Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 14:59:04.283 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38396 9 6412 1 2025-08-29 14:54:21.142 00:06:00.000 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-08-29 14:55:21.048 00:05:01.231 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 14:55:20.408 00:05:00.644 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:00:15.392 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:00:04.688 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52720 10 6452 1 2025-08-29 15:00:15.293 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:00:15.332 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 14:56:20.608 00:05:00.443 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 14:56:21.090 00:05:01.169 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 14:56:31.864 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2296 1 2025-08-29 15:02:05.487 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 10 6452 1 2025-08-29 14:57:21.050 00:06:00.115 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 15:03:05.892 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45528 9 6412 1 2025-08-29 15:04:06.257 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36858 10 6452 1 2025-08-29 15:00:20.590 00:05:00.503 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 14:59:21.052 00:06:00.113 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 15:05:15.273 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:05:15.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:05:06.660 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:56298 10 6452 1 2025-08-29 15:01:20.415 00:05:00.645 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:01:21.051 00:05:01.229 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:05:15.458 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:00:21.144 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 15:01:51.874 00:05:10.011 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2580 1 2025-08-29 15:06:07.025 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44722 9 6412 1 2025-08-29 15:01:21.143 00:06:00.002 TCP 23.158.0.1:40787 -> 23.155.0.1:179 9 601 1 2025-08-29 15:02:21.092 00:05:01.169 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:02:20.612 00:05:00.449 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:04:21.057 00:06:00.111 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 15:10:15.534 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:10:15.513 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:10:15.474 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:06:20.594 00:05:00.487 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:07:11.885 00:05:10.013 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2336 1 2025-08-29 15:07:20.413 00:05:00.649 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:06:21.061 00:06:00.105 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 15:11:19.335 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55566 1 40 1 2025-08-29 15:07:21.061 00:05:01.221 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:12:09.378 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45856 9 6412 1 2025-08-29 15:08:20.615 00:05:00.448 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:08:21.102 00:05:01.160 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:07:21.146 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 15:13:09.783 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-08-29 15:08:21.145 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-08-29 15:14:10.200 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41486 10 6452 1 2025-08-29 15:15:15.805 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:15:15.639 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:15:15.744 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:12:20.595 00:05:00.487 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:11:21.062 00:06:00.106 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 15:12:31.898 00:05:10.012 OSPF 23.0.4.1:0 -> 224.0.0.5:0 44 3320 1 2025-08-29 15:13:21.061 00:05:01.221 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:17:21.697 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51104 1 40 1 2025-08-29 15:13:20.415 00:05:00.647 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:14:21.103 00:05:01.160 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:13:21.063 00:06:00.106 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 15:14:20.616 00:05:00.447 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:14:21.147 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 15:19:22.517 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47084 1 40 1 2025-08-29 15:20:15.864 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:20:15.679 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:20:15.738 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:20:22.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60512 1 40 1 2025-08-29 15:15:21.149 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-08-29 15:21:23.339 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46210 1 40 1 2025-08-29 15:17:51.904 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2832 1 2025-08-29 15:18:20.596 00:05:00.489 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:19:20.416 00:05:00.649 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:18:21.062 00:06:00.106 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 15:19:21.062 00:05:01.221 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:20:20.617 00:05:00.452 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:20:21.103 00:05:01.160 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:25:15.830 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:25:15.