Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 18:54:16.712 00:06:00.084 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 18:55:15.190 00:05:01.527 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 18:54:16.714 00:06:00.023 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 18:55:16.714 00:05:01.561 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 18:59:50.803 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34076 1 40 1 2025-08-20 18:56:16.755 00:05:01.500 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:00:40.846 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37422 9 6412 1 2025-08-20 19:00:59.707 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:00:59.859 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:00:59.918 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:56:16.761 00:06:00.015 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:01:51.604 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44206 1 40 1 2025-08-20 18:57:53.780 00:05:10.012 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2384 1 2025-08-20 19:02:41.640 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42854 9 6412 1 2025-08-20 19:03:42.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37542 9 6412 1 2025-08-20 19:04:52.816 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58122 1 40 1 2025-08-20 19:01:15.194 00:05:01.524 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:00:16.717 00:06:00.066 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 19:00:16.201 00:06:00.516 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 19:00:16.181 00:06:00.557 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 19:01:16.715 00:05:01.566 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:05:53.211 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53758 1 40 1 2025-08-20 19:05:59.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:06:00.081 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:06:00.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:01:16.718 00:06:00.079 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 19:02:16.756 00:05:01.505 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:01:16.715 00:06:00.023 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 19:06:53.623 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57408 1 40 1 2025-08-20 19:03:13.792 00:05:10.013 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2776 1 2025-08-20 19:03:16.763 00:06:00.014 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:08:44.080 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41202 9 6412 1 2025-08-20 19:09:44.483 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45074 9 6412 1 2025-08-20 19:10:44.856 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54154 9 6412 1 2025-08-20 19:11:00.401 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:11:00.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:11:00.461 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:07:15.193 00:05:01.523 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:07:16.715 00:05:01.566 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:11:45.229 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33722 10 6452 1 2025-08-20 19:07:16.181 00:06:00.556 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 19:07:16.718 00:06:00.067 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 19:07:16.203 00:06:00.515 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 19:08:16.758 00:05:01.505 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:08:33.807 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2912 1 2025-08-20 19:08:16.717 00:06:00.023 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 19:08:16.718 00:06:00.079 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 19:10:16.764 00:06:00.014 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:15:57.210 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56742 1 40 1 2025-08-20 19:16:00.205 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:16:00.145 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:16:00.226 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:16:47.252 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35270 10 6452 1 2025-08-20 19:13:15.196 00:05:01.523 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:13:16.717 00:05:01.565 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:13:52.392 00:05:01.423 OSPF 23.0.4.1:0 -> 224.0.0.5:0 43 2972 1 2025-08-20 19:17:58.019 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49108 1 40 1 2025-08-20 19:14:16.758 00:05:01.505 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:18:48.054 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43198 10 6452 1 2025-08-20 19:14:16.718 00:06:00.068 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 19:14:16.204 00:06:00.515 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 19:14:16.183 00:06:00.555 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 19:19:48.457 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58828 9 6412 1 2025-08-20 19:15:16.719 00:06:00.080 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 19:15:16.717 00:06:00.025 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 19:20:48.878 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48148 9 6412 1 2025-08-20 19:21:00.254 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:21:00.231 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:21:00.290 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:21:49.262 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48980 10 6452 1 2025-08-20 19:17:16.765 00:06:00.014 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:22:49.661 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36868 9 6412 1 2025-08-20 19:19:15.198 00:05:01.522 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:19:16.718 00:05:01.566 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:19:03.815 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2636 1 2025-08-20 19:23:50.074 00:00:10.477 TCP 1.101.0.1:3000 -> 23.104.0.1:36002 9 6412 1 2025-08-20 19:20:16.758 00:05:01.507 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:25:00.965 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43336 1 40 1 2025-08-20 19:26:00.267 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:26:00.218 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:26:00.279 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:21:16.720 00:06:00.067 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 19:21:16.205 00:06:00.516 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 19:21:16.186 00:06:00.556 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 19:27:01.739 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39852 1 40 1 2025-08-20 19:22:16.718 00:06:00.027 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 19:22:16.723 00:06:00.078 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 19:24:23.821 00:05:10.011 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2240 