Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 03:54:02.019 00:06:00.518 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 03:55:02.599 00:06:00.266 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 03:59:58.388 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47278 10 6438 1 2025-07-25 03:56:02.537 00:06:00.397 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 03:57:02.537 00:06:00.114 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 03:58:02.579 00:05:00.505 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:01:59.204 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56722 9 6398 1 2025-07-25 03:59:02.539 00:05:00.573 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 03:58:02.558 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 04:03:09.971 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48638 1 40 1 2025-07-25 04:03:10.767 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:03:10.948 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:03:11.009 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 03:59:27.658 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2912 1 2025-07-25 04:04:10.378 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56678 1 40 1 2025-07-25 04:00:02.619 00:06:00.296 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 04:00:02.538 00:06:00.346 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 04:05:00.418 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54090 9 6398 1 2025-07-25 04:01:02.022 00:06:00.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 04:06:00.830 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36694 10 6438 1 2025-07-25 04:02:02.600 00:06:00.265 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 04:03:02.538 00:06:00.398 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 04:04:02.579 00:05:00.507 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:08:10.984 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:08:01.636 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46828 9 6398 1 2025-07-25 04:08:10.962 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:08:11.024 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:04:47.667 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2984 1 2025-07-25 04:05:02.538 00:05:00.567 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:04:02.538 00:06:00.114 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 04:09:12.357 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46320 1 40 1 2025-07-25 04:05:02.559 00:06:00.077 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 04:10:02.399 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33624 10 6438 1 2025-07-25 04:11:02.795 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:35876 11 6490 1 2025-07-25 04:07:02.619 00:06:00.298 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 04:07:02.539 00:06:00.346 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 04:08:02.024 00:06:00.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 04:13:11.119 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:13:11.203 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:13:03.616 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47988 9 6398 1 2025-07-25 04:13:11.262 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:10:02.580 00:05:00.508 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:09:02.600 00:06:00.265 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 04:14:04.018 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42692 9 6398 1 2025-07-25 04:10:07.670 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 43 3116 1 2025-07-25 04:11:02.540 00:05:00.568 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:10:02.540 00:06:00.398 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 04:15:04.419 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 9 6398 1 2025-07-25 04:11:02.539 00:06:00.118 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 04:16:15.195 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32962 1 40 1 2025-07-25 04:12:02.559 00:06:00.079 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 04:17:15.600 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51626 1 40 1 2025-07-25 04:18:11.225 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:18:11.404 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:18:11.165 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:18:05.639 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44710 10 6438 1 2025-07-25 04:14:02.540 00:06:00.348 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 04:14:02.621 00:06:00.298 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 04:15:27.677 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2400 1 2025-07-25 04:15:02.025 00:06:00.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 04:16:02.580 00:05:00.508 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:20:16.786 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58276 1 40 1 2025-07-25 04:16:02.600 00:06:00.267 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 04:17:02.541 00:05:00.568 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:17:02.541 00:06:00.399 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 04:22:17.613 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39626 1 40 1 2025-07-25 04:18:02.540 00:06:00.121 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 04:23:11.183 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:23:11.611 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:23:11.671 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:23:07.652 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37170 10 6438 1 2025-07-25 04:19:02.561 00:06:00.084 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 04:24:08.020 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37862 9 6398 1 2025-07-25 04:20:47.681 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2320 1 2025-07-25 04:25:18.784 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34962 1 40 1 2025-07-25 04:21:02.621 00:06:00.298 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 04:21:02.541 00:06:00.346 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 04:22:02.583 00:05:00.510 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:23:02.543 00:05:00.569 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:22:02.025 00:06:00.518 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 04:23:02.603 00:06:00.270 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 04:28:11.472 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:28:11.130 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:28:11.413 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:28:09.584 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:49028 11 10312 1 2025-07-25 04:24:02.542 00:06:00.398 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 04:29:10.058 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46440 10 6438 1 2025-07-25 04:25:02.542 00:06:00.122 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 04:26:07.684 