Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 06:58:46.152 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59550 10 6452 1 2025-08-29 06:54:20.421 00:06:00.434 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 06:55:20.846 00:05:01.282 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 06:59:56.836 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46600 1 40 1 2025-08-29 07:00:05.744 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:00:05.547 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:00:05.684 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 06:56:20.888 00:05:01.221 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:00:46.872 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52106 10 6452 1 2025-08-29 06:57:31.256 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2660 1 2025-08-29 07:01:47.310 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50324 9 6412 1 2025-08-29 06:57:20.847 00:06:00.087 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 06:58:20.911 00:06:00.004 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-29 07:03:48.133 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:45832 10 6452 1 2025-08-29 06:59:20.402 00:06:00.473 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-29 07:04:59.276 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60420 1 40 1 2025-08-29 07:05:05.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:05:05.756 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:05:05.761 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:00:20.935 00:06:00.002 TCP 23.158.0.1:40787 -> 23.155.0.1:179 9 601 1 2025-08-29 07:00:20.236 00:06:00.621 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-29 07:00:20.857 00:06:00.101 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 07:01:20.856 00:05:01.274 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:05:49.314 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57996 10 6452 1 2025-08-29 07:02:20.896 00:05:01.213 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:01:20.423 00:06:00.433 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 07:02:51.262 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2744 1 2025-08-29 07:06:49.714 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46932 9 6412 1 2025-08-29 07:08:50.547 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55652 10 6452 1 2025-08-29 07:04:20.855 00:06:00.082 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 07:10:05.965 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:09:50.954 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:34482 10 6452 1 2025-08-29 07:10:05.943 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:10:05.906 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:05:20.915 00:06:00.002 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 757 1 2025-08-29 07:10:51.334 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32916 10 6452 1 2025-08-29 07:06:20.405 00:06:00.482 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-29 07:07:20.856 00:05:01.275 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:07:20.236 00:06:00.621 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-29 07:07:20.856 00:06:00.102 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 07:08:20.897 00:05:01.215 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:08:11.270 00:05:10.051 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2992 1 2025-08-29 07:07:20.938 00:06:00.000 TCP 23.158.0.1:40787 -> 23.155.0.1:179 9 601 1 2025-08-29 07:12:52.145 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57688 10 6452 1 2025-08-29 07:08:20.426 00:06:00.431 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 07:14:02.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 1 40 1 2025-08-29 07:15:06.176 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:15:06.025 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:15:06.115 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:15:53.378 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34576 9 6412 1 2025-08-29 07:11:20.857 00:06:00.099 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 07:17:04.165 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59822 1 40 1 2025-08-29 07:12:20.935 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 07:13:20.858 00:05:01.275 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:13:31.277 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 2960 1 2025-08-29 07:13:20.407 00:06:00.471 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-29 07:14:20.897 00:05:01.214 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:14:20.938 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 9 601 1 2025-08-29 07:14:20.236 00:06:00.622 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-29 07:14:20.857 00:06:00.102 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 07:20:05.932 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:19:55.014 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 9 6412 1 2025-08-29 07:20:06.087 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:20:06.148 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:15:20.427 00:06:00.431 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 07:20:55.377 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56630 10 6452 1 2025-08-29 07:22:06.125 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43792 1 40 1 2025-08-29 07:18:51.282 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2440 1 2025-08-29 07:22:56.162 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40474 10 6452 1 2025-08-29 07:18:20.860 00:06:00.097 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 07:19:20.858 00:05:01.274 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:19:20.936 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 07:20:20.899 00:05:01.213 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:25:05.851 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:25:06.375 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:25:06.436 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:20:20.413 00:06:00.467 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-29 07:21:20.238 00:06:00.622 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-29 07:21:20.858 00:06:00.102 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 07:21:20.940 00:06:00.042 TCP 23.158.0.1:40787 -> 23.155.0.1:179 8 549 1 2025-08-29 07:26:57.749 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:34026 9 6412 1 2025-08-29 07:22:20.432 00:06:00.428 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 07:27:58.128 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58316 9 6412 1 2025-08-29 07:24:11.286 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2580 1 2025-08-29 07:28:58.529 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41806 9 6412 1 2025-08-29 