1 2025-08-20 19:28:52.163 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48088 9 6412 1 2025-08-20 19:24:16.766 00:06:00.015 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:25:15.199 00:05:01.522 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:25:16.721 00:05:01.566 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:29:52.567 00:00:10.914 TCP 1.101.0.1:3000 -> 23.104.0.1:42942 9 6412 1 2025-08-20 19:26:16.761 00:05:01.506 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:31:00.567 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:31:00.400 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:30:53.538 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 10 6452 1 2025-08-20 19:31:00.505 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:31:53.951 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 9 6412 1 2025-08-20 19:33:04.710 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 1 40 1 2025-08-20 19:28:16.206 00:06:00.516 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 19:28:16.721 00:06:00.067 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 19:28:16.185 00:06:00.556 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 19:29:43.834 00:05:09.573 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2772 1 2025-08-20 19:34:05.115 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40584 1 40 1 2025-08-20 19:29:16.725 00:06:00.077 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 19:29:16.720 00:06:00.026 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 19:34:55.154 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38276 10 6452 1 2025-08-20 19:31:16.721 00:05:01.566 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:31:15.199 00:05:01.522 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:36:00.755 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:36:00.723 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:36:00.689 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:32:16.762 00:05:01.506 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:31:16.769 00:06:00.013 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:36:55.968 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:60636 9 6412 1 2025-08-20 19:37:56.341 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 9 6412 1 2025-08-20 19:38:56.743 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60298 10 6452 1 2025-08-20 19:34:53.835 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2808 1 2025-08-20 19:40:07.523 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33230 1 40 1 2025-08-20 19:35:16.721 00:06:00.067 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 19:35:16.206 00:06:00.530 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 19:35:16.186 00:06:00.570 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 19:41:00.492 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:41:00.821 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:41:00.880 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:40:57.560 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55728 9 6412 1 2025-08-20 19:37:15.204 00:05:01.533 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:36:16.722 00:06:00.029 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 19:37:16.722 00:05:01.568 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:36:16.726 00:06:00.090 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 19:42:08.305 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42116 1 40 1 2025-08-20 19:38:16.762 00:05:01.507 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:38:16.769 00:06:00.032 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:40:13.839 00:05:10.013 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2728 1 2025-08-20 19:45:09.524 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58184 1 40 1 2025-08-20 19:46:00.603 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:46:01.010 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:46:01.068 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:45:59.563 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37276 9 6412 1 2025-08-20 19:46:59.931 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57658 9 6412 1 2025-08-20 19:42:16.191 00:06:00.567 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 19:42:16.210 00:06:00.527 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 19:43:15.206 00:05:01.531 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:42:16.736 00:06:00.057 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 19:43:16.736 00:05:01.554 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:48:00.339 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48056 10 6452 1 2025-08-20 19:43:16.737 00:06:00.020 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 19:43:16.731 00:06:00.087 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 19:44:16.781 00:05:01.490 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:45:33.853 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2956 1 2025-08-20 19:45:16.770 00:06:00.032 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:51:00.712 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:51:00.806 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:51:00.866 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:51:12.056 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38436 1 40 1 2025-08-20 19:52:02.126 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:51490 10 6452 1 2025-08-20 19:49:15.209 00:05:01.534 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-20 19:49:16.738 00:05:01.559 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-20 19:49:16.198 00:06:00.565 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-20 19:49:16.737 00:06:00.058 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-20 19:49:16.218 00:06:00.525 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-20 19:50:16.783 00:05:01.494 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-20 19:50:53.856 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2336 1 2025-08-20 19:55:03.331 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48922 10 6452 1 2025-08-20 19:50:16.742 00:06:00.015 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-20 19:50:16.736 00:06:00.087 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-20 19:56:01.213 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:56:00.852 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 19:56:00.913 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 19:52:16.775 00:06:00.028 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-20 19:58:04.499 00:00:10.678 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 10 6452 1 Summary: total flows: 172, total bytes: 291631, total packets: 1883, avg bps: 607, avg pps: 0, avg bpp: 154 Time window: 2025-08-20 18:54:16 - 2025-08-20 19:58:16 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0081s User: 0.0020s Wall: 0.0063s flows/second: 27428.3 Runtime: 0.0063s