Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 11:58:50.428 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58006 10 6452 1 2025-08-20 11:55:15.002 00:05:01.567 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 11:54:16.566 00:06:00.036 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 11:55:16.566 00:05:01.559 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 11:54:16.581 00:06:00.069 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 11:59:50.832 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59218 9 6412 1 2025-08-20 11:56:15.995 00:05:00.595 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-20 11:56:16.607 00:05:01.498 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:00:51.551 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:00:51.435 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:00:51.490 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:01:01.603 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33460 1 40 1 2025-08-20 11:56:16.630 00:06:00.002 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-20 12:02:02.013 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38798 1 40 1 2025-08-20 11:57:53.174 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2868 1 2025-08-20 12:02:52.056 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49302 10 6452 1 2025-08-20 12:04:52.821 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33744 10 6452 1 2025-08-20 12:01:15.012 00:05:01.561 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:00:16.571 00:06:00.083 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 12:01:16.572 00:05:01.555 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:00:16.019 00:06:00.554 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 12:05:51.596 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:05:51.500 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:05:51.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:05:53.231 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37170 10 6452 1 2025-08-20 12:02:15.996 00:05:00.596 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-20 12:01:16.582 00:06:00.070 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 12:01:16.570 00:06:00.033 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 12:02:16.619 00:05:01.487 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:03:13.180 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2784 1 2025-08-20 12:07:54.120 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:41594 9 6412 1 2025-08-20 12:03:16.631 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-20 12:08:54.480 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56258 10 6452 1 2025-08-20 12:09:54.843 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53930 10 6452 1 2025-08-20 12:10:51.732 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:10:51.709 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:10:51.672 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:11:05.568 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57306 1 40 1 2025-08-20 12:07:15.012 00:05:01.560 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:07:16.572 00:05:01.556 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:11:55.603 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 9 6412 1 2025-08-20 12:07:16.571 00:06:00.083 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 12:07:16.018 00:06:00.558 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 12:08:15.998 00:05:00.599 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-20 12:08:16.612 00:05:01.496 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:08:24.135 00:05:09.055 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3032 1 2025-08-20 12:08:16.571 00:06:00.033 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 12:08:16.584 00:06:00.070 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 12:15:07.133 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42396 1 40 1 2025-08-20 12:10:16.633 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 9 601 1 2025-08-20 12:15:51.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:15:51.904 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:15:51.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:16:07.535 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38714 1 40 1 2025-08-20 12:17:07.940 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57518 1 40 1 2025-08-20 12:13:15.011 00:05:01.562 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:13:16.576 00:05:01.552 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:13:43.192 00:05:10.104 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2384 1 2025-08-20 12:14:16.614 00:05:01.495 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:14:16.572 00:06:00.085 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 12:14:16.020 00:06:00.553 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 12:14:16.000 00:06:00.593 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 12:15:16.584 00:06:00.070 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 12:19:58.703 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41078 10 6452 1 2025-08-20 12:15:16.573 00:06:00.032 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 12:20:51.862 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:20:51.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:20:51.802 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:21:09.502 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56414 1 40 1 2025-08-20 12:21:59.541 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41408 10 6452 1 2025-08-20 12:17:16.635 00:06:00.003 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-20 12:22:59.948 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:36576 9 6412 1 2025-08-20 12:19:03.213 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2320 1 2025-08-20 12:19:15.013 00:05:01.560 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:19:16.573 00:05:01.555 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:24:00.336 00:00:10.744 TCP 1.101.0.1:3000 -> 23.104.0.1:48856 9 6412 1 2025-08-20 12:20:16.614 00:05:01.496 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:25:11.506 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 1 40 1 2025-08-20 12:25:52.030 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:25:51.937 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:25:51.972 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:21:16.574 00:06:00.085 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 12:21:16.028 00:06:00.547 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 12:21:16.009 00:06:00.586 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 12:27:01.945 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:55772 9 6412 1 2025-08-20 12:22:16.585 00:06:00.071 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 12:22:16.574 00:06:00.033 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 12:28:02.384 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43280 