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:25:15.941 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:20:21.062 00:06:00.107 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 15:25:24.935 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38712 1 40 1 2025-08-29 15:21:21.148 00:06:00.000 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 15:26:25.340 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 1 40 1 2025-08-29 15:22:21.149 00:06:00.001 TCP 23.158.0.1:40787 -> 23.155.0.1:179 9 601 1 2025-08-29 15:23:11.906 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2664 1 2025-08-29 15:27:25.737 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 1 40 1 2025-08-29 15:24:20.599 00:05:00.490 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:28:15.781 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:44876 9 6412 1 2025-08-29 15:25:20.417 00:05:00.651 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:25:21.068 00:05:01.222 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:29:26.573 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44708 1 40 1 2025-08-29 15:30:15.909 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:30:15.578 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:30:15.849 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:25:21.068 00:06:00.101 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 15:26:20.621 00:05:00.448 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:26:21.111 00:05:01.161 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:30:16.609 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37446 9 6412 1 2025-08-29 15:31:27.343 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45312 1 40 1 2025-08-29 15:27:21.068 00:06:00.103 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 15:32:27.748 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49536 1 40 1 2025-08-29 15:28:31.913 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2320 1 2025-08-29 15:28:21.150 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 15:33:28.177 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34964 1 40 1 2025-08-29 15:30:20.603 00:05:00.487 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:29:21.150 00:06:00.002 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-08-29 15:35:15.847 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:35:15.954 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:35:16.014 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:31:21.069 00:05:01.224 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:31:20.419 00:05:00.651 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:35:28.973 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36836 1 40 1 2025-08-29 15:32:20.624 00:05:00.447 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:32:21.110 00:05:01.164 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:36:19.015 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46174 10 6452 1 2025-08-29 15:32:21.069 00:06:00.101 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 15:37:29.865 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47210 1 40 1 2025-08-29 15:33:51.919 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2596 1 2025-08-29 15:38:30.296 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58978 1 40 1 2025-08-29 15:34:21.069 00:06:00.103 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 15:40:16.265 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:40:16.134 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:40:16.205 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:36:20.607 00:05:00.485 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:35:21.150 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 15:40:20.702 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6452 1 2025-08-29 15:36:21.165 00:05:59.989 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-08-29 15:37:20.420 00:05:00.652 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:37:21.071 00:05:01.225 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:41:31.497 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 1 40 1 2025-08-29 15:38:20.626 00:05:00.445 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:38:21.112 00:05:01.164 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:42:21.537 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42402 9 6412 1 2025-08-29 15:39:11.925 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2664 1 2025-08-29 15:43:21.900 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43872 10 6452 1 2025-08-29 15:39:21.073 00:06:00.100 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 15:44:22.322 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55716 9 6412 1 2025-08-29 15:45:16.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:45:16.082 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:45:16.297 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:45:22.727 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 2025-08-29 15:41:21.071 00:06:00.103 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 15:42:20.608 00:05:00.485 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:43:20.421 00:05:00.652 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:43:21.072 00:05:01.224 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:42:21.152 00:06:00.001 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 15:44:20.631 00:05:00.443 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:43:21.154 00:06:00.003 TCP 23.158.0.1:40787 -> 23.155.0.1:179 9 601 1 2025-08-29 15:44:21.113 00:05:01.164 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:44:31.930 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2992 1 2025-08-29 15:49:34.720 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37254 1 40 1 2025-08-29 15:50:16.223 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:50:16.281 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:50:16.341 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:50:24.769 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43238 10 6452 1 2025-08-29 15:46:21.072 00:06:00.103 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-29 15:48:20.611 00:05:00.483 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:52:35.943 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37670 1 40 1 2025-08-29 15:49:20.425 00:05:00.650 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-29 15:48:21.072 00:06:00.105 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-29 15:49:21.073 00:05:01.227 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-29 15:53:36.355 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60440 1 40 1 2025-08-29 15:49:51.935 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 43 3096 1 2025-08-29 15:50:21.114 00:05:01.166 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-29 15:49:21.154 00:06:00.002 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-29 15:50:20.633 00:05:00.443 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-29 15:55:16.604 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 15:55:16.059 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:55:16.545 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 15:50:21.157 00:06:00.002 TCP 23.158.0.1:40787 -> 23.155.0.1:179 7 497 1 2025-08-29 15:56:27.163 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49392 10 6452 1 2025-08-29 15:54:20.613 00:05:00.485 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-29 15:53:21.074 00:06:00.103 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 Summary: total flows: 170, total bytes: 228546, total packets: 1698, avg bps: 468, avg pps: 0, avg bpp: 134 Time window: 2025-08-29 14:54:21 - 2025-08-29 15:59:21 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0028s User: 0.0028s Wall: 0.0035s flows/second: 48891.4 Runtime: 0.0035s