Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 13:58:55.570 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57230 1 40 1 2025-08-11 13:55:10.878 00:05:01.133 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 13:54:12.045 00:06:00.909 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 13:59:55.954 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51412 1 40 1 2025-08-11 14:00:56.370 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49216 1 40 1 2025-08-11 13:56:12.009 00:06:00.023 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 13:57:11.553 00:05:00.459 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:01:33.903 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:01:34.064 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:01:34.126 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 13:58:11.532 00:05:00.498 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:02:46.819 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59072 10 6452 1 2025-08-11 14:03:47.222 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52020 9 6412 1 2025-08-11 13:59:12.011 00:06:00.085 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 13:59:54.482 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2660 1 2025-08-11 13:59:12.082 00:05:59.995 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-11 14:00:12.012 00:06:00.079 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 14:01:10.880 00:05:01.132 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:00:12.012 00:06:00.965 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-08-11 14:01:12.051 00:06:00.906 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 14:06:34.279 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:06:34.196 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:06:34.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:06:48.415 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48232 10 6452 1 2025-08-11 14:03:11.553 00:05:00.459 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:07:59.187 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41824 1 40 1 2025-08-11 14:04:11.534 00:05:00.497 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:03:12.011 00:06:00.021 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 14:05:14.481 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 2912 1 2025-08-11 14:06:12.076 00:06:00.004 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-11 14:07:10.883 00:05:01.129 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:06:12.011 00:06:00.087 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 14:11:34.166 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:11:34.268 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:11:34.329 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:11:50.438 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44240 9 6412 1 2025-08-11 14:07:12.012 00:06:00.966 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-08-11 14:07:12.015 00:06:00.078 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 14:13:01.161 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49220 1 40 1 2025-08-11 14:08:12.051 00:06:00.908 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 14:09:11.556 00:05:00.458 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:14:01.581 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35386 1 40 1 2025-08-11 14:10:11.538 00:05:00.497 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:10:34.489 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2520 1 2025-08-11 14:15:01.981 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56030 1 40 1 2025-08-11 14:10:12.012 00:06:00.025 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 14:16:02.379 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49524 1 40 1 2025-08-11 14:16:34.401 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:16:34.504 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:16:34.565 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:13:10.885 00:05:01.130 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:18:03.119 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53356 1 40 1 2025-08-11 14:13:12.013 00:06:00.087 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 14:13:12.079 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-11 14:18:53.156 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58326 10 6452 1 2025-08-11 14:14:12.015 00:06:00.080 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 14:14:12.014 00:06:00.967 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-08-11 14:15:11.558 00:05:00.457 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:20:03.940 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 1 40 1 2025-08-11 14:15:54.497 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2852 1 2025-08-11 14:15:12.054 00:06:00.908 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 14:16:11.539 00:05:00.496 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:20:53.979 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43768 9 6412 1 2025-08-11 14:21:34.698 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:21:34.507 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:21:34.638 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:22:04.748 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49280 1 40 1 2025-08-11 14:17:12.015 00:06:00.024 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 14:22:54.783 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59462 9 6412 1 2025-08-11 14:19:10.890 00:05:01.126 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:25:05.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42974 1 40 1 2025-08-11 14:20:12.015 00:06:00.086 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 14:21:11.559 00:05:00.460 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:20:12.081 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-11 14:21:14.503 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2772 1 2025-08-11 14:26:06.343 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52442 1 40 1 2025-08-11 14:22:11.539 00:05:00.499 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:21:12.019 00:06:00.080 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 14:21:12.016 00:06:00.967 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-08-11 14:26:34.601 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:26:34.368 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:26:34.542 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:26:56.380 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58716 10 6452 1 2025-08-11 14:22:12.055 00:06:00.908 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 14:27:56.781 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38324 10 6452 1 2025-08-11 14:28:57.196 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53132 10 6452 1 2025-08-11 14:25:10.891 00:05:01.128 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:24:12.016 00:06:00.024 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-11 14:26:34.513 00:05:10.001 