Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 20:55:10.765 00:05:01.226 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 20:59:12.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2025-08-09 20:55:10.767 00:06:00.165 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 20:55:10.767 00:06:00.151 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:00:12.955 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:58640 9 6412 1 2025-08-09 21:00:44.934 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:00:44.660 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:00:44.873 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 20:57:10.815 00:05:01.156 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 20:57:10.673 00:06:00.095 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 20:58:10.654 00:06:00.135 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 20:58:10.847 00:06:00.065 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 20:58:10.827 00:06:00.071 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 20:59:00.798 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 43 3272 1 2025-08-09 21:03:14.167 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52000 9 6412 1 2025-08-09 20:59:10.090 00:06:00.679 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-09 21:04:14.570 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43434 10 6452 1 2025-08-09 21:01:10.767 00:05:01.226 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:05:14.933 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 9 6412 1 2025-08-09 21:05:44.735 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:05:44.551 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:05:44.612 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:02:10.767 00:06:00.165 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 21:02:10.767 00:06:00.152 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:03:10.808 00:05:01.165 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:08:26.877 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46762 1 40 1 2025-08-09 21:04:20.803 00:05:10.030 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2400 1 2025-08-09 21:04:10.687 00:06:00.084 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 21:09:16.911 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:33980 9 6412 1 2025-08-09 21:05:10.657 00:06:00.134 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 21:05:10.850 00:06:00.063 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 21:05:10.829 00:06:00.076 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 21:10:17.285 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50778 9 6412 1 2025-08-09 21:10:45.746 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:10:45.883 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:10:45.948 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:06:10.091 00:06:00.681 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-09 21:07:10.770 00:05:01.226 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:09:10.810 00:05:01.166 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:13:18.422 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6452 1 2025-08-09 21:09:40.832 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2892 1 2025-08-09 21:09:10.770 00:06:00.171 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 21:09:10.770 00:06:00.156 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:14:18.823 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:57878 10 6452 1 2025-08-09 21:15:29.574 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53428 1 40 1 2025-08-09 21:15:45.164 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:15:44.841 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:15:45.104 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:11:10.680 00:06:00.093 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 21:16:29.970 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45034 1 40 1 2025-08-09 21:13:10.771 00:05:01.227 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:12:10.662 00:06:00.132 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 21:12:10.852 00:06:00.065 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 21:12:10.832 00:06:00.075 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 21:13:10.092 00:06:00.690 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-09 21:18:20.423 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58438 10 6452 1 2025-08-09 21:15:10.812 00:05:01.166 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:15:00.839 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2440 1 2025-08-09 21:19:20.799 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34926 10 6452 1 2025-08-09 21:20:31.481 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54776 1 40 1 2025-08-09 21:20:45.037 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:20:44.901 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:20:44.978 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:16:10.774 00:06:00.163 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 21:16:10.774 00:06:00.154 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:22:21.945 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:55380 10 6452 1 2025-08-09 21:19:10.784 00:05:01.217 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:18:10.689 00:06:00.095 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 21:23:22.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47808 9 6412 1 2025-08-09 21:19:10.667 00:06:00.136 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 21:19:10.862 00:06:00.054 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 21:19:10.842 00:06:00.064 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 21:20:20.842 00:05:10.001 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2856 1 2025-08-09 21:24:22.722 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53520 10 6452 1 2025-08-09 21:20:10.094 00:06:00.690 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-09 21:21:10.823 00:05:01.156 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:25:44.770 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:25:44.894 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:25:44.954 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:26:23.499 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 10 6452 1 2025-08-09 21:27:23.871 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53874 9 6412 1 2025-08-09 21:23:10.784 00:06:00.154 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 21:23:10.784 00:06:00.145 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:25:10.783 00:05:01.218 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:29:24.657 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2025-08-09 21:25:40.842 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2596 1 2025-08-09 21:25:10.688 00:06:00.099 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 21:30:25.