Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 08:58:42.739 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:48616 12 10369 1 2025-12-05 08:55:11.187 00:05:56.986 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:00:53.905 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41634 1 40 1 2025-12-05 08:57:39.273 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2528 1 2025-12-05 09:01:43.941 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35416 9 6412 1 2025-12-05 08:58:08.809 00:05:02.399 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 08:58:08.829 00:05:02.319 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:02:27.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:02:27.853 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:02:54.732 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 1 40 1 2025-12-05 09:03:44.770 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41554 9 6412 1 2025-12-05 08:59:11.147 00:05:56.972 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 08:59:11.167 00:05:56.932 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:04:45.172 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52480 9 6412 1 2025-12-05 09:05:45.577 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37140 10 6452 1 2025-12-05 09:01:11.188 00:05:56.986 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:02:59.288 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-12-05 09:07:27.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:07:27.782 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:04:08.830 00:05:02.321 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:04:08.810 00:05:02.401 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:08:57.165 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57386 1 40 1 2025-12-05 09:05:11.147 00:05:56.973 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:05:11.168 00:05:56.933 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:10:47.608 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52654 9 6412 1 2025-12-05 09:07:11.189 00:05:56.987 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:12:27.699 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:08:19.298 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-12-05 09:12:27.781 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:13:48.780 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:59116 12 10369 1 2025-12-05 09:10:08.831 00:05:02.324 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:10:08.810 00:05:02.404 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:14:49.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59070 10 6452 1 2025-12-05 09:15:49.678 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6452 1 2025-12-05 09:11:11.149 00:05:56.973 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:11:11.169 00:05:56.933 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:16:50.161 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 9 6412 1 2025-12-05 09:17:27.870 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:17:27.767 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:13:39.301 00:05:10.003 OSPF 23.0.7.2:0 -> 224.0.0.5:0 33 2240 1 2025-12-05 09:17:50.560 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49228 10 6452 1 2025-12-05 09:13:11.191 00:05:56.984 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:19:01.344 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42274 1 40 1 2025-12-05 09:16:08.833 00:05:02.324 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:16:08.812 00:05:02.405 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:21:52.207 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58460 10 6452 1 2025-12-05 09:17:11.152 00:05:56.972 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:17:11.171 00:05:56.933 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:22:28.988 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:22:28.992 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:23:02.979 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 1 40 1 2025-12-05 09:18:59.304 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-12-05 09:24:03.346 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 1 40 1 2025-12-05 09:19:11.195 00:05:56.983 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:25:04.078 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 1 40 1 2025-12-05 09:25:54.127 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38362 9 6412 1 2025-12-05 09:22:08.813 00:05:02.404 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:22:08.833 00:05:02.323 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:26:54.535 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36286 9 6412 1 2025-12-05 09:27:28.120 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:27:28.013 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:27:54.901 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 10 6452 1 2025-12-05 09:23:11.155 00:05:56.972 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:23:11.176 00:05:56.931 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:24:19.315 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2748 1 2025-12-05 09:28:55.266 00:00:10.786 TCP 1.101.0.1:3000 -> 23.104.0.1:36728 9 6412 1 2025-12-05 09:25:11.196 00:05:56.982 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:28:08.815 00:05:02.402 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:28:08.836 00:05:02.322 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:32:28.180 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:32:28.241 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:32:57.341 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45048 10 6452 1 2025-12-05 09:29:39.321 00:05:10.654 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2776 1 2025-12-05 09:33:57.741 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58484 9 6412 1 2025-12-05 09:29:11.157 00:05:56.972 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:29:11.176 00:05:56.932 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:34:58.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59952 9 6412 1 2025-12-05 09:31:11.198 00:05:56.984 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:35:58.557 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 10 6452 1 2025-12-05 09:37:09.296 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39282 1 40 1 2025-12-05 09:37:28.328 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:37:28.333 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:37:59.334 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52698 10 6452 1 2025-12-05 09:34:08.816 00:05:02.403 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:34:08.837 00:05:02.322 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:34:59.331 00:05:10.012 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2416 1 2025-12-05 09:39:10.115 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59274 1 40 1 2025-12-05 09:35:11.178 00:05:56.934 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:35:11.157 00:05:56.974 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:37:11.199 00:05:56.983 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:42:11.628 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59554 1 40 1 2025-12-05 09:42:28.748 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:42:28.873 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:43:01.664 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57700 10 6452 1 2025-12-05 09:40:08.821 00:05:02.401 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:44:02.075 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44882 9 6412 1 2025-12-05 09:40:08.842 00:05:02.321 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:40:19.333 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2424 1 2025-12-05 09:41:11.181 00:05:56.932 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:41:11.159 00:05:56.972 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:46:13.207 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37784 1 40 1 2025-12-05 09:47:13.615 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 1 40 1 2025-12-05 09:47:28.252 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:47:28.531 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:43:11.201 00:05:56.982 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:48:03.659 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35578 9 6412 1 2025-12-05 09:49:14.405 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55400 1 40 1 2025-12-05 09:45:39.338 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-12-05 09:46:08.843 00:05:02.320 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:50:14.809 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51526 1 40 1 2025-12-05 09:46:08.823 00:05:02.401 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:47:11.182 00:05:56.931 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:47:11.162 00:05:56.971 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:52:05.287 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50598 9 6412 1 2025-12-05 09:52:28.728 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:52:28.682 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:53:05.690 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:58524 11 10335 1 2025-12-05 09:49:11.204 00:05:56.982 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 09:50:59.344 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2792 1 2025-12-05 09:55:06.572 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43556 10 6452 1 2025-12-05 09:52:08.824 00:05:02.403 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 09:52:08.846 00:05:02.322 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 09:56:06.986 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45516 9 6412 1 2025-12-05 09:57:07.355 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52590 9 6412 1 2025-12-05 09:57:28.884 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 09:57:28.788 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:53:11.187 00:05:56.928 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 09:53:11.167 00:05:56.967 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 09:58:18.088 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53910 1 40 1 Summary: total flows: 129, total bytes: 269945, total packets: 1366, avg bps: 562, avg pps: 0, avg bpp: 197 Time window: 2025-12-05 08:55:11 - 2025-12-05 09:59:08 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0027s User: 0.0027s Wall: 0.0022s flows/second: 58185.3 Runtime: 0.0024s