Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 05:55:10.311 00:05:01.326 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 05:59:00.168 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39742 10 6452 1 2025-08-09 05:54:10.311 00:06:00.001 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 05:55:10.265 00:06:00.069 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 05:55:10.392 00:06:00.089 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 05:55:10.372 00:06:00.078 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:00:00.581 00:00:12.865 TCP 1.101.0.1:3000 -> 23.104.0.1:45956 10 6452 1 2025-08-09 06:00:26.543 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:00:26.474 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:00:26.483 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:01:03.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53676 10 6452 1 2025-08-09 05:57:09.761 00:05:00.552 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 05:57:10.353 00:05:01.265 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:02:03.923 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51504 10 6452 1 2025-08-09 06:03:04.338 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60464 10 6452 1 2025-08-09 05:59:10.313 00:06:00.204 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 05:59:10.313 00:06:00.171 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 05:59:59.442 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2440 1 2025-08-09 06:04:04.751 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35776 10 6452 1 2025-08-09 06:01:10.313 00:05:01.338 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:05:05.130 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:40700 9 6412 1 2025-08-09 06:05:26.452 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:05:26.788 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:05:26.848 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:01:10.312 00:06:00.002 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 06:03:09.764 00:05:00.551 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:02:10.268 00:06:00.068 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 06:02:10.394 00:06:00.103 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 06:03:10.354 00:05:01.278 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:02:10.374 00:06:00.086 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:07:05.910 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:46578 10 6452 1 2025-08-09 06:08:06.334 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43704 9 6412 1 2025-08-09 06:09:06.738 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34594 9 6412 1 2025-08-09 06:05:19.450 00:05:10.011 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2792 1 2025-08-09 06:10:26.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:10:26.572 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:10:26.613 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:06:10.314 00:06:00.210 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 06:06:10.314 00:06:00.167 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 06:07:10.315 00:05:01.338 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:12:07.915 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 10 6452 1 2025-08-09 06:09:09.767 00:05:00.551 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:08:10.316 00:06:00.002 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 06:09:10.356 00:05:01.278 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:09:10.270 00:06:00.068 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 06:09:10.396 00:06:00.110 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 06:09:10.376 00:06:00.086 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:10:39.462 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2320 1 2025-08-09 06:15:19.496 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47676 1 40 1 2025-08-09 06:15:26.800 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:15:26.846 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:15:26.906 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:16:09.533 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47940 9 6412 1 2025-08-09 06:13:10.318 00:05:01.337 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:17:09.937 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37856 9 6412 1 2025-08-09 06:13:10.318 00:06:00.209 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 06:13:10.318 00:06:00.166 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 06:18:10.300 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50370 10 6452 1 2025-08-09 06:15:09.768 00:05:00.550 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:15:10.359 00:05:01.277 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:15:10.317 00:06:00.001 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 06:15:59.469 00:05:10.011 OSPF 23.0.4.1:0 -> 224.0.0.5:0 46 3416 1 2025-08-09 06:20:21.490 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 1 40 1 2025-08-09 06:20:26.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:20:27.081 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:20:27.143 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:16:10.273 00:06:00.072 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 06:16:10.403 00:06:00.107 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 06:16:10.383 00:06:00.082 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:22:22.217 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42272 1 40 1 2025-08-09 06:19:10.318 00:05:01.339 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:23:12.269 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:41052 9 6412 1 2025-08-09 06:21:10.358 00:05:01.279 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:21:09.769 00:05:00.550 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:20:10.318 00:06:00.213 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 06:20:10.317 00:06:00.170 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 06:25:23.635 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44582 1 40 1 2025-08-09 06:25:26.786 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:25:27.149 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:25:27.210 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:21:19.480 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2336 1 2025-08-09 06:26:13.673 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40672 10 6452 1 2025-08-09 06:22:10.323 00:05:59.996 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 06:27:14.085 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54352 9 6412 1 2025-08-09 06:23:10.274 00:06:00.066 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 06:23:10.399 00:06:00.113 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 06:23:10.379 00:06:00.088 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:28:14.490 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58120 10 6452 1 2025-08-09 