Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 15:59:49.784 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43352 1 40 1 2025-09-03 16:01:40.244 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54018 10 6452 1 2025-09-03 15:57:24.419 00:06:00.435 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 15:57:24.359 00:06:00.265 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:02:40.862 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:02:40.778 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:02:40.801 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:02:40.645 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43626 10 6452 1 2025-09-03 15:58:41.856 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2296 1 2025-09-03 15:59:23.088 00:05:01.290 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 15:58:24.437 00:06:00.165 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 15:58:24.397 00:06:00.460 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 15:59:22.900 00:05:01.460 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:03:41.046 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:38432 12 10367 1 2025-09-03 16:00:23.109 00:05:01.249 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:04:41.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43062 10 6452 1 2025-09-03 16:00:24.357 00:06:00.516 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 16:00:24.357 00:06:00.521 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 16:05:52.293 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56724 1 40 1 2025-09-03 16:06:42.339 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 9 6412 1 2025-09-03 16:07:41.177 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:07:41.398 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:07:41.459 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:07:42.703 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36110 10 6452 1 2025-09-03 16:04:01.859 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2516 1 2025-09-03 16:08:43.127 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59100 9 6412 1 2025-09-03 16:05:22.899 00:05:01.459 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:04:24.358 00:06:00.269 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:04:24.418 00:06:00.436 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 16:05:23.089 00:05:01.290 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:05:24.438 00:06:00.169 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 16:05:24.398 00:06:00.464 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 16:06:23.110 00:05:01.249 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:10:43.955 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:45488 10 6452 1 2025-09-03 16:07:24.358 00:06:00.516 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 16:07:24.358 00:06:00.524 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 16:12:41.138 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:12:41.200 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:12:41.261 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:12:44.746 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44228 9 6412 1 2025-09-03 16:09:21.863 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2624 1 2025-09-03 16:14:45.546 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 9 6412 1 2025-09-03 16:11:23.091 00:05:01.296 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:11:22.903 00:05:01.464 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:15:56.289 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40536 1 40 1 2025-09-03 16:11:24.419 00:06:00.436 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 16:11:24.359 00:06:00.270 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:12:23.111 00:05:01.256 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:16:56.653 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58714 1 40 1 2025-09-03 16:12:24.447 00:06:00.164 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 16:12:24.407 00:06:00.458 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 16:17:41.332 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:17:41.290 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:17:41.350 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:17:57.059 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47088 1 40 1 2025-09-03 16:14:41.867 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2688 1 2025-09-03 16:18:47.125 00:00:10.741 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 9 6412 1 2025-09-03 16:14:24.367 00:06:00.511 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 16:14:24.367 00:06:00.518 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 16:19:47.908 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:34960 11 6516 1 2025-09-03 16:20:58.747 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57692 1 40 1 2025-09-03 16:17:22.906 00:05:01.463 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:17:23.092 00:05:01.297 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:21:59.158 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54964 1 40 1 2025-09-03 16:18:23.112 00:05:01.257 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:22:41.264 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:22:41.513 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:22:41.575 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:22:59.562 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34314 1 40 1 2025-09-03 16:18:24.428 00:06:00.429 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 16:18:24.367 00:06:00.263 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:23:59.967 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49856 1 40 1 2025-09-03 16:20:01.875 00:05:10.907 OSPF 23.0.4.1:0 -> 224.0.0.5:0 46 3520 1 2025-09-03 16:19:24.447 00:06:00.164 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 16:19:24.407 00:06:00.464 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 16:24:50.010 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60180 9 6412 1 2025-09-03 16:25:50.375 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60942 10 6452 1 2025-09-03 16:21:24.370 00:06:00.508 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 16:21:24.370 00:06:00.522 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 16:23:23.092 00:05:01.297 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:23:22.909 00:05:01.460 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:27:41.551 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:27:41.575 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:27:41.491 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:24:23.115 00:05:01.255 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:25:21.883 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2376 1 2025-09-03 16:29:52.005 00:00:10.858 TCP 1.101.0.1:3000 -> 23.104.0.1:52054 9 6412 1 2025-09-03 16:25:24.370 