9 6412 1 2025-08-20 12:24:21.795 00:05:01.430 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 3060 1 2025-08-20 12:29:02.748 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51094 10 6452 1 2025-08-20 12:25:15.015 00:05:01.565 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:25:16.574 00:05:01.555 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:24:16.639 00:06:00.002 TCP 23.157.0.1:40165 -> 23.155.0.1:179 9 601 1 2025-08-20 12:26:16.616 00:05:01.495 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:30:51.908 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:30:52.143 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:30:52.203 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:28:16.010 00:06:00.591 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 12:28:16.030 00:06:00.552 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 12:33:04.336 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56020 9 6412 1 2025-08-20 12:28:16.577 00:06:00.084 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 12:29:33.220 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2784 1 2025-08-20 12:29:16.587 00:06:00.075 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 12:29:16.580 00:06:00.028 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 12:34:15.058 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57230 1 40 1 2025-08-20 12:31:16.582 00:05:01.549 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:31:15.016 00:05:01.567 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:35:05.122 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 9 6412 1 2025-08-20 12:35:52.003 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:35:52.033 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:35:52.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:32:16.621 00:05:01.489 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:31:16.639 00:06:00.007 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 12:37:05.891 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53672 10 6452 1 2025-08-20 12:38:06.253 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44834 10 6452 1 2025-08-20 12:34:53.227 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2772 1 2025-08-20 12:39:06.664 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60008 10 6452 1 2025-08-20 12:40:07.081 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37970 10 6452 1 2025-08-20 12:35:16.581 00:06:00.082 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 12:35:16.031 00:06:00.552 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 12:35:16.011 00:06:00.593 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 12:40:52.320 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:40:52.480 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:40:52.540 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:36:16.587 00:06:00.079 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 12:37:15.023 00:05:01.563 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:36:16.582 00:06:00.029 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 12:37:16.586 00:05:01.546 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:38:16.624 00:05:01.488 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:42:07.890 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53204 9 6412 1 2025-08-20 12:38:16.644 00:06:00.005 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 12:43:08.257 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39338 9 6412 1 2025-08-20 12:40:11.779 00:05:01.456 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2744 1 2025-08-20 12:45:09.017 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42454 9 6412 1 2025-08-20 12:45:52.365 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:45:52.354 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:45:52.413 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:46:09.377 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:40436 10 6452 1 2025-08-20 12:42:16.016 00:06:00.593 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 12:43:15.025 00:05:01.564 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:42:16.587 00:06:00.081 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 12:43:16.587 00:05:01.546 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:42:16.036 00:06:00.553 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 12:47:20.109 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52674 1 40 1 2025-08-20 12:43:16.592 00:06:00.076 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 12:44:16.627 00:05:01.486 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:43:16.588 00:06:00.029 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 12:48:10.149 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55042 10 6452 1 2025-08-20 12:49:20.869 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 1 40 1 2025-08-20 12:45:23.236 00:05:10.025 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2384 1 2025-08-20 12:45:16.643 00:06:00.006 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 12:50:21.293 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44820 1 40 1 2025-08-20 12:50:52.139 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:50:52.506 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:50:52.567 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:52:11.693 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48780 9 6412 1 2025-08-20 12:49:15.026 00:05:01.564 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 12:49:16.589 00:05:01.544 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 12:49:16.589 00:06:00.080 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 12:49:16.037 00:06:00.553 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 12:49:16.017 00:06:00.593 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 12:50:16.629 00:05:01.485 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 12:50:43.261 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2776 1 2025-08-20 12:50:16.596 00:06:00.073 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 12:50:16.588 00:06:00.030 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 12:55:23.339 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47494 1 40 1 2025-08-20 12:55:52.394 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:55:52.609 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 12:55:52.671 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 12:56:23.839 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36546 1 40 1 2025-08-20 12:52:16.648 00:06:00.004 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 12:58:14.307 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54296 10 6452 1 Summary: total flows: 172, total bytes: 291059, total packets: 1868, avg bps: 605, avg pps: 0, avg bpp: 155 Time window: 2025-08-20 11:54:16 - 2025-08-20 12:58:24 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0033s User: 0.0007s Wall: 0.0020s flows/second: 87170.2 Runtime: 0.0020s