Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 05:55:11.196 00:05:01.290 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 05:55:12.485 00:06:00.037 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 05:56:12.526 00:05:00.789 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 05:56:15.797 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2296 1 2025-08-12 06:00:44.980 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52592 1 40 1 2025-08-12 05:57:11.876 00:05:00.611 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:01:35.020 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52814 9 6412 1 2025-08-12 06:01:53.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:01:53.064 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:01:53.124 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:58:11.857 00:05:00.651 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 05:58:12.487 00:05:00.850 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:02:35.429 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58928 9 6412 1 2025-08-12 05:58:12.494 00:06:00.053 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-12 05:58:12.486 00:06:00.030 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-12 06:03:35.835 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60438 10 6452 1 2025-08-12 05:59:12.501 00:06:00.072 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-12 06:04:36.208 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56556 9 6412 1 2025-08-12 06:01:11.201 00:05:01.292 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:05:36.608 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40768 9 6412 1 2025-08-12 06:01:35.802 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2996 1 2025-08-12 06:02:12.528 00:05:00.791 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:06:37.021 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 2025-08-12 06:06:53.203 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:06:53.325 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:06:53.385 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:02:12.490 00:06:00.034 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 06:03:11.877 00:05:00.615 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:04:11.857 00:05:00.656 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:04:12.488 00:05:00.851 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:09:38.227 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37354 9 6412 1 2025-08-12 06:05:12.501 00:06:00.053 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-12 06:05:12.492 00:06:00.026 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-12 06:10:38.632 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45812 10 6452 1 2025-08-12 06:06:55.813 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2644 1 2025-08-12 06:07:11.198 00:05:01.295 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:06:12.504 00:06:00.070 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-12 06:11:53.389 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:11:53.193 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:11:38.995 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:32912 10 6452 1 2025-08-12 06:11:53.329 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:08:12.534 00:05:00.787 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:12:49.745 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47140 1 40 1 2025-08-12 06:09:11.878 00:05:00.616 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:13:50.171 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43986 1 40 1 2025-08-12 06:10:11.858 00:05:00.657 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:09:12.493 00:06:00.035 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 06:10:12.493 00:05:00.847 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:14:40.224 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40746 9 6412 1 2025-08-12 06:12:15.815 00:05:10.001 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2632 1 2025-08-12 06:16:53.478 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:16:41.053 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36468 10 6452 1 2025-08-12 06:16:53.475 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:16:53.418 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:12:12.497 00:06:00.057 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-12 06:13:11.202 00:05:01.293 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:12:12.494 00:06:00.026 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-12 06:13:12.507 00:06:00.069 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-12 06:14:12.534 00:05:00.788 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:18:41.867 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:60592 10 6452 1 2025-08-12 06:15:11.882 00:05:00.614 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:19:52.667 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57970 1 40 1 2025-08-12 06:16:11.864 00:05:00.663 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:16:12.494 00:05:00.848 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:16:12.494 00:06:00.052 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 06:17:35.816 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 2932 1 2025-08-12 06:21:53.448 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45688 1 40 1 2025-08-12 06:21:53.747 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:21:53.634 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:21:53.696 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:22:43.483 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34006 9 6412 1 2025-08-12 06:19:11.204 00:05:01.305 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:23:43.886 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53584 10 6452 1 2025-08-12 06:19:12.497 00:06:00.041 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-12 06:20:12.537 00:05:00.792 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:19:12.501 00:06:00.069 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-12 06:24:44.296 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60028 10 6452 1 2025-08-12 06:20:12.510 00:06:00.083 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-12 06:21:11.883 00:05:00.631 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:22:11.862 00:05:00.670 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:22:12.509 00:05:00.840 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:26:53.740 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:26:53.617 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:26:53.680 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:26:45.081 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55434 9 6412 1 2025-08-12 06:22:55.821 00:05:10.011 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2520 1 2025-08-12 06:23:12.510 00:06:00.039 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 06:28:45.837 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49260 