Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 18:58:58.205 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47434 1 40 1 2025-07-20 18:54:59.843 00:05:00.514 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 18:54:00.355 00:06:00.193 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 18:54:00.100 00:06:00.257 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 18:59:58.636 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42760 1 40 1 2025-07-20 18:56:00.649 00:06:00.002 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 19:00:59.033 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53904 1 40 1 2025-07-20 19:01:04.635 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:01:04.572 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:01:04.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:01:49.080 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58910 10 6438 1 2025-07-20 18:57:00.564 00:06:00.107 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 18:57:00.081 00:06:00.297 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 18:57:00.396 00:06:00.132 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 18:57:00.416 00:06:00.255 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:02:49.495 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35104 9 6398 1 2025-07-20 18:59:48.151 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2464 1 2025-07-20 19:03:49.933 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46178 9 6398 1 2025-07-20 19:00:59.846 00:05:00.513 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:04:50.341 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38596 9 6398 1 2025-07-20 19:00:00.358 00:06:00.334 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 19:01:00.358 00:06:00.195 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 19:01:00.104 00:06:00.258 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 19:06:04.656 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:06:04.745 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:06:04.805 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:07:01.540 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 1 40 1 2025-07-20 19:03:00.650 00:06:00.003 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 19:04:00.085 00:06:00.298 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 19:04:00.401 00:06:00.130 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 19:04:00.419 00:06:00.262 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:04:00.566 00:06:00.109 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 19:08:51.978 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56790 9 6398 1 2025-07-20 19:05:08.153 00:05:10.011 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2504 1 2025-07-20 19:10:02.748 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39956 1 40 1 2025-07-20 19:06:59.848 00:05:00.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:10:52.785 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40492 9 6398 1 2025-07-20 19:11:04.820 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:11:04.954 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:11:05.016 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:07:00.363 00:06:00.338 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 19:11:53.202 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:57160 9 6398 1 2025-07-20 19:12:53.559 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6438 1 2025-07-20 19:08:00.363 00:06:00.189 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 19:08:00.107 00:06:00.257 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 19:10:19.117 00:05:09.051 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2724 1 2025-07-20 19:10:00.654 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 19:14:54.380 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38792 10 6438 1 2025-07-20 19:11:00.567 00:06:00.108 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 19:11:00.089 00:06:00.297 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 19:11:00.405 00:06:00.129 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 19:11:00.425 00:06:00.260 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:16:04.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:15:54.781 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44748 10 6438 1 2025-07-20 19:16:04.946 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:16:05.008 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:12:59.853 00:05:00.512 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:16:55.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39396 9 6398 1 2025-07-20 19:17:55.584 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6438 1 2025-07-20 19:14:00.364 00:06:00.340 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 19:15:38.167 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2544 1 2025-07-20 19:15:00.365 00:06:00.188 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 19:15:00.114 00:06:00.251 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 19:21:04.997 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:21:04.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:21:04.938 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:21:07.132 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43738 1 40 1 2025-07-20 19:17:00.655 00:06:00.004 TCP 23.158.0.1:40787 -> 23.155.0.1:179 10 653 1 2025-07-20 19:22:07.542 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55982 1 40 1 2025-07-20 19:18:00.089 00:06:00.298 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 19:18:00.405 00:06:00.131 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 19:18:00.425 00:06:00.261 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:18:59.855 00:05:00.512 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:18:00.567 00:06:00.109 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 19:22:57.584 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48932 10 6438 1 2025-07-20 19:23:57.993 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55424 9 6398 1 2025-07-20 19:20:58.177 00:05:14.163 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3188 1 2025-07-20 19:21:00.365 00:06:00.342 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 19:26:04.984 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:26:04.893 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:26:04.953 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:26:09.169 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 1 40 1 2025-07-20 19:22:00.366 00:06:00.190 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 19:22:00.109 00:06:00.259 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 19:27:09.581 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 1 40 1 2025-07-20 19:27:59.613 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59238 10 6438 1 2025-07-20 19:24:59.856 00:05:00.512 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:24:00.656 