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53142 9 6412 1 2025-08-09 21:30:46.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:30:46.454 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:30:46.514 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:26:10.669 00:06:00.139 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 21:26:10.865 00:06:00.053 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 21:27:10.825 00:05:01.157 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:26:10.845 00:06:00.063 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 21:31:35.821 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44688 1 40 1 2025-08-09 21:27:10.096 00:06:00.691 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-09 21:32:25.861 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:59920 9 6412 1 2025-08-09 21:33:26.281 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50044 9 6412 1 2025-08-09 21:31:00.847 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2932 1 2025-08-09 21:30:10.786 00:06:00.153 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 21:30:10.786 00:06:00.143 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:31:10.787 00:05:01.219 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:34:26.680 00:01:10.767 TCP 1.101.0.1:3000 -> 23.104.0.1:33468 11 6492 1 2025-08-09 21:35:45.590 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:35:45.353 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:35:45.530 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:36:27.487 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47334 10 6452 1 2025-08-09 21:33:10.828 00:05:01.157 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:32:10.696 00:06:00.094 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 21:37:27.848 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 9 6412 1 2025-08-09 21:33:10.676 00:06:00.135 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 21:33:10.868 00:06:00.061 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 21:33:10.847 00:06:00.087 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 21:38:28.212 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49638 9 6412 1 2025-08-09 21:34:10.098 00:06:00.694 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-09 21:36:20.854 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2752 1 2025-08-09 21:40:29.060 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60640 9 6412 1 2025-08-09 21:40:45.515 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:40:45.328 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:40:45.575 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:37:10.790 00:05:01.218 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:41:29.419 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39494 10 6452 1 2025-08-09 21:37:10.789 00:06:00.153 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 21:37:10.789 00:06:00.166 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:39:10.832 00:05:01.155 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:43:30.226 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48078 10 6452 1 2025-08-09 21:39:10.706 00:06:00.088 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 21:44:41.008 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38244 1 40 1 2025-08-09 21:40:10.684 00:06:00.133 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 21:40:10.873 00:06:00.050 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 21:40:10.852 00:06:00.085 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 21:45:41.421 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39626 1 40 1 2025-08-09 21:45:45.556 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:45:45.574 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:45:45.634 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:41:40.858 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2724 1 2025-08-09 21:41:10.100 00:06:00.695 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-09 21:46:41.827 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 1 40 1 2025-08-09 21:43:10.794 00:05:01.217 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:47:31.873 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56774 9 6412 1 2025-08-09 21:48:32.242 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57884 10 6452 1 2025-08-09 21:44:10.794 00:06:00.153 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 21:44:10.794 00:06:00.165 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:45:10.834 00:05:01.157 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:49:42.985 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57130 1 40 1 2025-08-09 21:50:43.392 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50946 1 40 1 2025-08-09 21:50:45.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:50:45.733 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:50:45.793 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:47:00.865 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2648 1 2025-08-09 21:46:10.707 00:06:00.094 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 21:47:10.686 00:06:00.134 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-09 21:47:10.875 00:06:00.050 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-09 21:47:10.855 00:06:00.082 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-09 21:52:44.158 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33022 1 40 1 2025-08-09 21:48:10.101 00:06:00.700 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-09 21:49:10.796 00:05:01.222 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-09 21:53:34.197 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33432 9 6412 1 2025-08-09 21:54:44.965 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37844 1 40 1 2025-08-09 21:51:10.838 00:05:01.155 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-09 21:55:45.622 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:55:45.973 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:55:46.031 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:51:10.798 00:06:00.150 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-09 21:51:10.798 00:06:00.161 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-09 21:52:20.874 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2528 1 2025-08-09 21:56:35.408 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60862 9 6412 1 2025-08-09 21:53:10.709 00:06:00.108 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-09 21:58:36.231 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 9 6412 1 Summary: total flows: 170, total bytes: 310975, total packets: 1911, avg bps: 647, avg pps: 0, avg bpp: 162 Time window: 2025-08-09 20:55:10 - 2025-08-09 21:59:10 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0058s User: 0.0019s Wall: 0.0037s flows/second: 46448.5 Runtime: 0.0037s