00:06:00.263 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:25:24.430 00:06:00.428 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 16:31:03.264 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59192 1 40 1 2025-09-03 16:26:24.449 00:06:00.165 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 16:26:24.409 00:06:00.465 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 16:31:53.313 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38460 10 6452 1 2025-09-03 16:32:41.878 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:32:41.514 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:32:41.819 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:29:22.913 00:05:01.459 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:28:24.369 00:06:00.509 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 16:28:24.369 00:06:00.526 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 16:29:23.095 00:05:01.297 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:34:04.503 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51728 1 40 1 2025-09-03 16:30:23.115 00:05:01.258 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:30:41.890 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2516 1 2025-09-03 16:34:54.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 9 6412 1 2025-09-03 16:37:05.704 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47154 1 40 1 2025-09-03 16:32:24.432 00:06:00.427 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 16:32:24.371 00:06:00.266 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:37:41.729 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:37:41.553 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:37:41.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:37:55.740 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52862 9 6412 1 2025-09-03 16:33:24.452 00:06:00.165 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 16:33:24.412 00:06:00.463 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 16:38:56.127 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 9 6412 1 2025-09-03 16:35:23.095 00:05:01.298 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:35:22.915 00:05:01.459 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:39:56.541 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43858 9 6412 1 2025-09-03 16:36:01.897 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2604 1 2025-09-03 16:35:24.372 00:06:00.507 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 16:35:24.372 00:06:00.523 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 16:36:23.118 00:05:01.255 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:40:56.906 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-09-03 16:42:41.869 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:42:41.778 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:42:41.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:43:08.362 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57616 1 40 1 2025-09-03 16:43:58.414 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50486 9 6412 1 2025-09-03 16:39:24.435 00:06:00.426 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 16:39:24.375 00:06:00.264 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:44:58.814 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47996 9 6412 1 2025-09-03 16:41:22.920 00:05:01.456 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:41:23.100 00:05:01.295 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:40:24.453 00:06:00.166 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 16:40:24.413 00:06:00.463 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 16:41:21.907 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2544 1 2025-09-03 16:45:59.237 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50494 9 6412 1 2025-09-03 16:42:23.120 00:05:01.255 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:46:59.646 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52342 9 6412 1 2025-09-03 16:42:24.375 00:06:00.507 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 16:42:24.375 00:06:00.522 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 16:47:41.819 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:47:41.955 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:47:41.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:48:00.052 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:60236 11 10327 1 2025-09-03 16:50:00.935 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 9 6412 1 2025-09-03 16:46:41.916 00:05:10.014 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2864 1 2025-09-03 16:47:22.921 00:05:01.455 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:46:24.375 00:06:00.289 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:47:23.102 00:05:01.294 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:46:24.435 00:06:00.429 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 16:52:01.753 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-09-03 16:47:24.456 00:06:00.187 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 16:47:24.415 00:06:00.465 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 16:48:23.122 00:05:01.255 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 16:52:42.002 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:52:41.988 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:52:41.942 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:54:02.554 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6452 1 2025-09-03 16:49:24.375 00:06:00.509 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 16:49:24.375 00:06:00.525 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 16:55:02.913 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36410 11 6516 1 2025-09-03 16:56:03.331 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60104 10 6452 1 2025-09-03 16:52:01.929 00:05:10.058 OSPF 23.0.4.1:0 -> 224.0.0.5:0 44 3220 1 2025-09-03 16:57:03.734 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 9 6412 1 2025-09-03 16:53:22.922 00:05:01.455 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 16:53:23.104 00:05:01.294 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 16:57:42.128 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:57:42.169 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:57:42.230 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:58:04.142 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50864 9 6412 1 2025-09-03 16:53:24.437 00:06:00.428 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 16:53:24.376 00:06:00.289 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 16:54:23.123 00:05:01.256 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 Summary: total flows: 173, total bytes: 324664, total packets: 1914, avg bps: 698, avg pps: 0, avg bpp: 169 Time window: 2025-09-03 15:57:24 - 2025-09-03 16:59:24 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 79799.3 Runtime: 0.0022s