Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 13:58:56.604 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53416 1 40 1 2025-08-07 13:54:09.093 00:06:00.235 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 13:55:09.094 00:05:01.676 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 13:59:38.580 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:59:38.095 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:59:38.520 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:55:45.958 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2668 1 2025-08-07 13:59:46.644 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45704 10 6452 1 2025-08-07 14:00:47.015 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-08-07 13:57:08.901 00:05:00.195 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 13:57:09.139 00:05:01.613 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:01:47.426 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48938 9 6412 1 2025-08-07 13:57:09.095 00:06:00.276 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:02:58.189 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54930 1 40 1 2025-08-07 13:58:09.095 00:06:00.332 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-07 14:03:48.229 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:40016 10 6452 1 2025-08-07 14:04:38.783 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:04:38.218 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:04:38.723 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:04:58.965 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59410 1 40 1 2025-08-07 14:01:09.096 00:05:01.677 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:00:09.117 00:06:00.291 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-07 14:00:09.177 00:06:00.177 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-07 14:00:09.157 00:06:00.155 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-07 14:01:05.963 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2560 1 2025-08-07 14:01:09.095 00:06:00.235 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 14:06:49.411 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 9 6412 1 2025-08-07 14:03:08.902 00:05:00.201 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:03:09.138 00:05:01.615 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:09:00.589 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53148 1 40 1 2025-08-07 14:04:09.098 00:06:00.275 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:09:38.714 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:09:38.750 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:09:38.810 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:05:09.097 00:06:00.330 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-07 14:06:25.967 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2880 1 2025-08-07 14:07:09.098 00:05:01.676 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:11:51.436 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55074 9 6412 1 2025-08-07 14:07:09.119 00:06:00.290 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-07 14:07:09.179 00:06:00.175 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-07 14:07:09.159 00:06:00.154 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-07 14:12:51.851 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:44818 9 6412 1 2025-08-07 14:09:09.138 00:05:01.617 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:09:08.903 00:05:00.196 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:08:09.103 00:06:00.229 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 14:13:52.285 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52730 9 6412 1 2025-08-07 14:14:38.963 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:14:39.155 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:14:39.022 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:14:52.694 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48148 9 6412 1 2025-08-07 14:11:45.970 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2564 1 2025-08-07 14:15:53.121 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55534 9 6412 1 2025-08-07 14:11:09.098 00:06:00.276 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:16:53.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35796 9 6412 1 2025-08-07 14:13:09.099 00:05:01.677 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:12:09.099 00:06:00.330 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-07 14:18:04.287 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 1 40 1 2025-08-07 14:14:09.120 00:06:00.289 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-07 14:14:09.180 00:06:00.176 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-07 14:15:09.139 00:05:01.617 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:14:09.160 00:06:00.163 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-07 14:18:54.329 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:34112 12 10365 1 2025-08-07 14:15:08.905 00:05:00.195 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:19:38.953 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:19:38.803 00:00:00.013 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:19:38.892 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:19:54.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 9 6412 1 2025-08-07 14:15:09.099 00:06:00.244 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 14:20:55.206 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55440 9 6412 1 2025-08-07 14:17:05.973 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2964 1 2025-08-07 14:21:55.608 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35938 10 6452 1 2025-08-07 14:22:56.015 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57036 10 6452 1 2025-08-07 14:18:09.100 00:06:00.278 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:19:09.100 00:05:01.678 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:24:06.780 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53466 1 40 1 2025-08-07 14:19:09.101 00:06:00.330 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-07 14:24:38.852 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:24:39.147 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:24:39.208 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:21:08.924 00:05:00.176 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:21:09.140 00:05:01.619 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:21:09.119 00:06:00.290 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-07 14:21:09.179 00:06:00.178 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-07 14:21:09.159 00:06:00.165 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-07 14:22:25.982 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2624 1 2025-08-07 14:26:57.624 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39736 9 6412 1 2025-08-07 14:22:09.100 00:06:00.245 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 14:27:57.994 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 2025-08-07 14:25:09.100 00:05:01.679 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:29:38.913 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:29:38.973 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:29:39.146 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:25:09.100 00:06:00.279 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:30:09.124 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37156 1 40 1 2025-08-07 14:26:09.101 00:06:00.331 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-07 14:27:08.912 00:05:00.191 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:27:09.143 00:05:01.617 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:27:45.989 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2708 1 2025-08-07 14:31:59.