Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 05:55:10.727 00:05:01.094 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 05:55:11.819 00:05:00.972 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 05:59:16.081 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-08-11 06:00:26.858 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 1 40 1 2025-08-11 05:57:11.860 00:05:00.911 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 05:57:13.786 00:05:10.013 OSPF 23.0.4.1:0 -> 224.0.0.5:0 43 3044 1 2025-08-11 06:01:16.894 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39024 10 6452 1 2025-08-11 06:01:24.366 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:01:24.453 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:01:24.515 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 05:57:11.821 00:06:00.079 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 06:02:17.294 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-08-11 05:58:11.805 00:06:00.096 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 05:58:11.877 00:06:00.004 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-11 06:03:17.697 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54122 9 6412 1 2025-08-11 05:59:11.364 00:06:00.480 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-11 06:04:18.057 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45208 9 6412 1 2025-08-11 06:01:10.729 00:05:01.094 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:00:11.821 00:06:00.008 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 06:01:11.821 00:05:00.971 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:00:11.383 00:06:00.440 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-11 06:05:18.454 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53862 10 6452 1 2025-08-11 06:06:24.333 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:06:24.462 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:06:24.522 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:06:18.862 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 10 6452 1 2025-08-11 06:02:33.798 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2464 1 2025-08-11 06:03:11.862 00:05:00.910 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:07:19.254 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36946 10 6452 1 2025-08-11 06:08:30.021 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33258 1 40 1 2025-08-11 06:04:11.822 00:06:00.079 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 06:09:20.060 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49814 10 6452 1 2025-08-11 06:05:11.806 00:06:00.108 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 06:05:11.880 00:06:00.003 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-11 06:10:20.468 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45470 9 6412 1 2025-08-11 06:07:11.824 00:05:00.970 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:07:10.731 00:05:01.098 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:06:11.363 00:06:00.484 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-11 06:11:24.515 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:11:24.417 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:11:24.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:11:20.840 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48284 10 6452 1 2025-08-11 06:07:53.806 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2564 1 2025-08-11 06:07:11.822 00:06:00.010 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 06:07:11.383 00:06:00.441 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-11 06:12:31.570 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50184 1 40 1 2025-08-11 06:09:11.865 00:05:00.909 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:13:31.970 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53742 1 40 1 2025-08-11 06:14:22.005 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39076 9 6412 1 2025-08-11 06:11:11.822 00:06:00.082 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 06:16:24.636 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:16:24.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:16:24.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:16:22.768 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43858 9 6412 1 2025-08-11 06:12:11.814 00:06:00.091 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 06:12:11.882 00:06:00.003 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-11 06:13:10.738 00:05:01.087 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:13:11.825 00:05:00.969 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:13:03.842 00:05:09.977 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2724 1 2025-08-11 06:13:11.366 00:06:00.479 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-11 06:18:23.583 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47884 10 6452 1 2025-08-11 06:14:11.824 00:06:00.011 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 06:14:11.395 00:06:00.430 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-11 06:15:11.864 00:05:00.909 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:19:34.351 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46758 1 40 1 2025-08-11 06:20:34.768 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49846 1 40 1 2025-08-11 06:21:24.667 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:21:24.599 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:21:24.728 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:21:24.804 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34266 10 6452 1 2025-08-11 06:22:35.501 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49132 1 40 1 2025-08-11 06:18:23.818 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2644 1 2025-08-11 06:19:10.738 00:05:01.088 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:18:11.825 00:06:00.080 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 06:19:11.825 00:05:00.969 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:23:35.904 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37056 1 40 1 2025-08-11 06:19:11.815 00:06:00.091 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 06:19:11.882 00:06:00.004 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-11 06:24:25.942 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55974 9 6412 1 2025-08-11 06:20:11.377 00:06:00.470 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-11 06:21:11.866 00:05:00.911 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:21:11.399 00:06:00.428 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-11 06:21:11.826 00:06:00.015 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 06:26:24.967 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:26:24.725 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:26:24.907 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:27:27.086 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59340 9 6412 1 2025-08-11 06:23:43.827 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2884 1 2025-08-11 06:28:27.484 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54936 10 6452 1 2025-08-11 06:25:10.739 00:05:01.088 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:25:11.826 00:05:00.971 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:25:11.827 00:06:00.082 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 06:26:11.821 00:06:00.087 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 06:27:11.867 00:05:00.911 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:26:11.888 00:06:00.003 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-11 06:31:24.507 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:31:24.897 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:31:24.