Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 13:58:47.373 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57644 10 6438 1 2025-07-20 13:54:59.738 00:05:00.522 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 13:54:59.980 00:05:00.280 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 13:59:58.156 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53930 1 40 1 2025-07-20 13:55:59.960 00:05:00.319 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 13:55:00.569 00:06:00.000 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:00:58.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:00:58.684 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:00:58.743 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 13:56:00.488 00:06:00.102 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 13:56:00.300 00:06:00.122 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 13:56:00.320 00:06:00.255 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 13:57:37.755 00:05:10.001 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2792 1 2025-07-20 14:01:48.596 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48902 9 6398 1 2025-07-20 14:03:49.408 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52142 9 6398 1 2025-07-20 13:59:00.260 00:06:00.334 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 14:00:59.739 00:05:00.523 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:00:00.259 00:06:00.182 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 14:04:49.822 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47638 9 6398 1 2025-07-20 14:00:59.981 00:05:00.281 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:05:58.717 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:05:58.671 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:05:58.657 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:01:59.961 00:05:00.321 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:05:50.232 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49600 9 6398 1 2025-07-20 14:02:00.570 00:06:00.000 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:02:57.755 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2644 1 2025-07-20 14:03:00.301 00:06:00.120 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 14:03:00.321 00:06:00.253 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 14:08:01.401 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45278 1 40 1 2025-07-20 14:03:00.489 00:06:00.102 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 14:09:01.803 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38760 1 40 1 2025-07-20 14:09:51.845 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51318 10 6438 1 2025-07-20 14:10:58.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:10:58.695 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:10:58.873 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:06:59.742 00:05:00.520 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:10:52.246 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36476 9 6398 1 2025-07-20 14:06:00.262 00:06:00.333 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 14:06:59.984 00:05:00.278 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:11:52.635 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57584 9 6398 1 2025-07-20 14:07:00.262 00:06:00.181 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 14:07:59.963 00:05:00.323 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:08:17.758 00:05:04.032 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3084 1 2025-07-20 14:12:53.052 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:39282 9 6398 1 2025-07-20 14:09:00.570 00:06:00.002 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:13:53.486 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37202 9 6398 1 2025-07-20 14:10:00.302 00:06:00.121 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 14:10:00.322 00:06:00.254 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 14:10:00.490 00:06:00.102 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 14:15:04.267 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36790 1 40 1 2025-07-20 14:15:59.199 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:15:59.139 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:15:59.157 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:12:59.745 00:05:00.527 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:12:59.984 00:05:00.288 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:17:05.086 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40544 1 40 1 2025-07-20 14:13:27.763 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2688 1 2025-07-20 14:13:59.963 00:05:00.328 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:13:00.265 00:06:00.333 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 14:14:00.264 00:06:00.179 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 14:18:55.611 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42494 10 6438 1 2025-07-20 14:19:56.012 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52780 9 6398 1 2025-07-20 14:16:00.572 00:06:00.004 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:20:59.090 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:20:58.945 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:20:59.029 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:20:56.418 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6438 1 2025-07-20 14:17:00.309 00:06:00.115 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 14:17:00.329 00:06:00.251 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 14:17:00.491 00:06:00.105 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 14:22:07.191 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46272 1 40 1 2025-07-20 14:18:47.768 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2296 1 2025-07-20 14:18:59.747 00:05:00.525 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:18:59.984 00:05:00.288 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:22:57.230 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:36754 11 10310 1 2025-07-20 14:19:59.964 00:05:00.329 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:23:57.721 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49040 9 6398 1 2025-07-20 14:20:00.271 00:06:00.328 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 14:24:58.