Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-21 08:59:01.561 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44472 1 40 1 2025-08-21 08:55:15.455 00:05:01.514 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 08:54:17.028 00:06:00.068 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 08:55:16.966 00:05:01.568 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:00:01.962 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 1 40 1 2025-08-21 08:56:17.008 00:05:01.508 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:01:16.952 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 08:57:16.967 00:05:00.151 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:01:16.891 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:01:16.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 08:57:25.144 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2760 1 2025-08-21 09:02:02.806 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59674 1 40 1 2025-08-21 09:03:03.218 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60794 1 40 1 2025-08-21 08:59:16.970 00:05:00.037 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:03:53.261 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55412 9 6412 1 2025-08-21 09:00:16.985 00:05:00.066 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-21 09:04:53.674 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36430 10 6452 1 2025-08-21 09:01:15.458 00:05:01.513 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:01:16.970 00:05:01.569 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:00:16.511 00:06:00.460 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-21 09:00:16.490 00:06:00.500 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-21 09:06:04.456 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60312 1 40 1 2025-08-21 09:06:16.721 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:06:16.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:06:16.978 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:02:17.011 00:05:01.507 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:01:17.030 00:06:00.070 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 09:02:45.149 00:05:10.013 OSPF 23.0.4.1:0 -> 224.0.0.5:0 44 3080 1 2025-08-21 09:06:54.491 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32784 9 6412 1 2025-08-21 09:03:16.969 00:05:00.151 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:08:05.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43404 1 40 1 2025-08-21 09:08:55.298 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43742 9 6412 1 2025-08-21 09:05:16.970 00:05:00.038 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:06:16.988 00:05:00.064 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-21 09:11:16.958 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:07:15.457 00:05:01.514 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:11:16.938 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:11:16.897 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:07:16.970 00:05:01.569 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:07:16.513 00:06:00.459 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-21 09:07:16.493 00:06:00.499 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-21 09:08:05.162 00:05:10.012 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2748 1 2025-08-21 09:08:17.012 00:05:01.508 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:12:57.626 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53196 9 6412 1 2025-08-21 09:09:16.971 00:05:00.151 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:08:17.032 00:06:00.069 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 09:13:58.028 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6452 1 2025-08-21 09:14:58.439 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45662 10 6452 1 2025-08-21 09:11:16.971 00:05:00.039 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:12:16.989 00:05:00.066 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-21 09:16:17.221 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:16:09.167 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43790 1 40 1 2025-08-21 09:16:16.949 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:16:17.160 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:13:15.459 00:05:01.519 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:13:16.972 00:05:01.569 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:13:25.175 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2256 1 2025-08-21 09:14:17.012 00:05:01.509 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:19:00.023 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36896 10 6452 1 2025-08-21 09:14:16.518 00:06:00.457 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-21 09:15:16.973 00:05:00.149 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:14:16.497 00:06:00.497 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-21 09:20:00.383 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46416 9 6412 1 2025-08-21 09:15:17.033 00:06:00.069 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 09:21:00.787 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:40736 10 6452 1 2025-08-21 09:21:16.966 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:21:17.071 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:21:16.908 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:17:16.976 00:05:00.038 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:18:16.989 00:05:00.067 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-21 09:18:45.179 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2580 1 2025-08-21 09:19:15.459 00:05:01.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:19:16.975 00:05:01.573 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:24:01.970 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49680 9 6412 1 2025-08-21 09:20:17.016 00:05:01.512 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:21:16.977 00:05:00.147 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:26:17.219 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:26:17.278 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:21:16.522 00:06:00.454 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-21 09:21:16.501 00:06:00.495 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-21 09:26:17.337 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:27:03.459 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50092 9 6412 1 2025-08-21 09:22:17.036 00:06:00.066 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 09:23:16.975 00:05:00.040 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:28:03.860 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41172 9 6412 1 2025-08-21 09:24:05.186 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2996 1 2025-08-21 09:24:16.993 00:05:00.064 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-21 09:25:15.461 00:05:01.