Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 04:58:51.531 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49052 9 6412 1 2025-08-01 04:54:06.001 00:06:00.329 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 04:55:06.000 00:05:01.032 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 04:54:06.060 00:06:00.172 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:00:02.314 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50970 1 40 1 2025-08-01 04:55:06.001 00:06:00.208 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:01:02.719 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32916 1 40 1 2025-08-01 04:57:06.040 00:05:00.974 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:01:34.814 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:01:34.386 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:01:34.754 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 04:57:52.577 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2684 1 2025-08-01 05:01:52.754 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56592 10 6452 1 2025-08-01 05:02:53.162 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 9 6412 1 2025-08-01 04:59:05.457 00:05:00.545 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 04:58:06.001 00:06:00.252 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-01 04:58:06.081 00:06:00.235 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-01 05:03:53.577 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58090 9 6412 1 2025-08-01 04:59:06.021 00:06:00.167 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-01 05:05:04.365 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55224 1 40 1 2025-08-01 05:01:06.001 00:05:01.034 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:01:06.061 00:06:00.173 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:01:06.001 00:06:00.331 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 05:06:34.227 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:06:34.399 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:06:34.460 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:06:54.802 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39000 9 6412 1 2025-08-01 05:02:06.001 00:06:00.207 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:03:06.041 00:05:00.975 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:03:12.579 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2568 1 2025-08-01 05:07:55.209 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52820 9 6412 1 2025-08-01 05:05:05.463 00:05:00.542 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 05:09:05.971 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52890 1 40 1 2025-08-01 05:05:06.082 00:06:00.232 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-01 05:05:06.001 00:06:00.253 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-01 05:09:56.019 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37134 10 6452 1 2025-08-01 05:06:06.021 00:06:00.171 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-01 05:07:06.002 00:05:01.039 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:11:34.634 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:11:34.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:11:34.720 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:11:56.837 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38436 10 6452 1 2025-08-01 05:08:32.585 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2972 1 2025-08-01 05:09:06.043 00:05:00.979 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:08:06.062 00:06:00.173 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:08:06.002 00:06:00.331 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 05:13:07.527 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56356 1 40 1 2025-08-01 05:13:57.571 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40610 10 6452 1 2025-08-01 05:09:06.004 00:06:00.209 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:11:05.460 00:05:00.546 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 05:16:34.728 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:16:34.523 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:16:34.669 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:12:06.085 00:06:00.229 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-01 05:12:06.005 00:06:00.250 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-01 05:13:06.005 00:05:01.039 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:16:58.744 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36406 9 6412 1 2025-08-01 05:13:52.587 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 43 3172 1 2025-08-01 05:13:06.025 00:06:00.167 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-01 05:17:59.149 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57634 9 6412 1 2025-08-01 05:15:06.045 00:05:00.980 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:18:59.520 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53220 9 6412 1 2025-08-01 05:15:06.065 00:06:00.171 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:15:06.006 00:06:00.328 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 05:19:59.926 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:48342 10 6452 1 2025-08-01 05:16:06.006 00:06:00.208 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:17:05.462 00:05:00.546 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 05:21:34.684 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:21:35.022 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:21:35.081 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:19:06.006 00:05:01.039 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:23:01.131 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35828 10 6452 1 2025-08-01 05:19:12.598 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2256 1 2025-08-01 05:19:06.086 00:06:00.229 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-01 05:19:06.007 00:06:00.249 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-01 05:24:01.532 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38340 10 6452 1 2025-08-01 05:20:06.027 00:06:00.166 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-01 05:21:06.046 00:05:00.980 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:25:01.937 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48784 10 6452 1 2025-08-01 05:26:02.340 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43400 9 6412 1 2025-08-01 05:26:34.854 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:26:34.757 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:26:34.817 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:22:06.067 00:06:00.169 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:23:05.464 00:05:00.545 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 05:22:06.008 00:06:00.336 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 05:27:02.744 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47592 9 6412 1 2025-08-01 05:23:06.009 00:06:00.205 