Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 06:58:47.940 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37042 9 6412 1 2025-12-05 06:54:59.098 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-12-05 06:59:48.349 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53024 10 6452 1 2025-12-05 06:55:11.158 00:05:56.987 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:00:48.709 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 9 6412 1 2025-12-05 07:01:49.125 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54698 9 6412 1 2025-12-05 06:58:08.784 00:05:02.332 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 06:58:08.763 00:05:02.412 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:02:25.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:02:25.390 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:02:49.551 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35050 10 6452 1 2025-12-05 07:03:49.954 00:00:10.466 TCP 1.101.0.1:3000 -> 23.104.0.1:43354 11 10335 1 2025-12-05 06:59:11.115 00:05:56.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 06:59:11.135 00:05:56.917 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:00:19.102 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2872 1 2025-12-05 07:04:50.460 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35428 10 6452 1 2025-12-05 07:06:01.245 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48148 1 40 1 2025-12-05 07:01:11.156 00:05:56.990 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:07:01.645 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41918 1 40 1 2025-12-05 07:07:25.276 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:07:25.383 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:08:02.053 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48870 1 40 1 2025-12-05 07:04:08.766 00:05:02.412 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:04:08.785 00:05:02.332 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:09:02.435 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37832 1 40 1 2025-12-05 07:05:39.109 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2512 1 2025-12-05 07:09:52.472 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55028 9 6412 1 2025-12-05 07:05:11.136 00:05:56.918 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:05:11.117 00:05:56.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:10:52.879 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:58414 10 6452 1 2025-12-05 07:07:11.157 00:05:56.991 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:12:25.365 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:12:25.365 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:12:53.630 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38636 10 6452 1 2025-12-05 07:13:54.035 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:46864 11 10335 1 2025-12-05 07:10:08.787 00:05:02.331 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:10:08.767 00:05:02.412 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:10:59.116 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-12-05 07:15:54.850 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:57148 9 6412 1 2025-12-05 07:11:11.118 00:05:56.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:11:11.138 00:05:56.918 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:17:05.646 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43646 1 40 1 2025-12-05 07:17:25.349 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:17:25.458 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:13:11.158 00:05:56.992 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:18:56.130 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57650 10 6452 1 2025-12-05 07:20:06.891 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33900 1 40 1 2025-12-05 07:16:08.794 00:05:02.328 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:16:08.775 00:05:02.408 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:16:19.119 00:05:10.016 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-12-05 07:20:56.932 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54234 10 6452 1 2025-12-05 07:22:07.668 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49892 1 40 1 2025-12-05 07:17:11.119 00:05:56.958 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:17:11.139 00:05:56.918 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:22:25.716 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:22:25.562 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:22:57.701 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34752 10 6452 1 2025-12-05 07:23:58.085 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60366 10 6452 1 2025-12-05 07:19:11.161 00:05:56.989 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:24:58.449 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 9 6412 1 2025-12-05 07:21:39.138 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 07:26:09.258 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43364 1 40 1 2025-12-05 07:22:08.796 00:05:02.326 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:22:08.776 00:05:02.406 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:26:59.300 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54636 10 6452 1 2025-12-05 07:27:25.699 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:27:25.702 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:23:11.122 00:05:56.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:27:59.702 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37564 10 6452 1 2025-12-05 07:23:11.143 00:05:56.917 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:29:00.126 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48502 10 6452 1 2025-12-05 07:30:00.527 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 10 6452 1 2025-12-05 07:25:11.163 00:05:56.987 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:26:59.142 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2868 1 2025-12-05 07:31:00.937 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46430 9 6412 1 2025-12-05 07:28:08.778 00:05:02.405 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:28:08.799 00:05:02.324 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:32:25.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:32:25.815 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:33:01.750 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47820 9 6412 1 2025-12-05 07:29:11.124 00:05:56.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:29:11.143 00:05:56.920 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:34:02.160 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54840 9 6412 1 2025-12-05 07:35:12.934 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43410 1 40 1 2025-12-05 07:31:11.163 00:05:56.988 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:32:19.149 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-12-05 07:37:13.755 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50164 1 40 1 2025-12-05 07:37:25.893 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:37:25.733 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:34:08.782 00:05:02.403 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:38:03.796 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49872 9 6412 1 2025-12-05 07:34:08.802 00:05:02.323 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:39:04.208 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57608 9 6412 1 2025-12-05 07:35:11.145 00:05:56.926 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:35:11.122 00:05:56.966 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:40:14.937 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48868 1 40 1 2025-12-05 07:41:15.299 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 1 40 1 2025-12-05 07:37:39.157 00:05:10.010 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2712 1 2025-12-05 07:37:11.165 00:05:56.988 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:42:05.339 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40930 9 6412 1 2025-12-05 07:42:26.249 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:42:26.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:40:08.803 00:05:02.323 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:40:08.783 00:05:02.404 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:44:06.119 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52192 9 6412 1 2025-12-05 07:45:06.527 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43514 10 6452 1 2025-12-05 07:41:11.145 00:05:56.925 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:41:11.125 00:05:56.965 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:46:06.937 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44894 10 6452 1 2025-12-05 07:42:59.167 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-12-05 07:47:07.349 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60934 10 6452 1 2025-12-05 07:47:26.246 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:47:26.113 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:43:11.167 00:05:56.987 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:48:07.747 00:00:14.641 TCP 1.101.0.1:3000 -> 23.104.0.1:59022 9 6412 1 2025-12-05 07:49:22.755 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 1 40 1 2025-12-05 07:46:08.805 00:05:02.322 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:46:08.784 00:05:02.403 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:50:12.802 00:00:11.491 TCP 1.101.0.1:3000 -> 23.104.0.1:60672 9 6412 1 2025-12-05 07:51:14.333 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:34712 10 6452 1 2025-12-05 07:47:11.126 00:05:56.966 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:47:11.147 00:05:56.926 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:52:14.693 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58922 10 6452 1 2025-12-05 07:52:26.054 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:48:19.174 00:05:10.008 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-12-05 07:52:26.263 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:53:15.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49600 10 6452 1 2025-12-05 07:49:11.169 00:05:56.985 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 07:52:08.807 00:05:02.321 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 07:52:08.786 00:05:02.402 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 07:56:16.365 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38608 9 6412 1 2025-12-05 07:57:26.266 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 07:57:26.389 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 07:53:39.183 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2540 1 2025-12-05 07:53:11.127 00:05:56.968 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 07:53:11.148 00:05:56.927 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 07:58:17.176 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36714 9 6412 1 Summary: total flows: 137, total bytes: 326342, total packets: 1483, avg bps: 678, avg pps: 0, avg bpp: 220 Time window: 2025-12-05 06:54:59 - 2025-12-05 07:59:08 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0039s User: 0.0020s Wall: 0.0022s flows/second: 62985.8 Runtime: 0.0022s