00:06:00.003 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-20 19:29:10.396 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 1 40 1 2025-07-20 19:25:00.579 00:06:00.099 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 19:25:00.091 00:06:00.298 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 19:25:00.408 00:06:00.130 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 19:25:00.428 00:06:00.261 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:30:00.440 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39308 10 6438 1 2025-07-20 19:26:18.193 00:05:10.011 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2768 1 2025-07-20 19:31:05.171 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:31:05.252 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:31:05.313 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:32:01.244 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40424 9 6398 1 2025-07-20 19:28:00.368 00:06:00.340 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 19:29:00.368 00:06:00.189 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 19:29:00.111 00:06:00.260 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 19:30:59.858 00:05:00.512 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:35:02.456 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6438 1 2025-07-20 19:31:38.204 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2360 1 2025-07-20 19:31:00.658 00:06:00.005 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-20 19:36:05.266 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:36:05.082 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:36:05.327 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:36:02.858 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54790 9 6398 1 2025-07-20 19:32:00.580 00:06:00.102 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 19:32:00.091 00:06:00.301 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 19:32:00.409 00:06:00.128 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 19:32:00.429 00:06:00.262 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:37:03.281 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 10 6438 1 2025-07-20 19:38:03.698 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 9 6398 1 2025-07-20 19:39:04.129 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55866 10 6438 1 2025-07-20 19:35:00.370 00:06:00.341 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 19:40:04.533 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47060 10 6438 1 2025-07-20 19:41:05.425 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:36:58.209 00:05:10.012 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2792 1 2025-07-20 19:36:00.372 00:06:00.187 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 19:36:00.113 00:06:00.260 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 19:36:59.860 00:05:00.513 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:41:05.461 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:41:05.366 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:41:04.937 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41498 10 6438 1 2025-07-20 19:42:05.338 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38994 10 6438 1 2025-07-20 19:38:00.662 00:06:00.002 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-20 19:43:05.712 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 9 6398 1 2025-07-20 19:39:00.583 00:06:00.101 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 19:39:00.092 00:06:00.301 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 19:39:00.416 00:06:00.123 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 19:39:00.436 00:06:00.256 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:46:05.570 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:46:05.397 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:46:05.511 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:42:18.221 00:05:14.453 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2688 1 2025-07-20 19:42:59.864 00:05:00.510 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:42:00.372 00:06:00.340 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 19:47:07.303 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40366 10 6438 1 2025-07-20 19:43:00.373 00:06:00.188 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 19:43:00.114 00:06:00.262 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 19:49:08.124 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40692 9 6398 1 2025-07-20 19:45:00.665 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 19:46:00.093 00:06:00.302 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 19:46:00.413 00:06:00.127 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 19:46:00.433 00:06:00.259 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:46:00.584 00:06:00.104 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 19:51:05.765 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:51:05.332 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:51:05.704 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:47:38.234 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2616 1 2025-07-20 19:52:09.353 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 9 6398 1 2025-07-20 19:48:59.865 00:05:00.511 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-20 19:53:09.753 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57590 9 6398 1 2025-07-20 19:49:00.374 00:06:00.339 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-20 19:50:00.375 00:06:00.189 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-07-20 19:50:00.114 00:06:00.263 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-20 19:56:05.886 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:56:05.986 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 19:56:06.047 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 19:56:10.922 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50316 9 6398 1 2025-07-20 19:52:00.669 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-07-20 19:52:58.238 00:05:10.599 OSPF 23.0.4.1:0 -> 224.0.0.5:0 45 3260 1 2025-07-20 19:57:21.688 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36102 1 40 1 2025-07-20 19:53:00.584 00:06:00.105 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-20 19:53:00.096 00:06:00.303 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-20 19:53:00.417 00:06:00.130 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-20 19:53:00.437 00:06:00.258 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-20 19:58:22.046 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 1 40 1 Summary: total flows: 171, total bytes: 304881, total packets: 1909, avg bps: 625, avg pps: 0, avg bpp: 159 Time window: 2025-07-20 18:54:00 - 2025-07-20 19:59:00 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0042s User: 0.0000s Wall: 0.0021s flows/second: 80056.5 Runtime: 0.0021s