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35328 10 6452 1 2025-08-07 14:28:09.122 00:06:00.290 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-07 14:28:09.182 00:06:00.178 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-07 14:28:09.162 00:06:00.164 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-07 14:29:09.102 00:06:00.244 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 14:34:39.508 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:34:39.157 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:34:39.447 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:35:11.062 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47248 1 40 1 2025-08-07 14:31:09.103 00:05:01.679 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:33:05.993 00:05:00.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2580 1 2025-08-07 14:33:09.144 00:05:01.618 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:33:08.913 00:05:00.189 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:32:09.101 00:06:00.278 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:37:01.492 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 10 6452 1 2025-08-07 14:33:09.103 00:06:00.331 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-07 14:39:02.302 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37664 10 6452 1 2025-08-07 14:39:39.331 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:39:39.152 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:39:39.271 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:40:02.705 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51912 10 6452 1 2025-08-07 14:35:09.123 00:06:00.293 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-07 14:35:09.184 00:06:00.178 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-07 14:35:09.164 00:06:00.164 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-07 14:41:03.123 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57372 10 6452 1 2025-08-07 14:36:09.103 00:06:00.244 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 14:37:09.103 00:05:01.680 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:42:03.490 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51360 10 6452 1 2025-08-07 14:38:12.862 00:05:03.146 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2848 1 2025-08-07 14:39:08.916 00:05:00.188 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:39:09.143 00:05:01.620 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:39:09.103 00:06:00.289 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:44:39.241 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:44:39.355 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:44:39.415 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:40:09.104 00:06:00.335 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-07 14:46:05.170 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46370 9 6412 1 2025-08-07 14:43:09.103 00:05:01.681 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:42:09.164 00:06:00.167 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-07 14:42:09.123 00:06:00.296 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-07 14:42:09.184 00:06:00.188 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-07 14:47:15.898 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59702 1 40 1 2025-08-07 14:43:26.008 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2480 1 2025-08-07 14:43:09.104 00:06:00.247 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 14:48:05.939 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57966 10 6452 1 2025-08-07 14:45:08.917 00:05:00.188 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:45:09.144 00:05:01.621 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:49:16.719 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41818 1 40 1 2025-08-07 14:49:39.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:49:39.284 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:49:39.345 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:50:17.123 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39454 1 40 1 2025-08-07 14:46:09.104 00:06:00.288 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:51:17.527 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 1 40 1 2025-08-07 14:47:09.104 00:06:00.335 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-07 14:52:07.569 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47820 10 6452 1 2025-08-07 14:48:46.010 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 2964 1 2025-08-07 14:49:09.105 00:05:01.681 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-07 14:53:07.928 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46060 10 6452 1 2025-08-07 14:49:09.125 00:06:00.294 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-07 14:49:09.185 00:06:00.188 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-07 14:49:09.165 00:06:00.180 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-07 14:54:18.653 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48880 1 40 1 2025-08-07 14:54:39.334 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:54:39.601 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:54:39.661 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:51:08.918 00:05:00.190 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-07 14:50:09.106 00:06:00.261 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-07 14:51:09.144 00:05:01.622 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-07 14:55:08.695 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 9 6412 1 2025-08-07 14:56:09.072 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34336 10 6452 1 2025-08-07 14:57:20.131 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 1 40 1 2025-08-07 14:53:09.105 00:06:00.291 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-07 14:54:06.015 00:05:10.036 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2524 1 2025-08-07 14:58:10.165 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41736 10 6452 1 Summary: total flows: 173, total bytes: 310591, total packets: 1935, avg bps: 635, avg pps: 0, avg bpp: 160 Time window: 2025-08-07 13:54:09 - 2025-08-07 14:59:16 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0037s User: 0.0009s Wall: 0.0022s flows/second: 79755.4 Runtime: 0.0022s