08.524 00:05:02.259 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:46:08.505 00:05:02.339 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:51:49.973 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54334 10 6452 1 2025-12-04 17:48:07.747 00:05:03.057 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-04 17:52:09.327 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:52:09.518 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:48:07.766 00:05:03.017 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:53:00.768 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35052 1 40 1 2025-12-04 17:53:50.805 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34962 9 6412 1 2025-12-04 17:50:07.821 00:05:03.003 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-04 17:54:51.221 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38710 10 6452 1 2025-12-04 17:51:18.071 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2560 1 2025-12-04 17:52:08.504 00:05:02.340 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-04 17:52:08.524 00:05:02.260 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-04 17:56:51.981 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37952 10 6452 1 2025-12-04 17:57:09.558 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 17:57:09.553 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 17:58:02.751 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 1 40 1 2025-12-04 17:54:07.771 00:05:03.016 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-04 17:54:07.751 00:05:03.057 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 Summary: total flows: 128, total bytes: 242937, total packets: 1338, avg bps: 513, avg pps: 0, avg bpp: 181 Time window: 2025-12-04 16:56:07 - 2025-12-04 17:59:10 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0027s User: 0.0027s Wall: 0.0020s flows/second: 64582.1 Runtime: 0.0020s