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:27:11.379 00:06:00.471 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-11 06:32:29.004 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37148 9 6412 1 2025-08-11 06:28:11.827 00:06:00.017 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 06:28:11.400 00:06:00.428 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-11 06:29:03.834 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2688 1 2025-08-11 06:34:40.130 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36174 1 40 1 2025-08-11 06:31:10.743 00:05:01.087 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:31:11.826 00:05:00.971 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:35:30.168 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54444 9 6412 1 2025-08-11 06:36:25.371 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:36:25.309 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:36:25.310 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:36:40.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48214 1 40 1 2025-08-11 06:32:11.827 00:06:00.086 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 06:33:11.873 00:05:00.905 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:33:11.823 00:06:00.088 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 06:33:11.892 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-11 06:34:23.841 00:05:00.881 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2516 1 2025-08-11 06:38:31.340 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51556 10 6452 1 2025-08-11 06:34:11.380 00:06:00.470 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-11 06:39:31.755 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50198 9 6412 1 2025-08-11 06:35:11.830 00:06:00.015 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 06:35:11.401 00:06:00.430 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-11 06:37:10.745 00:05:01.088 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:37:11.832 00:05:00.968 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:41:25.096 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:41:25.051 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:41:25.111 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:41:32.591 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-08-11 06:42:43.352 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50298 1 40 1 2025-08-11 06:39:11.871 00:05:00.909 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:43:43.718 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52414 1 40 1 2025-08-11 06:39:33.844 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2852 1 2025-08-11 06:39:11.832 00:06:00.084 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 06:44:44.092 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49274 1 40 1 2025-08-11 06:40:11.825 00:06:00.087 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 06:40:11.894 00:06:00.002 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-11 06:45:34.134 00:00:18.430 TCP 1.101.0.1:3000 -> 23.104.0.1:53274 9 6412 1 2025-08-11 06:41:11.382 00:06:00.470 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-11 06:46:25.214 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:46:25.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:46:25.153 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:46:42.633 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 9 6412 1 2025-08-11 06:43:10.747 00:05:01.086 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:42:11.834 00:06:00.013 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 06:43:11.832 00:05:00.970 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:42:11.403 00:06:00.430 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-11 06:47:43.040 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36840 10 6452 1 2025-08-11 06:48:43.444 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38094 10 6452 1 2025-08-11 06:44:53.847 00:05:10.014 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2788 1 2025-08-11 06:45:11.872 00:05:00.910 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:50:44.327 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 9 6412 1 2025-08-11 06:46:11.833 00:06:00.085 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 06:51:25.028 00:00:00.073 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:51:25.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:51:25.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:51:44.691 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49106 9 6412 1 2025-08-11 06:47:11.827 00:06:00.088 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 06:47:11.897 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 9 601 1 2025-08-11 06:52:45.121 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59532 9 6412 1 2025-08-11 06:49:11.837 00:05:00.965 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-11 06:49:10.755 00:05:01.083 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 06:48:11.386 00:06:00.472 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-11 06:53:45.482 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34932 10 6452 1 2025-08-11 06:49:11.837 00:06:00.010 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 06:49:11.407 00:06:00.431 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-11 06:50:13.861 00:05:10.014 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2740 1 2025-08-11 06:54:45.844 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:48708 11 10325 1 2025-08-11 06:51:11.873 00:05:00.910 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-11 06:55:56.651 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42564 1 40 1 2025-08-11 06:56:25.541 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:56:25.512 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 06:56:25.572 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 06:56:57.053 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38892 1 40 1 2025-08-11 06:53:11.834 00:06:00.094 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 Summary: total flows: 173, total bytes: 312294, total packets: 1868, avg bps: 650, avg pps: 0, avg bpp: 167 Time window: 2025-08-11 05:55:10 - 2025-08-11 06:59:11 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0028s User: 0.0019s Wall: 0.0026s flows/second: 67130.6 Runtime: 0.0026s