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:29:04.283 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38504 9 6412 1 2025-08-21 09:25:16.976 00:05:01.573 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:26:17.017 00:05:01.512 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:30:04.685 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47582 9 6412 1 2025-08-21 09:31:17.495 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:31:17.402 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:27:16.976 00:05:00.148 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:31:17.435 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:31:15.474 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52124 1 40 1 2025-08-21 09:32:05.512 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40066 9 6412 1 2025-08-21 09:28:16.502 00:06:00.494 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-21 09:29:16.977 00:05:00.040 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:33:05.917 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39938 9 6412 1 2025-08-21 09:28:16.525 00:06:00.452 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-21 09:29:23.680 00:05:01.516 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2924 1 2025-08-21 09:30:16.995 00:05:00.063 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-21 09:29:17.037 00:06:00.067 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 09:31:15.464 00:05:01.513 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:35:06.728 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40716 9 6412 1 2025-08-21 09:31:16.975 00:05:01.574 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:36:17.293 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:36:17.571 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:36:07.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45022 9 6412 1 2025-08-21 09:36:17.632 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:32:17.018 00:05:01.512 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:33:16.977 00:05:00.148 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:34:35.196 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 43 3100 1 2025-08-21 09:35:16.977 00:05:00.041 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:39:08.356 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45418 9 6412 1 2025-08-21 09:35:16.525 00:06:00.453 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-21 09:35:16.507 00:06:00.492 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-21 09:36:16.998 00:05:00.062 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-21 09:37:15.463 00:05:01.515 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:41:17.526 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:41:17.789 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:36:17.038 00:06:00.067 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 09:41:17.850 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:37:16.977 00:05:01.576 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:41:09.149 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44526 10 6452 1 2025-08-21 09:38:17.018 00:05:01.516 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:42:19.926 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60782 1 40 1 2025-08-21 09:39:16.977 00:05:00.149 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:43:09.963 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40310 9 6412 1 2025-08-21 09:39:55.206 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 32 2176 1 2025-08-21 09:44:10.382 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46984 10 6452 1 2025-08-21 09:41:16.978 00:05:00.044 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:45:10.746 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44762 9 6412 1 2025-08-21 09:42:16.506 00:05:00.495 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-21 09:42:16.998 00:05:00.063 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-21 09:46:17.835 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:46:17.672 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:46:17.775 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:46:11.164 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35978 9 6412 1 2025-08-21 09:43:15.464 00:05:01.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:43:16.978 00:05:01.575 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:42:16.526 00:06:00.454 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-21 09:43:17.040 00:06:00.067 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 09:48:11.966 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34808 10 6452 1 2025-08-21 09:44:17.019 00:05:01.514 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:45:16.979 00:05:00.148 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:49:12.377 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36494 9 6412 1 2025-08-21 09:45:15.213 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2320 1 2025-08-21 09:51:17.731 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:47:16.980 00:05:00.043 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:51:17.825 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:51:17.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:51:23.580 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44812 1 40 1 2025-08-21 09:48:16.507 00:05:00.497 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-21 09:48:17.002 00:06:00.061 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-21 09:49:15.468 00:05:01.515 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-21 09:49:16.981 00:05:01.574 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-21 09:49:16.527 00:06:00.455 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-21 09:50:17.023 00:05:01.516 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-21 09:54:14.441 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 10 6452 1 2025-08-21 09:50:35.220 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2984 1 2025-08-21 09:50:17.043 00:06:00.065 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-21 09:51:16.983 00:05:00.145 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-08-21 09:55:14.806 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52408 10 6452 1 2025-08-21 09:56:18.294 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:56:17.975 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 09:56:18.036 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 09:53:16.982 00:05:00.043 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-08-21 09:57:15.612 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34716 10 6452 1 2025-08-21 09:54:16.510 00:05:00.494 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-21 09:58:15.974 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52428 9 6412 1 Summary: total flows: 173, total bytes: 304290, total packets: 1896, avg bps: 624, avg pps: 0, avg bpp: 160 Time window: 2025-08-21 08:54:17 - 2025-08-21 09:59:17 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0036s User: 0.0012s Wall: 0.0024s flows/second: 72597.8 Runtime: 0.0024s