Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 00:58:56.156 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42044 1 40 1 2025-07-25 00:54:02.482 00:06:00.409 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 00:59:56.553 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 1 40 1 2025-07-25 00:55:02.483 00:06:00.114 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:00:46.594 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38686 10 6438 1 2025-07-25 00:56:02.502 00:06:00.074 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 00:58:01.959 00:05:00.525 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 00:58:27.405 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2384 1 2025-07-25 01:02:47.413 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57088 10 6438 1 2025-07-25 00:58:02.484 00:06:00.338 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 00:59:02.484 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 00:58:02.566 00:06:00.305 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 00:58:02.523 00:06:00.466 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:03:07.590 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:03:07.411 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:03:07.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:03:47.816 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:60202 9 6398 1 2025-07-25 01:04:58.533 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35044 1 40 1 2025-07-25 01:00:02.544 00:06:00.260 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:05:58.938 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 1 40 1 2025-07-25 01:01:02.483 00:06:00.409 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:06:59.344 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 1 40 1 2025-07-25 01:02:02.484 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:03:47.415 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2384 1 2025-07-25 01:03:02.504 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:04:01.959 00:05:00.526 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:07:49.378 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52778 9 6398 1 2025-07-25 01:08:07.493 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:08:07.502 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:08:07.433 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:05:02.485 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:08:49.785 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:39674 11 10310 1 2025-07-25 01:09:50.272 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 10 6438 1 2025-07-25 01:05:02.484 00:06:00.340 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:05:02.565 00:06:00.309 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:05:02.525 00:06:00.466 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:07:02.545 00:06:00.260 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:12:01.362 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60828 1 40 1 2025-07-25 01:08:02.486 00:06:00.409 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:13:07.654 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:13:07.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:13:07.594 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:09:07.421 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2640 1 2025-07-25 01:10:01.961 00:05:00.527 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:09:02.486 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:10:02.506 00:06:00.072 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:14:52.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49092 10 6438 1 2025-07-25 01:11:02.488 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:15:52.638 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53120 10 6438 1 2025-07-25 01:12:02.486 00:06:00.339 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:12:02.527 00:06:00.466 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:12:02.567 00:06:00.309 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:18:07.761 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:18:07.743 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:18:07.802 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:14:27.428 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3148 1 2025-07-25 01:14:02.548 00:06:00.258 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:18:53.770 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59466 10 6438 1 2025-07-25 01:16:01.963 00:05:00.525 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:15:02.488 00:06:00.410 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:19:54.172 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51524 9 6398 1 2025-07-25 01:17:02.487 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:16:02.487 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:20:54.577 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54958 9 6398 1 2025-07-25 01:17:02.508 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:22:55.412 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6438 1 2025-07-25 01:23:07.685 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:23:07.641 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:23:07.701 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:19:47.442 00:05:09.997 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3036 1 2025-07-25 01:19:02.488 00:06:00.340 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:19:02.569 00:06:00.310 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:19:02.529 00:06:00.465 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:23:55.810 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34544 9 6398 1 2025-07-25 01:25:06.576 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38162 1 40 1 2025-07-25 01:21:02.548 00:06:00.262 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:22:01.964 00:05:00.525 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:25:56.611 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48446 10 6438 1 2025-07-25 01:22:02.489 00:06:00.411 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:23:02.490 00:05:00.528 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:27:07.382 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41702 1 40 1 2025-07-25 01:23:02.488 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:28:08.003 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:28:07.852 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:28:07.943 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:28:07.789 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60178 1 40 1 2025-07-25 01:24:02.510 00:06:00.071 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:29:08.195 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41716 1 40 1 2025-07-25 01:25:07.439 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2608 1 2025-07-25 01:29:58.230 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57942 10 6438 1 2025-07-25 01:26:02.569 00:06:00.311 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:26:02.529 00:06:00.467 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:26:02.488 00:06:00.343 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:28:01.967 00:05:00.522 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:31:59.047 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45462 9 6398 1 2025-07-25 01:29:02.489 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:28:02.549 00:06:00.263 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:33:07.899 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:33:07.906 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:33:07.966 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:33:09.824 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54348 1 40 1 2025-07-25 01:29:02.489 00:06:00.411 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:30:27.448 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-25 01:30:02.489 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:35:00.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39904 10 6438 1 2025-07-25 01:31:02.509 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:36:11.015 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51652 1 40 1 2025-07-25 01:33:02.569 00:06:00.311 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:33:02.529 00:06:00.468 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:34:01.968 00:05:00.522 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:33:02.489 00:06:00.343 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:38:08.109 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:38:08.100 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:38:08.160 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:38:11.774 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47336 1 40 1 2025-07-25 01:35:02.490 00:05:00.529 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:35:47.454 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2624 1 2025-07-25 01:35:02.550 00:06:00.266 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:40:02.225 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6438 1 2025-07-25 01:36:02.490 00:06:00.411 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:41:02.670 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 10 6438 1 2025-07-25 01:37:02.491 00:06:00.117 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:42:03.084 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52532 10 6438 1 2025-07-25 01:38:02.510 00:06:00.077 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:43:08.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:43:08.396 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:43:08.462 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:43:03.490 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40142 10 6438 1 2025-07-25 01:40:01.969 00:05:00.528 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:40:02.531 00:05:00.470 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 01:44:14.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56812 1 40 1 2025-07-25 01:40:02.491 00:06:00.346 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:41:02.491 00:05:00.540 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:40:02.572 00:06:00.311 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:41:07.458 00:05:10.014 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 3164 1 2025-07-25 01:46:04.655 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36906 10 6438 1 2025-07-25 01:42:02.552 00:06:00.270 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:47:05.057 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35936 10 6438 1 2025-07-25 01:43:02.491 00:06:00.413 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:48:08.593 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:48:08.417 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:48:08.478 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:48:15.796 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53458 1 40 1 2025-07-25 01:44:02.492 00:06:00.117 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:46:01.971 00:05:00.526 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:45:02.517 00:06:00.072 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:46:02.538 00:05:00.465 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 01:46:27.464 00:05:10.013 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2972 1 2025-07-25 01:47:02.497 00:05:00.526 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:51:17.084 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38054 1 40 1 2025-07-25 01:47:02.498 00:06:00.347 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:47:02.577 00:06:00.307 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:53:08.396 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:53:08.455 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:53:08.516 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:53:07.532 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52612 9 6398 1 2025-07-25 01:49:02.558 00:06:00.266 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:50:02.498 00:06:00.407 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:55:18.703 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60510 1 40 1 2025-07-25 01:52:01.982 00:05:00.519 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:51:02.497 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:51:47.479 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2480 1 2025-07-25 01:52:02.538 00:05:00.467 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 01:56:08.738 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 10 6438 1 2025-07-25 01:52:02.518 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:53:02.497 00:05:00.528 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:57:09.151 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 10 6438 1 2025-07-25 01:58:08.597 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:58:08.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:58:08.552 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:58:09.506 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57952 9 6398 1 Summary: total flows: 171, total bytes: 282797, total packets: 1877, avg bps: 586, avg pps: 0, avg bpp: 150 Time window: 2025-07-25 00:54:02 - 2025-07-25 01:58:19 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0015s User: 0.0029s Wall: 0.0026s flows/second: 65619.9 Runtime: 0.0026s