Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 05:55:07.401 00:05:01.417 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 05:59:34.655 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41152 9 6412 1 2025-08-04 05:56:07.481 00:06:00.256 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 05:57:07.441 00:05:01.357 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 05:57:06.862 00:05:00.542 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 05:56:07.403 00:06:00.356 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 05:57:07.421 00:06:00.218 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 05:57:07.461 00:06:00.171 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 05:57:07.401 00:06:00.258 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-04 05:58:25.276 00:05:03.714 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2620 1 2025-08-04 06:03:02.274 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:03:02.147 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:03:02.215 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 05:58:07.401 00:06:00.252 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-04 06:03:36.310 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46596 10 6452 1 2025-08-04 06:01:07.402 00:05:01.416 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:05:37.152 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52306 10 6452 1 2025-08-04 06:06:37.555 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37746 9 6412 1 2025-08-04 06:03:06.860 00:05:00.544 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:03:07.442 00:05:01.357 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:07:37.957 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44744 10 6452 1 2025-08-04 06:03:38.991 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2608 1 2025-08-04 06:08:02.447 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:08:02.351 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:08:02.413 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:03:07.484 00:06:00.259 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 06:03:07.403 00:06:00.359 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 06:08:38.380 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60784 10 6452 1 2025-08-04 06:04:07.424 00:06:00.219 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 06:04:07.464 00:06:00.171 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 06:04:07.404 00:06:00.259 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-04 06:09:49.386 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48214 1 40 1 2025-08-04 06:05:07.404 00:06:00.250 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-04 06:10:39.421 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47014 10 6452 1 2025-08-04 06:07:07.404 00:05:01.414 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:11:39.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48948 9 6412 1 2025-08-04 06:12:40.231 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44370 10 6452 1 2025-08-04 06:13:02.864 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:13:03.155 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:13:03.215 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:08:58.996 00:05:00.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 3112 1 2025-08-04 06:09:06.865 00:05:00.552 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:09:07.446 00:05:01.354 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:10:07.485 00:06:00.258 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 06:10:07.405 00:06:00.359 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 06:15:41.444 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48484 10 6452 1 2025-08-04 06:11:07.405 00:06:00.258 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-04 06:11:07.425 00:06:00.219 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 06:11:07.465 00:06:00.171 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 06:16:52.158 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50840 1 40 1 2025-08-04 06:12:07.416 00:06:00.240 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-04 06:13:07.417 00:05:01.403 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:18:02.623 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:18:02.532 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:18:02.564 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:14:09.001 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2256 1 2025-08-04 06:15:06.865 00:05:00.552 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:15:07.457 00:05:01.343 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:19:43.001 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54988 10 6452 1 2025-08-04 06:20:43.410 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46670 10 6452 1 2025-08-04 06:17:07.418 00:06:00.347 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 06:17:07.498 00:06:00.248 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 06:22:44.215 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51496 10 6452 1 2025-08-04 06:23:03.317 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:23:03.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:18:07.417 00:06:00.249 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-04 06:19:07.417 00:05:01.403 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:23:03.609 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:18:07.437 00:06:00.209 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 06:18:07.478 00:06:00.158 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 06:19:29.006 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2812 1 2025-08-04 06:23:44.625 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52972 9 6412 1 2025-08-04 06:19:07.418 00:06:00.240 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-04 06:24:45.037 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53472 9 6412 1 2025-08-04 06:21:06.869 00:05:00.550 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:21:07.459 00:05:01.343 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:25:55.817 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 1 40 1 2025-08-04 06:26:45.855 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:52046 9 6412 1 2025-08-04 06:27:46.236 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52616 9 6412 1 2025-08-04 06:28:02.855 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:28:02.557 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:28:02.795 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:28:46.636 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37868 10 6452 1 2025-08-04 06:24:49.011 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2664 1 2025-08-04 06:24:07.499 00:06:00.249 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 06:24:07.418 00:06:00.350 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 06:25:07.419 00:05:01.402 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:29:47.042 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47788 9 6412 1 