07:25:20.860 00:05:01.273 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:30:05.943 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:30:06.354 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:30:06.414 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:26:20.899 00:05:01.214 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:25:20.861 00:06:00.099 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 07:30:59.300 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56858 9 6412 1 2025-08-29 07:26:20.936 00:06:00.002 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 07:31:59.703 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53260 9 6412 1 2025-08-29 07:27:20.412 00:06:00.470 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-29 07:33:10.508 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39568 1 40 1 2025-08-29 07:28:20.940 00:06:00.002 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-29 07:28:20.243 00:06:00.620 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-29 07:28:20.862 00:06:00.101 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 07:29:31.295 00:05:10.015 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2400 1 2025-08-29 07:29:20.435 00:06:00.429 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 07:35:06.411 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:35:06.518 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:35:06.577 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:35:11.335 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55688 1 40 1 2025-08-29 07:31:20.862 00:05:01.272 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:36:01.369 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32970 10 6452 1 2025-08-29 07:32:20.903 00:05:01.211 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:37:12.133 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45488 1 40 1 2025-08-29 07:32:20.863 00:06:00.097 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 07:38:02.171 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47840 10 6452 1 2025-08-29 07:33:20.944 00:05:59.995 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 07:34:51.310 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3052 1 2025-08-29 07:34:20.433 00:06:00.458 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-29 07:40:06.562 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:40:06.498 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:40:06.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:40:02.983 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42368 9 6412 1 2025-08-29 07:35:20.942 00:06:00.008 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-29 07:35:20.249 00:06:00.621 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-29 07:35:20.862 00:06:00.101 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 07:37:20.863 00:05:01.274 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:36:20.453 00:06:00.417 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 07:38:20.903 00:05:01.213 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:43:14.820 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46724 1 40 1 2025-08-29 07:44:04.865 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52914 10 6452 1 2025-08-29 07:40:11.318 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3100 1 2025-08-29 07:39:20.870 00:06:00.090 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 07:45:06.667 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:45:06.507 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:45:06.566 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:40:20.940 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 07:46:16.079 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 1 40 1 2025-08-29 07:41:20.433 00:06:00.460 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-29 07:47:16.571 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34740 1 40 1 2025-08-29 07:42:20.943 00:06:00.012 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 757 1 2025-08-29 07:42:20.247 00:06:00.626 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-29 07:42:20.870 00:06:00.105 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 07:43:20.870 00:05:01.270 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:43:20.454 00:06:00.422 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 07:44:20.912 00:05:01.209 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:49:17.861 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59020 1 40 1 2025-08-29 07:45:31.323 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2728 1 2025-08-29 07:50:06.855 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:50:06.674 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:50:06.795 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:50:07.895 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50982 9 6412 1 2025-08-29 07:51:18.665 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39908 1 40 1 2025-08-29 07:46:20.873 00:06:00.094 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 07:47:20.945 00:06:00.004 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 07:52:19.153 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57498 1 40 1 2025-08-29 07:49:20.877 00:05:01.265 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 07:48:20.435 00:06:00.464 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-29 07:49:20.955 00:05:00.046 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-08-29 07:49:20.248 00:06:00.631 TCP 23.155.0.1:42089 -> 23.154.0.1:179 14 861 1 2025-08-29 07:49:20.876 00:06:00.101 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 07:54:09.597 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39866 10 6452 1 2025-08-29 07:50:20.916 00:05:01.205 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 07:50:51.331 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2320 1 2025-08-29 07:55:06.607 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 07:55:06.801 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:55:06.547 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 07:50:20.456 00:06:00.423 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-29 07:56:10.378 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39916 10 6452 1 2025-08-29 07:57:10.787 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:56738 9 6412 1 2025-08-29 07:53:20.877 00:06:00.091 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 07:58:21.541 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58790 1 40 1 Summary: total flows: 167, total bytes: 274463, total packets: 1784, avg bps: 562, avg pps: 0, avg bpp: 153 Time window: 2025-08-29 06:54:20 - 2025-08-29 07:59:20 Total flows processed: 167, passed: 167, Blocks skipped: 0, Bytes read: 17432 Sys: 0.0018s User: 0.0036s Wall: 0.0025s flows/second: 67774.4 Runtime: 0.0025s