10 6452 1 2025-08-12 06:25:11.207 00:05:01.306 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:29:46.244 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 9 6412 1 2025-08-12 06:26:12.552 00:05:00.778 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:30:46.643 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38762 10 6452 1 2025-08-12 06:26:12.520 00:06:00.054 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-12 06:27:11.884 00:05:00.631 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:26:12.514 00:06:00.027 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-12 06:31:53.941 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:31:53.969 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:31:47.050 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58770 10 6452 1 2025-08-12 06:31:54.031 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:28:11.863 00:05:00.671 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:27:12.528 00:06:00.066 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-12 06:28:12.512 00:05:00.838 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:28:15.831 00:05:10.113 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2916 1 2025-08-12 06:34:48.314 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55446 9 6412 1 2025-08-12 06:31:11.210 00:05:01.306 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:30:12.514 00:06:00.037 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 06:35:59.074 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55990 1 40 1 2025-08-12 06:32:12.553 00:05:00.778 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:36:53.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:36:53.923 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:36:53.898 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:36:49.134 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41564 9 6412 1 2025-08-12 06:33:11.884 00:05:00.631 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:33:35.843 00:05:10.011 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2708 1 2025-08-12 06:37:49.540 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 10 6452 1 2025-08-12 06:33:12.513 00:06:00.027 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-12 06:34:12.513 00:05:00.839 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:34:11.864 00:05:00.671 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:33:12.519 00:06:00.056 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-12 06:39:00.348 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35998 1 40 1 2025-08-12 06:34:12.529 00:06:00.066 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-12 06:39:50.389 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:55858 12 10367 1 2025-08-12 06:40:50.823 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34328 9 6412 1 2025-08-12 06:37:11.210 00:05:01.311 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:41:53.643 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:41:53.861 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:41:53.921 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:37:12.517 00:06:00.035 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 06:38:12.556 00:05:00.779 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:38:55.855 00:05:10.259 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2660 1 2025-08-12 06:39:11.887 00:05:00.633 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:43:52.121 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52146 10 6452 1 2025-08-12 06:40:11.867 00:05:00.679 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:40:12.514 00:05:00.840 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:44:52.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34882 9 6412 1 2025-08-12 06:40:12.520 00:06:00.059 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-12 06:40:12.517 00:06:00.026 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-12 06:41:12.532 00:06:00.068 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-12 06:46:53.943 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:46:54.187 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:46:54.127 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:47:03.743 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35608 1 40 1 2025-08-12 06:43:11.211 00:05:01.309 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:44:12.560 00:05:00.777 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:44:15.874 00:05:10.017 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 2912 1 2025-08-12 06:49:04.560 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51770 1 40 1 2025-08-12 06:44:12.520 00:06:00.035 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 06:45:11.888 00:05:00.633 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:49:54.594 00:00:11.681 TCP 1.101.0.1:3000 -> 23.104.0.1:58498 10 6452 1 2025-08-12 06:46:11.869 00:05:00.672 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:46:12.519 00:05:00.838 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:50:56.355 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39842 9 6412 1 2025-08-12 06:51:54.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:51:54.294 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:51:54.353 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:51:56.755 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45342 9 6412 1 2025-08-12 06:47:12.519 00:06:00.025 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-12 06:47:12.521 00:06:00.061 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-12 06:48:12.535 00:06:00.068 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-12 06:49:11.215 00:05:01.307 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-12 06:49:35.892 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2664 1 2025-08-12 06:53:57.960 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:39292 10 6452 1 2025-08-12 06:50:12.561 00:05:00.776 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-12 06:54:58.384 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56608 9 6412 1 2025-08-12 06:51:11.889 00:05:00.634 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-12 06:51:12.523 00:06:00.034 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-12 06:52:12.524 00:05:00.835 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-12 06:52:11.870 00:05:00.674 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-12 06:56:54.443 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 06:56:54.301 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:56:54.383 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 06:57:59.495 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 Summary: total flows: 172, total bytes: 320816, total packets: 1913, avg bps: 679, avg pps: 0, avg bpp: 167 Time window: 2025-08-12 05:55:11 - 2025-08-12 06:58:09 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0034s User: 0.0009s Wall: 0.0026s flows/second: 65098.4 Runtime: 0.0027s