Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 07:58:53.740 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:41900 9 6412 1 2025-08-09 07:55:10.378 00:05:01.309 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 07:54:10.328 00:06:00.070 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 07:54:10.458 00:06:00.082 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 07:54:10.438 00:06:00.049 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 07:59:54.168 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 9 6412 1 2025-08-09 08:00:28.986 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:00:29.093 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:00:29.152 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:56:49.589 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2728 1 2025-08-09 08:00:54.529 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51068 9 6412 1 2025-08-09 07:57:09.810 00:05:00.569 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 07:57:10.421 00:05:01.247 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 07:58:10.379 00:06:00.187 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 07:58:10.379 00:06:00.146 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 08:03:55.751 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58156 10 6452 1 2025-08-09 08:01:10.379 00:05:01.309 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:00:10.379 00:06:00.001 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 08:05:29.287 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:05:29.253 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:05:29.228 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:06:06.928 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33010 1 40 1 2025-08-09 08:01:10.332 00:06:00.068 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 08:01:10.459 00:06:00.088 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 08:01:10.439 00:06:00.067 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 08:02:09.594 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2384 1 2025-08-09 08:03:10.419 00:05:01.248 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:06:56.970 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53890 10 6452 1 2025-08-09 08:03:09.811 00:05:00.569 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:08:07.691 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57096 1 40 1 2025-08-09 08:08:57.729 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:48238 11 10327 1 2025-08-09 08:10:08.491 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 1 40 1 2025-08-09 08:05:10.380 00:06:00.188 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 08:05:10.380 00:06:00.148 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 08:10:29.185 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:10:29.073 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:10:29.125 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:10:58.535 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45100 10 6452 1 2025-08-09 08:07:10.379 00:05:01.308 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:07:29.602 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 3128 1 2025-08-09 08:12:09.221 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40650 1 40 1 2025-08-09 08:07:10.379 00:06:00.001 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 08:09:09.813 00:05:00.568 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:13:09.625 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 1 40 1 2025-08-09 08:08:10.333 00:06:00.067 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 08:08:10.465 00:06:00.084 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 08:09:10.419 00:05:01.249 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:08:10.440 00:06:00.067 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 08:13:59.666 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34174 9 6412 1 2025-08-09 08:15:10.385 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47138 1 40 1 2025-08-09 08:15:29.451 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:15:29.512 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:15:29.392 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:16:10.784 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38992 1 40 1 2025-08-09 08:12:49.609 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2624 1 2025-08-09 08:12:10.381 00:06:00.190 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 08:12:10.381 00:06:00.148 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 08:13:10.381 00:05:01.309 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:18:01.221 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57098 9 6412 1 2025-08-09 08:15:09.814 00:05:00.568 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:19:01.637 00:00:10.672 TCP 1.101.0.1:3000 -> 23.104.0.1:34524 9 6412 1 2025-08-09 08:14:10.380 00:06:00.001 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 08:15:10.422 00:05:01.249 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:15:10.345 00:06:00.058 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 08:15:10.462 00:06:00.091 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 08:15:10.442 00:06:00.067 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 08:20:02.348 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53752 10 6452 1 2025-08-09 08:20:29.464 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:20:29.409 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:20:29.404 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:21:02.750 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39400 10 6452 1 2025-08-09 08:22:03.161 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46122 10 6452 1 2025-08-09 08:18:09.615 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2812 1 2025-08-09 08:19:10.383 00:05:01.308 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:23:03.571 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47100 9 6412 1 2025-08-09 08:19:10.383 00:06:00.191 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 08:19:10.383 00:06:00.146 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 08:21:10.422 00:05:01.249 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:21:09.817 00:05:00.567 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:25:04.343 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60050 10 6452 1 2025-08-09 08:25:29.623 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:25:29.524 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:25:29.565 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:21:10.381 00:06:00.001 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 08:22:10.442 00:06:00.072 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 08:22:10.347 00:06:00.056 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 08:22:10.462 00:06:00.099 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 08:27:05.165 