Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 18:59:05.524 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49444 1 40 1 2025-09-03 18:59:55.560 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56656 10 6452 1 2025-09-03 18:55:24.412 00:06:00.520 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 18:55:24.412 00:06:00.537 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:00:55.923 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 11 6516 1 2025-09-03 19:02:06.664 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36074 1 40 1 2025-09-03 19:02:44.598 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:02:44.454 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:02:44.539 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:02:56.712 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 12 10365 1 2025-09-03 18:59:23.180 00:05:01.268 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 18:59:22.961 00:05:01.467 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 18:59:42.133 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2864 1 2025-09-03 19:04:07.482 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52108 1 40 1 2025-09-03 18:59:24.427 00:06:00.320 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 19:00:23.189 00:05:01.239 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 18:59:24.487 00:06:00.425 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 19:00:24.508 00:06:00.220 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 19:00:24.468 00:06:00.462 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 19:02:24.427 00:06:00.505 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 19:02:24.427 00:06:00.522 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:07:44.899 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:07:44.876 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:07:44.938 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:07:58.696 00:00:11.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 9 6412 1 2025-09-03 19:09:10.097 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 1 40 1 2025-09-03 19:05:02.140 00:05:10.053 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2688 1 2025-09-03 19:05:23.170 00:05:01.279 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:05:22.962 00:05:01.467 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:10:10.464 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47282 1 40 1 2025-09-03 19:06:23.191 00:05:01.239 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 19:11:00.499 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55370 10 6452 1 2025-09-03 19:06:24.429 00:06:00.319 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 19:06:24.489 00:06:00.424 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 19:07:24.509 00:06:00.220 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 19:07:24.469 00:06:00.463 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 19:12:44.755 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:12:44.741 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:12:44.800 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:13:01.259 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46676 10 6452 1 2025-09-03 19:09:24.429 00:06:00.504 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 19:09:24.429 00:06:00.523 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:10:22.151 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 3032 1 2025-09-03 19:15:02.079 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46604 10 6452 1 2025-09-03 19:11:22.963 00:05:01.468 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:11:23.170 00:05:01.280 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:16:12.816 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56210 1 40 1 2025-09-03 19:12:23.191 00:05:01.239 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 19:17:02.857 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:52458 10 6452 1 2025-09-03 19:17:44.889 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:17:44.972 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:17:45.034 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:18:03.244 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50288 10 6452 1 2025-09-03 19:13:24.429 00:06:00.321 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 19:13:24.490 00:06:00.425 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 19:19:14.459 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59042 1 40 1 2025-09-03 19:14:24.509 00:06:00.221 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 19:14:24.469 00:06:00.464 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 19:15:42.159 00:05:10.050 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2828 1 2025-09-03 19:20:14.869 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55670 1 40 1 2025-09-03 19:21:04.907 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51452 9 6412 1 2025-09-03 19:17:22.964 00:05:01.468 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:16:24.431 00:06:00.504 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 19:16:24.431 00:06:00.523 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:17:23.171 00:05:01.280 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:18:23.193 00:05:01.240 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 19:22:44.987 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:22:44.963 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:22:45.024 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:23:05.727 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33422 10 6452 1 2025-09-03 19:24:06.141 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 10 6452 1 2025-09-03 19:21:02.161 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-03 19:20:24.492 00:06:00.423 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 19:20:24.432 00:06:00.327 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 19:26:06.952 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:55970 9 6412 1 2025-09-03 19:21:24.513 00:06:00.227 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 19:21:24.473 00:06:00.463 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 19:27:07.381 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58792 9 6412 1 2025-09-03 19:23:23.176 00:05:01.276 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:23:22.967 00:05:01.466 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:27:45.025 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:27:44.964 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:27:45.011 00:00:00.020 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:28:07.788 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:55372 10 6452 1 2025-09-03 19:23:24.432 00:06:00.504 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 19:23:24.432 00:06:00.523 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:24:23.197 00:05:01.238 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 19:29:08.166 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34926 