2025-08-04 06:25:07.419 00:06:00.251 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-04 06:25:07.479 00:06:00.162 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 06:25:07.439 00:06:00.211 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 06:30:57.807 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59276 1 40 1 2025-08-04 06:27:06.870 00:05:00.554 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:26:07.418 00:06:00.242 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-04 06:27:07.462 00:05:01.340 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:31:47.847 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59554 9 6412 1 2025-08-04 06:32:48.254 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45554 10 6452 1 2025-08-04 06:33:02.785 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:33:02.899 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:33:02.961 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:33:59.027 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53592 1 40 1 2025-08-04 06:30:09.017 00:05:10.038 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2568 1 2025-08-04 06:34:49.085 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59526 10 6452 1 2025-08-04 06:31:07.424 00:05:01.399 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:35:49.510 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55072 9 6412 1 2025-08-04 06:31:07.424 00:06:00.346 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 06:31:07.504 00:06:00.245 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 06:36:49.961 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51082 9 6412 1 2025-08-04 06:33:06.871 00:05:00.555 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:32:07.425 00:06:00.249 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-04 06:32:07.445 00:06:00.209 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 06:32:07.485 00:06:00.156 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 06:33:07.465 00:05:01.338 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:38:02.975 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:38:02.764 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:38:02.825 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:33:07.424 00:06:00.238 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-04 06:39:01.130 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48544 1 40 1 2025-08-04 06:35:29.056 00:05:10.060 OSPF 23.0.4.1:0 -> 224.0.0.5:0 46 3416 1 2025-08-04 06:41:01.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57548 1 40 1 2025-08-04 06:37:07.425 00:05:01.399 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:43:03.159 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:43:02.858 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:43:03.099 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:42:52.375 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36756 9 6412 1 2025-08-04 06:38:07.506 00:06:00.245 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 06:39:07.467 00:05:01.338 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:39:06.873 00:05:00.555 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:38:07.427 00:06:00.345 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 06:43:52.780 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39310 9 6412 1 2025-08-04 06:39:07.446 00:06:00.211 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 06:39:07.486 00:06:00.157 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 06:39:07.427 00:06:00.251 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-04 06:40:49.065 00:05:10.018 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2336 1 2025-08-04 06:45:03.569 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39550 1 40 1 2025-08-04 06:40:07.428 00:06:00.237 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-04 06:46:03.966 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37828 1 40 1 2025-08-04 06:46:54.007 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58658 9 6412 1 2025-08-04 06:43:07.427 00:05:01.399 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:48:03.076 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:48:03.270 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:48:03.331 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:48:54.819 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:47090 9 6412 1 2025-08-04 06:45:06.874 00:05:00.557 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:45:07.468 00:05:01.339 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:45:07.507 00:06:00.245 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 06:45:07.427 00:06:00.345 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 06:49:55.201 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36054 10 6452 1 2025-08-04 06:46:09.082 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2604 1 2025-08-04 06:46:07.448 00:06:00.210 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 06:46:07.488 00:06:00.158 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 06:51:05.968 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47928 1 40 1 2025-08-04 06:46:07.428 00:06:00.251 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-04 06:47:07.428 00:06:00.238 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-04 06:53:03.259 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:53:02.894 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:53:03.199 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:52:56.414 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46466 10 6452 1 2025-08-04 06:49:07.430 00:05:01.397 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-04 06:53:56.843 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36642 9 6412 1 2025-08-04 06:51:07.471 00:05:01.337 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-04 06:51:06.874 00:05:00.558 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-04 06:51:29.093 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2624 1 2025-08-04 06:52:07.511 00:06:00.243 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-04 06:52:07.431 00:06:00.343 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-04 06:57:08.374 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60058 1 40 1 2025-08-04 06:58:03.434 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 06:53:07.452 00:06:00.210 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-04 06:53:07.492 00:06:00.156 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-04 06:58:03.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:58:03.376 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 06:57:58.422 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 10 6452 1 2025-08-04 06:53:07.432 00:06:00.251 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 Summary: total flows: 173, total bytes: 312729, total packets: 1940, avg bps: 651, avg pps: 0, avg bpp: 161 Time window: 2025-08-04 05:55:07 - 2025-08-04 06:59:07 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0021s User: 0.0031s Wall: 0.0032s flows/second: 54150.3 Runtime: 0.0032s