Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 07:59:06.574 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 9 6412 1 2025-08-28 07:54:20.455 00:06:00.036 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 07:55:20.409 00:05:01.240 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 07:55:19.483 00:05:00.927 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 07:54:20.408 00:06:00.067 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 07:59:38.016 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 07:59:37.955 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 07:59:37.641 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 07:56:20.449 00:05:01.180 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 07:57:19.913 00:05:00.498 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:02:07.792 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47426 10 6452 1 2025-08-28 07:58:29.271 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2296 1 2025-08-28 08:03:08.205 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52714 12 6556 1 2025-08-28 07:58:20.411 00:06:00.063 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-28 08:04:08.604 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45776 12 6556 1 2025-08-28 08:00:19.893 00:05:00.540 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 07:59:20.449 00:06:00.024 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-28 08:04:37.987 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:04:37.973 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:04:38.034 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:01:19.485 00:05:00.928 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:01:20.411 00:05:01.239 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:05:09.010 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39140 9 6412 1 2025-08-28 08:06:19.742 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 1 40 1 2025-08-28 08:01:20.412 00:06:00.065 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 08:01:20.455 00:06:00.038 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 08:02:20.450 00:05:01.180 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:07:09.780 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55652 10 6452 1 2025-08-28 08:03:19.914 00:05:00.499 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:03:49.277 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2660 1 2025-08-28 08:08:10.204 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:34368 9 6412 1 2025-08-28 08:09:38.019 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:09:37.988 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:09:37.957 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:05:20.413 00:06:00.061 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-28 08:10:21.324 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45266 1 40 1 2025-08-28 08:06:19.899 00:05:00.537 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 08:07:20.414 00:05:01.238 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:07:19.490 00:05:00.926 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:06:20.454 00:06:00.021 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-28 08:12:12.209 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60238 10 6452 1 2025-08-28 08:08:20.454 00:05:01.179 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:08:20.414 00:06:00.065 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 08:13:12.613 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39428 10 6452 1 2025-08-28 08:09:19.919 00:05:00.497 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:08:20.457 00:06:00.038 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 08:09:09.282 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 2996 1 2025-08-28 08:14:23.379 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45420 1 40 1 2025-08-28 08:14:38.183 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:14:38.250 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:14:38.310 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:15:13.419 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58672 9 6412 1 2025-08-28 08:12:19.899 00:05:00.539 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 08:16:24.186 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60396 1 40 1 2025-08-28 08:12:20.415 00:06:00.063 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-28 08:13:20.415 00:05:01.240 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:13:19.491 00:05:00.928 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:17:14.236 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48070 9 6412 1 2025-08-28 08:14:20.456 00:05:01.179 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:13:20.455 00:06:00.024 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-28 08:18:25.009 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33264 1 40 1 2025-08-28 08:14:29.290 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2520 1 2025-08-28 08:15:19.919 00:05:00.500 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:19:38.134 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:19:38.363 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:19:38.423 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:15:20.418 00:06:00.061 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 08:15:20.459 00:06:00.043 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 08:20:15.458 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50212 10 6452 1 2025-08-28 08:21:15.874 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:32908 9 6412 1 2025-08-28 08:18:19.899 00:05:00.546 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 08:22:16.299 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:46408 11 10325 1 2025-08-28 08:19:19.509 00:05:00.915 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:19:20.419 00:05:01.238 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:23:16.779 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59424 10 6452 1 2025-08-28 08:19:49.279 00:05:10.020 OSPF 23.0.4.1:0 -> 224.0.0.5:0 45 3308 1 2025-08-28 08:19:20.419 00:06:00.062 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-28 08:20:20.458 00:05:01.179 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:24:17.196 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38178 10 6452 1 2025-08-28 08:24:38.533 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:24:38.481 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:24:38.541 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:21:19.919 00:05:00.508 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:20:20.460 00:06:00.028 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-28 08:25:27.971 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49846 1 40 1 2025-08-28 08:26:28.338 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34962 1 40 1 2025-08-28 08:22:20.460 00:06:00.045 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 08:22:20.423 00:06:00.058 