Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 09:59:06.557 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 9 6412 1 2025-09-03 09:54:24.309 00:06:00.135 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 09:54:24.269 00:06:00.398 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:00:06.960 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37482 9 6412 1 2025-09-03 09:56:21.398 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2604 1 2025-09-03 10:01:17.735 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51026 1 40 1 2025-09-03 09:56:24.227 00:06:00.430 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 09:56:24.227 00:06:00.463 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:02:33.668 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:02:33.793 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:02:33.854 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:03:08.142 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39832 10 6452 1 2025-09-03 09:59:22.923 00:05:01.331 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 09:59:22.786 00:05:01.448 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:04:08.545 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54468 10 6452 1 2025-09-03 10:00:22.943 00:05:01.293 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:00:24.291 00:06:00.347 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 10:00:24.232 00:06:00.232 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 10:01:41.405 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2688 1 2025-09-03 10:06:09.385 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44108 10 6452 1 2025-09-03 10:01:24.313 00:06:00.132 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 10:01:24.273 00:06:00.398 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:07:09.752 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33954 9 6412 1 2025-09-03 10:07:33.950 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:07:33.762 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:07:33.891 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:08:10.162 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36890 9 6412 1 2025-09-03 10:03:24.233 00:06:00.427 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 10:03:24.233 00:06:00.458 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:05:22.786 00:05:01.448 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:05:22.925 00:05:01.329 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:10:21.263 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50034 1 40 1 2025-09-03 10:06:22.946 00:05:01.291 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:07:01.413 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 2872 1 2025-09-03 10:11:11.302 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38410 10 6452 1 2025-09-03 10:12:11.708 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46080 9 6412 1 2025-09-03 10:07:24.235 00:06:00.238 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 10:07:24.293 00:06:00.349 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 10:12:33.948 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:12:33.750 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:12:33.889 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:13:22.500 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55842 1 40 1 2025-09-03 10:08:24.316 00:06:00.140 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 10:08:24.276 00:06:00.396 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:14:12.539 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:54606 9 6412 1 2025-09-03 10:11:22.925 00:05:01.332 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:11:22.788 00:05:01.451 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:10:24.235 00:06:00.430 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 10:10:24.235 00:06:00.457 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:16:13.368 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37844 10 6452 1 2025-09-03 10:12:22.947 00:05:01.291 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:12:21.422 00:05:10.055 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 3024 1 2025-09-03 10:17:33.952 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:17:34.079 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:17:34.014 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:18:14.205 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44882 10 6452 1 2025-09-03 10:14:24.236 00:06:00.238 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 10:14:24.295 00:06:00.349 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 10:20:14.976 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34576 9 6412 1 2025-09-03 10:15:24.316 00:06:00.138 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 10:15:24.276 00:06:00.396 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:17:22.787 00:05:01.450 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:17:22.926 00:05:01.331 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:17:41.435 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-03 10:17:24.238 00:06:00.456 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:18:22.950 00:05:01.289 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:22:26.168 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 1 40 1 2025-09-03 10:17:24.238 00:06:00.429 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 10:22:34.128 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:22:34.259 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:22:34.318 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:23:16.201 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36412 9 6412 1 2025-09-03 10:25:16.965 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44462 9 6412 1 2025-09-03 10:21:24.238 00:06:00.243 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 10:21:24.300 00:06:00.346 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 10:23:01.444 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2720 1 2025-09-03 10:23:22.928 00:05:01.330 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:22:24.317 00:06:00.144 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 10:22:24.277 00:06:00.396 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:23:22.789 00:05:01.449 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:27:28.165 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 1 40 1 2025-09-03 10:27:34.328 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:27:33.982 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:27:34.269 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:28:18.207 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37296 9 6412 1 2025-09-03 10:24:22.948 00:05:01.290 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:24:24.238 00:06:00.430 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 10:24:24.238 00:06:00.456 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:29:18.605 