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:28:03.152 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60334 10 6452 1 2025-08-01 05:24:32.606 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2604 1 2025-08-01 05:25:06.010 00:05:01.037 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:30:03.962 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 9 6412 1 2025-08-01 05:26:06.010 00:06:00.248 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-01 05:26:06.090 00:06:00.227 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-01 05:27:06.050 00:05:00.977 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:31:14.738 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56054 1 40 1 2025-08-01 05:31:34.995 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:31:34.707 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:31:35.055 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:27:06.030 00:06:00.166 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-01 05:32:15.117 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59424 1 40 1 2025-08-01 05:29:05.466 00:05:00.545 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 05:29:52.612 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2608 1 2025-08-01 05:29:06.070 00:06:00.168 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:29:06.011 00:06:00.327 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 05:31:06.010 00:05:01.038 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:30:06.010 00:06:00.206 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:36:06.373 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55788 9 6412 1 2025-08-01 05:36:35.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:36:35.243 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:36:35.304 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:33:06.051 00:05:00.977 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:37:06.773 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6452 1 2025-08-01 05:33:06.090 00:06:00.227 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-01 05:33:06.011 00:06:00.252 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-01 05:34:06.030 00:06:00.168 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-01 05:35:05.468 00:05:00.550 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 05:39:07.611 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42792 9 6412 1 2025-08-01 05:35:12.617 00:05:05.768 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2516 1 2025-08-01 05:40:08.019 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54498 10 6452 1 2025-08-01 05:36:06.011 00:06:00.327 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 05:37:06.011 00:05:01.063 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:36:06.072 00:06:00.170 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:41:18.776 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36522 1 40 1 2025-08-01 05:41:35.187 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:41:35.066 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:41:35.128 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:37:06.011 00:06:00.209 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:42:19.183 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60952 1 40 1 2025-08-01 05:39:06.079 00:05:00.977 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:44:09.633 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:32824 9 6412 1 2025-08-01 05:40:19.302 00:05:03.329 OSPF 23.0.4.1:0 -> 224.0.0.5:0 45 3404 1 2025-08-01 05:41:05.476 00:05:00.581 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 05:40:06.018 00:06:00.244 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-01 05:40:06.103 00:06:00.216 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-01 05:45:10.002 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60058 10 6452 1 2025-08-01 05:41:06.074 00:06:00.128 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-01 05:46:10.420 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32878 10 6452 1 2025-08-01 05:46:35.285 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:46:35.161 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:46:35.221 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:43:06.055 00:05:01.026 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:47:10.823 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37884 9 6412 1 2025-08-01 05:43:06.115 00:06:00.127 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:43:06.054 00:06:00.285 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 05:48:21.555 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34978 1 40 1 2025-08-01 05:44:06.055 00:06:00.169 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:45:06.096 00:05:00.967 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:49:11.595 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46878 10 6452 1 2025-08-01 05:45:32.631 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2320 1 2025-08-01 05:50:22.325 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44672 1 40 1 2025-08-01 05:47:05.479 00:05:00.581 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-01 05:51:22.691 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56896 1 40 1 2025-08-01 05:51:35.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:51:35.237 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:51:35.298 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:47:06.137 00:06:00.186 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-01 05:47:06.058 00:06:00.206 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-01 05:48:06.077 00:06:00.128 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-01 05:49:06.057 00:05:01.028 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-01 05:53:13.162 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59650 9 6412 1 2025-08-01 05:54:13.564 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47960 10 6452 1 2025-08-01 05:50:52.633 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2464 1 2025-08-01 05:50:06.056 00:06:00.289 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-01 05:50:06.117 00:06:00.127 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-01 05:51:06.098 00:05:00.968 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-01 05:55:13.970 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-08-01 05:51:06.056 00:06:00.169 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-01 05:56:24.708 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57000 1 40 1 2025-08-01 05:56:35.720 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 05:56:35.481 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:56:35.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 05:53:05.482 00:05:00.580 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 311035, total packets: 1914, avg bps: 647, avg pps: 0, avg bpp: 162 Time window: 2025-08-01 04:54:06 - 2025-08-01 05:58:06 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0044s User: 0.0000s Wall: 0.0025s flows/second: 70605.7 Runtime: 0.0025s