Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 18:59:12.991 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 1 40 1 2025-12-05 18:55:11.405 00:05:56.937 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:00:03.022 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59780 9 6412 1 2025-12-05 19:01:13.714 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60400 1 40 1 2025-12-05 18:57:11.364 00:05:57.663 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:02:03.755 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59956 9 6412 1 2025-12-05 18:58:09.004 00:05:02.423 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:02:39.714 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:02:39.645 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:03:14.527 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36396 1 40 1 2025-12-05 18:59:30.142 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2856 1 2025-12-05 18:59:11.364 00:05:56.936 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 18:59:11.385 00:05:56.896 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:04:14.931 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47838 1 40 1 2025-12-05 19:05:15.460 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36466 1 40 1 2025-12-05 19:01:11.407 00:05:56.941 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:07:05.910 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:52848 9 6412 1 2025-12-05 19:07:39.890 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:07:40.032 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:03:11.368 00:05:57.659 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:04:09.006 00:05:02.423 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:08:16.663 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54128 1 40 1 2025-12-05 19:04:50.146 00:05:10.044 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2400 1 2025-12-05 19:09:17.060 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56118 1 40 1 2025-12-05 19:05:11.367 00:05:56.938 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:05:11.387 00:05:56.898 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:10:07.122 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34228 10 6452 1 2025-12-05 19:11:17.846 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46766 1 40 1 2025-12-05 19:07:11.408 00:05:56.939 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:12:07.882 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:59316 10 6452 1 2025-12-05 19:12:39.699 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:12:39.885 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:09:11.369 00:05:57.658 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:10:09.007 00:05:02.424 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:14:08.612 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55532 10 6452 1 2025-12-05 19:10:10.153 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-12-05 19:15:19.374 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33096 1 40 1 2025-12-05 19:11:11.370 00:05:56.939 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:11:11.389 00:05:56.899 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:16:09.416 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37220 10 6452 1 2025-12-05 19:17:20.183 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50958 1 40 1 2025-12-05 19:17:39.944 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:17:39.994 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:13:11.411 00:05:56.944 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:18:20.597 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42638 1 40 1 2025-12-05 19:15:30.157 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 19:15:11.370 00:05:57.660 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:16:09.008 00:05:02.423 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:20:21.395 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57250 1 40 1 2025-12-05 19:21:11.436 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-12-05 19:17:11.369 00:05:56.940 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:17:11.391 00:05:56.899 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:22:40.118 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:22:40.144 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:23:22.603 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 1 40 1 2025-12-05 19:19:11.411 00:05:56.945 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:20:50.163 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-12-05 19:25:13.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50186 10 6452 1 2025-12-05 19:21:11.372 00:05:57.657 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:22:09.009 00:05:02.423 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:26:13.492 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-12-05 19:27:40.218 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:27:40.158 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:23:11.371 00:05:56.962 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:23:11.393 00:05:56.921 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:29:14.604 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58928 10 6452 1 2025-12-05 19:25:11.412 00:05:56.946 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:26:10.169 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2632 1 2025-12-05 19:31:25.791 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47958 1 40 1 2025-12-05 19:27:11.372 00:05:57.661 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:28:09.010 00:05:02.423 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:32:15.830 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39188 9 6412 1 2025-12-05 19:32:40.253 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:32:40.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:33:26.620 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 1 40 1 2025-12-05 19:29:11.373 00:05:56.960 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:29:11.393 00:05:56.920 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:34:16.669 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36910 10 6452 1 2025-12-05 19:35:27.462 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38998 1 40 1 2025-12-05 19:31:30.174 00:05:10.002 OSPF 23.0.7.2:0 -> 224.0.0.5:0 39 2776 1 2025-12-05 19:31:11.413 00:05:56.952 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:36:17.498 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58648 10 6452 1 2025-12-05 19:37:40.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:37:40.369 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:33:11.373 00:05:57.662 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:34:09.014 00:05:02.422 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:38:18.281 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46808 10 6452 1 2025-12-05 19:39:18.644 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50360 9 6412 1 2025-12-05 19:35:11.372 00:05:56.961 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:35:11.393 00:05:56.921 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:40:19.013 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44778 10 6452 1 2025-12-05 19:36:50.177 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2480 1 2025-12-05 19:41:29.947 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34032 1 40 1 2025-12-05 19:37:11.415 00:05:56.950 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:42:40.598 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:42:40.601 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:43:20.341 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:54608 11 10335 1 2025-12-05 19:39:11.375 00:05:57.662 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:40:09.015 00:05:02.425 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:41:11.374 00:05:56.961 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:41:11.395 00:05:56.920 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:42:10.183 00:05:10.014 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-12-05 19:47:22.053 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57984 9 6412 1 2025-12-05 19:47:40.541 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:47:40.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:43:11.415 00:05:56.953 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:49:33.296 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57950 1 40 1 2025-12-05 19:45:11.379 00:05:57.657 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:46:09.016 00:05:02.424 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:50:23.337 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46832 10 6452 1 2025-12-05 19:51:23.714 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32976 9 6412 1 2025-12-05 19:47:30.197 00:05:10.011 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2460 1 2025-12-05 19:47:11.401 00:05:56.915 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:47:11.380 00:05:56.955 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:52:34.486 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41948 1 40 1 2025-12-05 19:52:40.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:52:40.567 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:49:11.421 00:05:56.949 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 19:54:35.298 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49470 1 40 1 2025-12-05 19:51:11.381 00:05:57.657 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-12-05 19:52:09.019 00:05:02.425 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-12-05 19:56:25.741 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49332 9 6412 1 2025-12-05 19:52:50.208 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 40 2776 1 2025-12-05 19:57:40.804 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 19:57:26.156 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46518 10 6452 1 2025-12-05 19:57:40.736 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 19:53:11.381 00:05:56.957 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-12-05 19:53:11.402 00:05:56.917 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-12-05 19:58:36.893 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46910 1 40 1 Summary: total flows: 129, total bytes: 223835, total packets: 1316, avg bps: 466, avg pps: 0, avg bpp: 170 Time window: 2025-12-05 18:55:11 - 2025-12-05 19:59:08 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0042s User: 0.0000s Wall: 0.0012s flows/second: 104211.3 Runtime: 0.0013s