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2608 1 2025-08-11 14:31:08.299 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56470 1 40 1 2025-08-11 14:27:11.560 00:05:00.490 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:31:34.644 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:31:34.428 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:31:34.585 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:32:08.707 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54034 1 40 1 2025-08-11 14:28:11.540 00:05:00.532 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:27:12.081 00:06:00.031 TCP 23.157.0.1:40165 -> 23.155.0.1:179 10 653 1 2025-08-11 14:27:12.019 00:06:00.088 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 14:28:12.022 00:06:00.113 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 14:32:58.745 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53902 9 6412 1 2025-08-11 14:28:12.019 00:06:00.966 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-08-11 14:29:12.059 00:06:00.907 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 14:34:09.956 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39788 1 40 1 2025-08-11 14:34:59.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57718 10 6452 1 2025-08-11 14:31:10.892 00:05:01.161 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:31:51.833 00:05:02.689 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2832 1 2025-08-11 14:31:12.051 00:06:00.003 TCP 23.155.0.1:179 -> 23.158.0.1:40787 8 549 1 2025-08-11 14:36:10.769 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53200 1 40 1 2025-08-11 14:36:34.747 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:36:34.875 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:36:34.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:33:11.562 00:05:00.493 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:37:00.807 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43890 10 6452 1 2025-08-11 14:34:11.540 00:05:00.534 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:38:01.168 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35272 10 6452 1 2025-08-11 14:34:12.088 00:06:00.027 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-11 14:34:12.054 00:06:00.056 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 14:39:01.573 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:54330 13 10429 1 2025-08-11 14:35:12.053 00:06:00.934 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-08-11 14:35:12.023 00:06:00.112 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 14:40:02.062 00:00:12.234 TCP 1.101.0.1:3000 -> 23.104.0.1:50206 9 6412 1 2025-08-11 14:36:12.093 00:06:00.874 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 14:37:10.894 00:05:01.166 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:41:04.335 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37616 9 6412 1 2025-08-11 14:37:04.522 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2544 1 2025-08-11 14:41:34.917 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:41:34.864 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:41:34.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:38:12.054 00:06:00.008 TCP 23.155.0.1:179 -> 23.158.0.1:40787 7 497 1 2025-08-11 14:39:11.563 00:05:00.499 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:43:05.125 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:48758 10 6452 1 2025-08-11 14:40:11.542 00:05:00.539 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:45:05.929 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51340 9 6412 1 2025-08-11 14:41:12.090 00:06:00.033 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-11 14:41:12.055 00:06:00.063 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 14:46:06.300 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57984 10 6452 1 2025-08-11 14:46:34.952 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:42:24.524 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2624 1 2025-08-11 14:46:34.921 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:46:34.891 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:42:12.022 00:06:00.120 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 14:43:10.899 00:05:01.163 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:42:12.059 00:06:00.930 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-08-11 14:47:17.066 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60412 1 40 1 2025-08-11 14:43:12.103 00:06:00.867 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 14:48:17.491 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34396 1 40 1 2025-08-11 14:45:11.564 00:05:00.498 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:49:07.536 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42506 9 6412 1 2025-08-11 14:46:11.545 00:05:00.538 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:45:12.062 00:06:00.001 TCP 23.155.0.1:179 -> 23.158.0.1:40787 7 497 1 2025-08-11 14:50:07.894 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47662 9 6412 1 2025-08-11 14:51:18.665 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54516 1 40 1 2025-08-11 14:51:34.909 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:51:34.901 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:51:34.961 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:47:44.532 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2732 1 2025-08-11 14:48:12.097 00:06:00.029 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-11 14:49:10.900 00:05:01.166 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-11 14:48:12.062 00:06:00.067 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-11 14:53:09.677 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45214 10 6452 1 2025-08-11 14:49:12.063 00:06:00.929 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-08-11 14:49:12.023 00:06:00.123 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-11 14:54:10.086 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39914 9 6412 1 2025-08-11 14:50:12.102 00:06:00.870 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-08-11 14:51:11.567 00:05:00.499 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-11 14:52:11.547 00:05:00.539 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-11 14:56:10.894 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53282 10 6452 1 2025-08-11 14:56:35.297 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:56:35.197 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 14:56:35.257 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 14:52:12.074 00:05:59.992 TCP 23.155.0.1:179 -> 23.158.0.1:40787 7 497 1 2025-08-11 14:53:04.536 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2644 1 2025-08-11 14:57:21.664 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39704 1 40 1 Summary: total flows: 173, total bytes: 266571, total packets: 1789, avg bps: 554, avg pps: 0, avg bpp: 149 Time window: 2025-08-11 13:54:12 - 2025-08-11 14:58:14 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0026s User: 0.0026s Wall: 0.0026s flows/second: 67211.4 Runtime: 0.0026s