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32966 9 6412 1 2025-08-09 08:23:29.621 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2704 1 2025-08-09 08:28:05.568 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37222 10 6452 1 2025-08-09 08:25:10.383 00:05:01.309 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:29:05.967 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54862 9 6412 1 2025-08-09 08:30:16.745 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58364 1 40 1 2025-08-09 08:30:29.788 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:30:29.689 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:30:29.727 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:27:09.817 00:05:00.566 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:26:10.382 00:06:00.193 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 08:26:10.382 00:06:00.148 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 08:27:10.423 00:05:01.249 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:31:06.782 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:46874 10 6452 1 2025-08-09 08:28:49.626 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2592 1 2025-08-09 08:28:10.383 00:06:00.001 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 08:33:17.921 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35382 1 40 1 2025-08-09 08:29:10.349 00:06:00.055 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 08:29:10.463 00:06:00.094 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 08:29:10.443 00:06:00.068 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 08:34:07.962 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34936 10 6452 1 2025-08-09 08:31:10.384 00:05:01.310 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:35:08.374 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60034 11 6516 1 2025-08-09 08:35:29.761 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:35:29.836 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:35:29.896 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:36:08.797 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47358 9 6412 1 2025-08-09 08:33:09.821 00:05:00.565 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:33:10.424 00:05:01.252 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:33:10.385 00:06:00.193 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 08:33:10.385 00:06:00.147 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 08:34:09.630 00:05:10.018 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2400 1 2025-08-09 08:35:10.384 00:06:00.003 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 08:40:10.385 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 9 6412 1 2025-08-09 08:40:30.150 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:40:30.138 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:40:30.198 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:36:10.350 00:06:00.057 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 08:36:10.464 00:06:00.095 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 08:36:10.444 00:06:00.069 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 08:37:10.385 00:05:01.311 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:42:21.578 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53150 1 40 1 2025-08-09 08:39:10.427 00:05:01.249 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:39:09.820 00:05:00.567 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:39:29.650 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3144 1 2025-08-09 08:44:22.307 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39950 1 40 1 2025-08-09 08:40:10.387 00:06:00.208 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 08:40:10.387 00:06:00.147 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 08:45:12.345 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 9 6412 1 2025-08-09 08:45:29.693 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:45:29.880 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:45:29.938 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:42:10.386 00:06:00.002 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 08:43:10.387 00:05:01.310 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:47:13.162 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40482 10 6452 1 2025-08-09 08:43:10.351 00:06:00.059 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 08:43:10.468 00:06:00.114 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 08:43:10.448 00:06:00.066 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 08:48:13.565 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55110 10 6452 1 2025-08-09 08:44:49.655 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2320 1 2025-08-09 08:45:09.824 00:05:00.565 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:45:10.431 00:05:01.247 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:49:13.966 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55670 10 6452 1 2025-08-09 08:50:24.743 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51168 1 40 1 2025-08-09 08:50:30.011 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:50:30.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:50:30.164 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:51:25.155 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46328 1 40 1 2025-08-09 08:47:10.389 00:06:00.213 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 08:47:10.389 00:06:00.146 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 08:52:15.197 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34140 10 6452 1 2025-08-09 08:49:10.390 00:05:01.308 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 08:53:15.603 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44736 9 6412 1 2025-08-09 08:50:06.864 00:05:02.799 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2964 1 2025-08-09 08:49:10.389 00:06:00.003 TCP 23.155.0.1:179 -> 23.151.0.1:42035 7 497 1 2025-08-09 08:50:10.354 00:06:00.059 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 08:50:10.470 00:06:00.106 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 08:51:10.431 00:05:01.247 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 08:50:10.450 00:06:00.066 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 08:51:09.827 00:05:00.566 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-09 08:55:30.354 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 08:55:30.062 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:55:30.294 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 08:58:17.649 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58190 10 6452 1 Summary: total flows: 171, total bytes: 299510, total packets: 1846, avg bps: 621, avg pps: 0, avg bpp: 162 Time window: 2025-08-09 07:54:10 - 2025-08-09 08:58:27 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0015s User: 0.0030s Wall: 0.0025s flows/second: 69344.1 Runtime: 0.0025s