00:00:10.712 TCP 1.101.0.1:3000 -> 23.104.0.1:38846 9 6412 1 2025-09-03 10:30:29.679 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40622 1 40 1 2025-09-03 10:32:30.495 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34408 1 40 1 2025-09-03 10:28:21.450 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2544 1 2025-09-03 10:32:34.378 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:32:34.258 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:32:34.319 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:29:22.929 00:05:01.331 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:28:24.299 00:06:00.350 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 10:29:22.790 00:05:01.450 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:28:24.239 00:06:00.244 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 10:33:30.851 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60910 1 40 1 2025-09-03 10:30:22.950 00:05:01.291 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:29:24.319 00:06:00.144 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 10:29:24.279 00:06:00.410 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:34:31.218 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48966 1 40 1 2025-09-03 10:35:21.261 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57332 10 6452 1 2025-09-03 10:31:24.239 00:06:00.430 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 10:31:24.239 00:06:00.470 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:37:34.556 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:37:32.312 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37286 1 40 1 2025-09-03 10:37:34.414 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:37:34.495 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:33:41.457 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-03 10:38:22.353 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45136 10 6452 1 2025-09-03 10:35:22.930 00:05:01.331 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:35:22.792 00:05:01.449 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:39:22.762 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58120 10 6452 1 2025-09-03 10:35:24.300 00:06:00.349 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 10:35:24.241 00:06:00.243 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 10:36:22.951 00:05:01.290 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:40:33.531 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58040 1 40 1 2025-09-03 10:36:24.320 00:06:00.144 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 10:36:24.280 00:06:00.426 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:42:34.302 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 1 40 1 2025-09-03 10:42:34.252 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:42:34.626 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:42:34.686 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:39:01.461 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 44 3428 1 2025-09-03 10:38:24.241 00:06:00.430 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 10:38:24.241 00:06:00.486 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:43:34.703 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48810 1 40 1 2025-09-03 10:41:22.796 00:05:01.448 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:41:22.935 00:05:01.329 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:45:35.496 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45758 1 40 1 2025-09-03 10:42:22.955 00:05:01.289 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:46:25.541 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36936 10 6452 1 2025-09-03 10:42:24.307 00:06:00.345 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 10:42:24.241 00:06:00.254 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 10:47:34.825 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:47:34.528 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:47:25.904 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:48096 9 6412 1 2025-09-03 10:47:34.765 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:43:24.322 00:06:00.154 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 10:43:24.282 00:06:00.427 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:44:21.467 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2296 1 2025-09-03 10:49:37.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36954 1 40 1 2025-09-03 10:45:24.243 00:06:00.430 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 10:45:24.243 00:06:00.486 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:50:27.162 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 9 6412 1 2025-09-03 10:47:22.937 00:05:01.329 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:47:22.798 00:05:01.446 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:51:27.521 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56652 10 6452 1 2025-09-03 10:48:22.957 00:05:01.299 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:52:35.188 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:52:35.146 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:52:35.128 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:52:27.924 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59868 10 6452 1 2025-09-03 10:49:41.471 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2516 1 2025-09-03 10:49:24.244 00:06:00.253 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 10:49:24.305 00:06:00.350 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 10:54:39.027 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33680 1 40 1 2025-09-03 10:50:24.326 00:06:00.153 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 10:50:24.286 00:06:00.425 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 10:56:39.803 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43326 1 40 1 2025-09-03 10:53:22.938 00:05:01.328 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 10:53:22.800 00:05:01.447 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 10:52:24.246 00:06:00.429 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 10:52:24.245 00:06:00.486 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 10:57:34.977 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 10:57:34.694 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:57:34.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 10:57:40.210 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47576 1 40 1 2025-09-03 10:54:22.958 00:05:01.288 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 10:58:30.255 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:53910 11 10327 1 Summary: total flows: 173, total bytes: 277431, total packets: 1876, avg bps: 569, avg pps: 0, avg bpp: 147 Time window: 2025-09-03 09:54:24 - 2025-09-03 10:59:24 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0026s User: 0.0026s Wall: 0.0023s flows/second: 74284.9 Runtime: 0.0023s