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48336 9 6398 1 2025-07-20 14:25:58.932 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:25:59.186 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:21:00.272 00:06:00.175 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 14:25:59.126 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:23:00.575 00:06:00.004 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:24:07.779 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2936 1 2025-07-20 14:24:00.313 00:06:00.114 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 14:24:00.332 00:06:00.250 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 14:24:59.984 00:05:00.290 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:24:59.746 00:05:00.528 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:24:00.492 00:06:00.107 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 14:29:10.135 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54554 1 40 1 2025-07-20 14:25:59.966 00:05:00.332 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:30:00.172 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46092 10 6438 1 2025-07-20 14:30:59.084 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:30:59.121 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:30:59.182 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:31:00.575 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50464 9 6398 1 2025-07-20 14:27:00.273 00:06:00.329 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 14:28:00.272 00:06:00.175 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 14:33:01.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57700 9 6398 1 2025-07-20 14:29:27.783 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2544 1 2025-07-20 14:34:01.759 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57386 9 6398 1 2025-07-20 14:30:00.580 00:06:00.003 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:30:59.754 00:05:00.524 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:30:59.987 00:05:00.291 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:35:12.533 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46758 1 40 1 2025-07-20 14:31:59.966 00:05:00.333 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:35:59.360 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:31:00.317 00:06:00.112 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 14:31:00.337 00:06:00.247 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 14:35:59.589 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:35:59.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:31:00.497 00:06:00.106 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 14:36:12.891 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33542 1 40 1 2025-07-20 14:37:02.928 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47798 10 6438 1 2025-07-20 14:38:03.332 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36376 9 6398 1 2025-07-20 14:34:47.789 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2840 1 2025-07-20 14:34:00.277 00:06:00.326 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 14:39:03.735 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 9 6398 1 2025-07-20 14:35:00.278 00:06:00.172 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 14:40:14.516 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 1 40 1 2025-07-20 14:40:59.458 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:36:59.754 00:05:00.526 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:40:59.415 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:40:59.397 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:36:59.986 00:05:00.293 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:37:59.966 00:05:00.333 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:37:00.583 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:38:00.320 00:06:00.111 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 14:38:00.340 00:06:00.248 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 14:38:00.502 00:06:00.103 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 14:43:05.380 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40732 10 6438 1 2025-07-20 14:44:05.782 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41056 10 6438 1 2025-07-20 14:40:07.795 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3052 1 2025-07-20 14:45:06.205 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53220 9 6398 1 2025-07-20 14:45:59.587 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:41:00.280 00:06:00.327 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 14:45:59.793 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:45:59.855 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:42:59.756 00:05:00.525 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:42:00.280 00:06:00.171 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 14:42:59.987 00:05:00.294 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:43:59.966 00:05:00.335 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:48:07.397 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58104 9 6398 1 2025-07-20 14:44:00.585 00:06:00.003 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:49:07.814 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 9 6398 1 2025-07-20 14:45:27.802 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2360 1 2025-07-20 14:45:00.321 00:06:00.110 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 14:45:00.341 00:06:00.247 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 14:45:00.502 00:06:00.106 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 14:50:59.706 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:50:59.491 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:50:59.646 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:51:08.584 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54888 9 6398 1 2025-07-20 14:52:19.349 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51536 1 40 1 2025-07-20 14:48:59.758 00:05:00.525 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 14:48:00.282 00:06:00.329 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 14:48:59.990 00:05:00.293 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-07-20 14:49:00.281 00:06:00.174 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 14:49:59.969 00:05:00.333 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-07-20 14:54:20.191 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37580 1 40 1 2025-07-20 14:50:47.808 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2728 1 2025-07-20 14:55:10.234 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53710 9 6398 1 2025-07-20 14:51:00.587 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 14:55:59.943 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 14:55:59.629 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:55:59.883 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 14:52:00.506 00:06:00.104 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 14:52:00.323 00:06:00.114 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 14:52:00.343 00:06:00.248 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 14:57:11.044 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43666 10 6438 1 2025-07-20 14:58:11.443 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:59308 12 10352 1 Summary: total flows: 173, total bytes: 316114, total packets: 1867, avg bps: 665, avg pps: 0, avg bpp: 169 Time window: 2025-07-20 13:54:59 - 2025-07-20 14:58:21 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0023s User: 0.0023s Wall: 0.0023s flows/second: 74859.7 Runtime: 0.0023s