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 08:27:18.373 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50612 10 6452 1 2025-08-28 08:24:19.903 00:05:00.543 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 08:28:29.140 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41998 1 40 1 2025-08-28 08:25:20.425 00:05:01.234 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:25:19.512 00:05:00.914 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:25:09.293 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2376 1 2025-08-28 08:29:38.435 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:29:38.613 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:29:38.674 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:26:20.468 00:05:01.171 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:30:19.593 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60546 10 6452 1 2025-08-28 08:26:20.428 00:06:00.055 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-28 08:27:19.924 00:05:00.502 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:31:30.324 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37056 1 40 1 2025-08-28 08:27:20.462 00:06:00.024 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-28 08:32:20.360 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41922 10 6452 1 2025-08-28 08:33:20.764 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 9 6412 1 2025-08-28 08:29:20.425 00:06:00.057 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 08:30:19.904 00:05:00.543 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 08:29:20.463 00:06:00.044 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 08:34:21.128 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47400 10 6452 1 2025-08-28 08:34:38.587 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:34:38.527 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:34:38.741 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:30:29.303 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2580 1 2025-08-28 08:31:19.519 00:05:00.907 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:31:20.425 00:05:01.234 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:35:21.521 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44208 9 6412 1 2025-08-28 08:32:20.466 00:05:01.173 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:33:19.924 00:05:00.504 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:37:32.700 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44470 1 40 1 2025-08-28 08:33:20.427 00:06:00.057 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-28 08:34:20.463 00:06:00.024 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-28 08:39:38.675 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:39:38.758 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:39:38.817 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:35:49.307 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2336 1 2025-08-28 08:36:19.903 00:05:00.544 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 08:40:23.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53770 9 6412 1 2025-08-28 08:36:20.462 00:06:00.046 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 08:37:19.517 00:05:00.912 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:36:20.427 00:06:00.057 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 08:37:20.427 00:05:01.234 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:38:20.468 00:05:01.174 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:42:24.370 00:00:10.851 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 9 6412 1 2025-08-28 08:39:19.924 00:05:00.504 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:44:38.882 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:44:38.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:44:38.942 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:41:09.309 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2972 1 2025-08-28 08:40:20.427 00:06:00.058 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-28 08:42:19.904 00:05:00.545 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 08:41:20.463 00:06:00.026 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-28 08:43:19.519 00:05:00.911 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:43:20.429 00:05:01.233 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:47:37.678 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39586 1 40 1 2025-08-28 08:43:20.428 00:06:00.058 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 08:43:20.463 00:06:00.046 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 08:44:20.468 00:05:01.173 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:45:19.925 00:05:00.505 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:49:38.886 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:49:28.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54104 9 6412 1 2025-08-28 08:49:39.144 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:49:39.084 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:46:29.315 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 44 3180 1 2025-08-28 08:51:28.942 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 10 6452 1 2025-08-28 08:48:19.908 00:05:00.543 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-28 08:47:20.429 00:06:00.056 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-28 08:52:39.725 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36208 1 40 1 2025-08-28 08:48:20.465 00:06:00.027 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-28 08:49:20.430 00:05:01.240 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-28 08:49:19.525 00:05:00.907 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-28 08:53:29.759 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43754 9 6412 1 2025-08-28 08:50:20.470 00:05:01.179 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-28 08:54:39.056 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:54:39.130 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 08:54:39.191 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 08:50:20.430 00:06:00.058 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-28 08:51:19.928 00:05:00.504 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-28 08:50:20.465 00:06:00.047 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-28 08:55:30.570 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32870 10 6452 1 2025-08-28 08:51:49.324 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2608 1 2025-08-28 08:56:30.972 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45530 10 6452 1 2025-08-28 08:57:41.712 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51314 1 40 1 2025-08-28 08:54:19.910 00:05:00.545 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 296307, total packets: 1899, avg bps: 607, avg pps: 0, avg bpp: 156 Time window: 2025-08-28 07:54:20 - 2025-08-28 08:59:20 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0037s User: 0.0009s Wall: 0.0024s flows/second: 72322.8 Runtime: 0.0024s