06:25:10.319 00:05:01.340 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:29:14.897 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43906 9 6412 1 2025-08-09 06:30:27.272 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:30:25.663 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40194 1 40 1 2025-08-09 06:30:27.270 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:30:27.331 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:26:39.485 00:05:07.350 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2864 1 2025-08-09 06:27:09.771 00:05:00.549 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:27:10.360 00:05:01.279 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:27:10.319 00:06:00.215 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 06:27:10.319 00:06:00.167 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 06:32:16.060 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51638 10 6452 1 2025-08-09 06:33:16.434 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42818 10 6452 1 2025-08-09 06:29:10.320 00:06:00.032 TCP 23.155.0.1:179 -> 23.151.0.1:42035 10 653 1 2025-08-09 06:34:27.199 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 1 40 1 2025-08-09 06:31:10.321 00:05:01.339 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:30:10.381 00:06:00.087 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:30:10.288 00:06:00.085 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 06:30:10.401 00:06:00.113 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 06:35:27.458 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:35:27.628 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:35:27.688 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:31:49.489 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2584 1 2025-08-09 06:36:17.647 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49054 9 6412 1 2025-08-09 06:33:09.773 00:05:00.581 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:33:10.393 00:05:01.248 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:37:28.380 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36004 1 40 1 2025-08-09 06:38:28.784 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50804 1 40 1 2025-08-09 06:34:10.351 00:06:00.183 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 06:34:10.351 00:06:00.137 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 06:39:18.823 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:33464 9 6412 1 2025-08-09 06:40:27.501 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:40:27.417 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:40:27.441 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:40:19.208 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 9 6412 1 2025-08-09 06:37:10.351 00:05:01.310 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:36:10.309 00:06:00.044 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 06:37:09.494 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2528 1 2025-08-09 06:41:29.969 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39908 1 40 1 2025-08-09 06:37:10.290 00:06:00.084 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 06:37:10.433 00:06:00.082 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 06:37:10.413 00:06:00.055 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:39:10.393 00:05:01.250 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:39:09.771 00:05:00.582 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:43:20.411 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53196 9 6412 1 2025-08-09 06:44:20.782 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:39464 10 6452 1 2025-08-09 06:45:27.193 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:45:27.526 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:45:27.587 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:45:21.213 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40398 10 6452 1 2025-08-09 06:41:10.354 00:06:00.195 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 06:41:10.354 00:06:00.138 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 06:46:21.620 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32874 10 6452 1 2025-08-09 06:42:29.501 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 3064 1 2025-08-09 06:43:10.354 00:05:01.310 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:43:10.312 00:06:00.044 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 06:48:24.579 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57008 9 6412 1 2025-08-09 06:44:10.293 00:06:00.084 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 06:44:10.436 00:06:00.084 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 06:45:10.397 00:05:01.248 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:44:10.416 00:06:00.056 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:45:09.777 00:05:00.580 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:49:35.306 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45204 1 40 1 2025-08-09 06:50:27.580 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:50:27.691 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:50:27.519 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:50:25.342 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56086 10 6452 1 2025-08-09 06:51:25.753 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 9 6412 1 2025-08-09 06:47:49.506 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2544 1 2025-08-09 06:52:36.580 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47136 1 40 1 2025-08-09 06:48:10.355 00:06:00.184 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 06:48:10.355 00:06:00.135 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 06:49:10.356 00:05:01.308 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 06:54:27.016 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6452 1 2025-08-09 06:51:10.396 00:05:01.248 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 06:50:10.314 00:06:00.043 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 06:51:09.776 00:05:00.581 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 06:55:27.861 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 06:55:27.697 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:55:27.802 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 06:51:10.418 00:06:00.054 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 06:51:10.296 00:06:00.084 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 06:51:10.438 00:06:00.083 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 06:53:09.512 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2812 1 2025-08-09 06:58:38.975 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60576 1 40 1 Summary: total flows: 173, total bytes: 310040, total packets: 1892, avg bps: 641, avg pps: 0, avg bpp: 163 Time window: 2025-08-09 05:54:10 - 2025-08-09 06:58:38 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0024s User: 0.0024s Wall: 0.0031s flows/second: 55825.1 Runtime: 0.0031s