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2624 1 2025-07-25 04:30:20.788 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43156 1 40 1 2025-07-25 04:26:02.564 00:06:00.082 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 04:31:21.196 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 1 40 1 2025-07-25 04:28:02.584 00:05:00.510 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:32:11.234 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33954 9 6398 1 2025-07-25 04:28:02.624 00:06:00.297 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 04:28:02.542 00:06:00.351 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 04:29:02.543 00:05:00.570 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:33:11.705 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:33:11.685 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:33:11.745 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:29:02.027 00:06:00.519 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 04:34:12.142 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50146 9 6398 1 2025-07-25 04:30:02.604 00:06:00.269 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 04:35:12.547 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50808 10 6438 1 2025-07-25 04:31:27.690 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2852 1 2025-07-25 04:31:02.545 00:06:00.399 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 04:36:12.949 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:35162 9 6398 1 2025-07-25 04:32:02.546 00:06:00.121 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 04:37:23.741 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55374 1 40 1 2025-07-25 04:33:02.566 00:06:00.081 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 04:34:02.586 00:05:00.511 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:38:11.731 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:38:11.493 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:38:11.671 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:38:24.160 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41912 1 40 1 2025-07-25 04:35:02.547 00:05:00.571 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:39:14.203 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38484 10 6438 1 2025-07-25 04:35:02.546 00:06:00.350 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 04:35:02.626 00:06:00.299 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 04:40:14.604 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 10 6438 1 2025-07-25 04:36:42.548 00:05:05.151 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3024 1 2025-07-25 04:36:02.029 00:06:00.519 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 04:37:02.607 00:06:00.270 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 04:42:15.383 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38774 9 6398 1 2025-07-25 04:38:02.546 00:06:00.400 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 04:43:11.878 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:43:12.161 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:43:12.221 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:43:15.781 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:43706 10 6438 1 2025-07-25 04:39:02.547 00:06:00.121 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 04:40:02.586 00:05:00.511 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:44:16.211 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49080 9 6398 1 2025-07-25 04:40:02.566 00:06:00.082 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 04:41:02.547 00:05:00.574 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:45:16.623 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32952 10 6438 1 2025-07-25 04:41:57.698 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2784 1 2025-07-25 04:42:02.628 00:06:00.299 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 04:42:02.547 00:06:00.350 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 04:43:02.030 00:06:00.526 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 04:48:12.079 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:48:11.785 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:48:12.020 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:48:17.800 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51190 10 6438 1 2025-07-25 04:44:02.615 00:06:00.263 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 04:46:02.594 00:05:00.507 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:45:02.555 00:06:00.393 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 04:50:18.585 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42654 9 6398 1 2025-07-25 04:47:02.555 00:05:00.567 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:46:02.554 00:06:00.121 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 04:47:17.702 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2484 1 2025-07-25 04:51:29.395 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58884 1 40 1 2025-07-25 04:47:02.575 00:06:00.080 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 04:52:29.799 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54650 1 40 1 2025-07-25 04:53:11.870 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:53:11.758 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:53:11.811 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:53:30.207 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41278 1 40 1 2025-07-25 04:49:02.556 00:06:00.346 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 04:49:02.636 00:06:00.292 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 04:50:02.033 00:06:00.525 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-07-25 04:55:20.647 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42686 9 6398 1 2025-07-25 04:52:02.596 00:05:00.507 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 04:51:02.616 00:06:00.265 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 04:56:21.053 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6438 1 2025-07-25 04:52:37.708 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2384 1 2025-07-25 04:52:02.557 00:06:00.393 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 04:53:02.557 00:05:00.568 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 04:57:21.456 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58706 10 6438 1 2025-07-25 04:53:02.556 00:06:00.121 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 04:58:11.962 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:58:12.294 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 04:58:12.353 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 04:58:21.820 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40146 10 6438 1 Summary: total flows: 173, total bytes: 308920, total packets: 1920, avg bps: 633, avg pps: 0, avg bpp: 160 Time window: 2025-07-25 03:54:02 - 2025-07-25 04:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0014s User: 0.0029s Wall: 0.0024s flows/second: 71907.1 Runtime: 0.0024s