10 6452 1 2025-09-03 19:30:18.927 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 1 40 1 2025-09-03 19:26:22.173 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2656 1 2025-09-03 19:32:09.336 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58104 9 6412 1 2025-09-03 19:27:24.493 00:06:00.424 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 19:27:24.432 00:06:00.329 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 19:32:45.249 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:32:45.217 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:32:45.189 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:33:09.737 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38438 9 6412 1 2025-09-03 19:29:23.177 00:05:01.278 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:28:24.524 00:06:00.218 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 19:28:24.474 00:06:00.464 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 19:29:22.969 00:05:01.467 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:34:20.514 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45160 1 40 1 2025-09-03 19:30:23.199 00:05:01.236 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 19:35:10.556 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52108 10 6452 1 2025-09-03 19:30:24.435 00:06:00.504 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 19:30:24.435 00:06:00.521 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:31:42.175 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2544 1 2025-09-03 19:36:10.971 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 9 6412 1 2025-09-03 19:37:45.380 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:37:45.416 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:37:45.477 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:38:11.746 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49832 9 6412 1 2025-09-03 19:39:22.496 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45596 1 40 1 2025-09-03 19:35:22.968 00:05:01.468 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:34:24.434 00:06:00.329 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 19:35:23.180 00:05:01.276 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:34:24.495 00:06:00.425 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 19:40:12.536 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35568 10 6452 1 2025-09-03 19:35:24.515 00:06:00.229 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 19:35:24.475 00:06:00.461 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 19:36:23.200 00:05:01.236 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 19:37:02.181 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2688 1 2025-09-03 19:41:12.938 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44400 9 6412 1 2025-09-03 19:42:23.658 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38336 1 40 1 2025-09-03 19:37:24.435 00:06:00.506 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 19:37:24.435 00:06:00.522 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:42:45.633 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:42:45.150 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:42:45.572 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:43:13.693 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35160 10 6452 1 2025-09-03 19:41:23.181 00:05:01.276 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:41:22.970 00:05:01.468 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:41:24.436 00:06:00.338 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 19:46:25.303 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51426 1 40 1 2025-09-03 19:42:23.202 00:05:01.240 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 19:41:24.496 00:06:00.434 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 19:42:22.185 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 46 3468 1 2025-09-03 19:42:24.516 00:06:00.238 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 19:42:24.476 00:06:00.461 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 19:47:15.345 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44950 10 6452 1 2025-09-03 19:47:45.320 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:47:45.534 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:47:45.595 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:48:15.761 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56892 9 6412 1 2025-09-03 19:44:24.437 00:06:00.532 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 19:44:24.437 00:06:00.521 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:49:16.129 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-09-03 19:50:16.532 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43714 9 6412 1 2025-09-03 19:47:22.970 00:05:01.472 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:51:16.957 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 9 6412 1 2025-09-03 19:47:23.184 00:05:01.277 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:47:42.196 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2296 1 2025-09-03 19:52:27.699 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43604 1 40 1 2025-09-03 19:48:23.204 00:05:01.238 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 19:52:45.625 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:52:45.662 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:52:45.566 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:48:24.502 00:06:00.431 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 19:48:24.443 00:06:00.334 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 19:53:28.096 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35938 1 40 1 2025-09-03 19:49:24.523 00:06:00.233 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 19:49:24.483 00:06:00.466 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 19:55:29.200 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36206 1 40 1 2025-09-03 19:51:24.442 00:06:00.511 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 19:51:24.442 00:06:00.519 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 19:56:19.229 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52158 10 6452 1 2025-09-03 19:53:02.202 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2720 1 2025-09-03 19:53:23.185 00:05:01.280 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 19:53:22.972 00:05:01.474 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 19:57:45.743 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 19:57:45.814 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:57:45.683 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 19:54:23.205 00:05:01.240 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 Summary: total flows: 173, total bytes: 302063, total packets: 1895, avg bps: 629, avg pps: 0, avg bpp: 159 Time window: 2025-09-03 18:55:24 - 2025-09-03 19:59:24 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0054s User: 0.0000s Wall: 0.0031s flows/second: 56349.7 Runtime: 0.0031s