Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 12:56:06.437 00:05:02.712 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 12:55:14.918 00:05:54.231 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 12:56:06.348 00:05:02.801 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 12:55:15.561 00:05:53.648 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:00:23.861 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59968 1 40 1 2025-12-01 13:00:36.847 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:00:36.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:00:36.788 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:56:15.514 00:05:53.715 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 12:56:14.897 00:05:54.292 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 12:56:15.535 00:05:53.614 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:01:13.899 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51580 9 6412 1 2025-12-01 12:58:09.148 00:05:06.434 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 12:58:21.596 00:05:10.476 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2752 1 2025-12-01 13:03:14.711 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54036 10 6452 1 2025-12-01 13:00:06.330 00:05:02.841 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:05:25.864 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45792 1 40 1 2025-12-01 13:05:37.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:05:36.765 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:05:37.085 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:01:15.562 00:05:53.647 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:02:06.438 00:05:02.712 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:01:14.921 00:05:54.229 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:02:06.351 00:05:02.799 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:06:26.229 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57162 1 40 1 2025-12-01 13:02:15.535 00:05:53.614 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:02:15.515 00:05:53.714 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:02:14.898 00:05:54.291 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:07:16.272 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47362 9 6412 1 2025-12-01 13:03:41.611 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 3168 1 2025-12-01 13:04:09.149 00:05:06.435 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:08:16.676 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40162 9 6412 1 2025-12-01 13:06:06.331 00:05:02.839 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:10:17.453 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33528 9 6412 1 2025-12-01 13:10:37.136 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:10:37.174 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:10:37.076 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:07:15.563 00:05:53.647 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:08:06.438 00:05:02.712 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:07:14.921 00:05:54.229 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:08:06.351 00:05:02.799 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:08:15.542 00:05:53.608 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:08:15.522 00:05:53.708 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:08:14.901 00:05:54.289 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:09:01.621 00:05:10.002 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2624 1 2025-12-01 13:10:09.150 00:05:06.435 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:15:37.264 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:15:37.250 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:15:37.203 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:12:06.333 00:05:02.839 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:16:31.803 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51198 1 40 1 2025-12-01 13:13:15.564 00:05:53.648 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:14:06.440 00:05:02.713 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:13:14.923 00:05:54.230 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:14:06.354 00:05:02.799 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:14:21.624 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2868 1 2025-12-01 13:14:15.544 00:05:53.609 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:14:15.525 00:05:53.708 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:14:14.903 00:05:54.290 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:19:22.612 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38134 10 6452 1 2025-12-01 13:16:09.150 00:05:06.438 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:20:33.354 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32836 1 40 1 2025-12-01 13:20:37.428 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:20:37.194 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:20:37.255 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:21:23.390 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36030 9 6412 1 2025-12-01 13:18:06.334 00:05:02.840 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:23:24.203 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59966 9 6412 1 2025-12-01 13:19:41.628 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-01 13:20:06.442 00:05:02.719 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:19:14.925 00:05:54.236 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:20:06.355 00:05:02.806 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:19:15.567 00:05:53.653 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:24:34.969 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59736 1 40 1 2025-12-01 13:20:15.547 00:05:53.616 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:20:15.527 00:05:53.715 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:20:14.904 00:05:54.298 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:25:25.002 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42592 9 6412 1 2025-12-01 13:25:37.913 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:25:37.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:25:37.761 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:22:09.153 00:05:06.437 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:24:06.349 00:05:02.834 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:28:26.248 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 9 6412 1 2025-12-01 13:25:01.634 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 13:25:15.569 00:05:53.654 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:25:14.925 00:05:54.239 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:26:06.372 00:05:02.792 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:26:06.445 00:05:02.719 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:30:37.438 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:30:37.561 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:30:37.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:26:15.549 00:05:53.615 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:26:15.530 00:05:53.715 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:26:14.906 00:05:54.298 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:31:27.441 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42272 10 6452 1 2025-12-01 13:28:09.163 00:05:06.428 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:32:41.489 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39712 1 40 1 2025-12-01 13:33:41.921 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58494 1 40 1 2025-12-01 13:30:06.352 00:05:02.832 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:30:21.644 00:05:00.815 OSPF 23.0.4.1:0 -> 224.0.0.5:0 40 3036 1 2025-12-01 13:35:37.478 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:35:37.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:35:37.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:32:06.446 00:05:02.718 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:31:14.927 00:05:54.237 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:32:06.373 00:05:02.791 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:31:15.571 00:05:53.653 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:36:32.731 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-12-01 13:32:15.531 00:05:53.714 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:32:14.908 00:05:54.297 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:32:15.552 00:05:53.613 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:34:09.165 00:05:06.427 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:38:43.933 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33318 1 40 1 2025-12-01 13:35:31.650 00:05:10.007 OSPF 23.0.4.1:0 -> 224.0.0.5:0 42 2996 1 2025-12-01 13:39:44.555 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33020 1 40 1 2025-12-01 13:36:06.358 00:05:02.829 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:40:37.596 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:40:37.751 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:40:37.811 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:40:34.593 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39214 9 6412 1 2025-12-01 13:41:34.995 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:33398 10 6452 1 2025-12-01 13:38:06.451 00:05:02.717 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:37:14.930 00:05:54.238 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:38:06.380 00:05:02.788 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:37:15.572 00:05:53.655 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:42:35.371 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39150 9 6412 1 2025-12-01 13:38:15.553 00:05:53.614 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:38:15.533 00:05:53.714 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:38:14.909 00:05:54.298 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:43:35.774 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 9 6412 1 2025-12-01 13:40:09.165 00:05:06.427 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:44:36.170 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40716 9 6412 1 2025-12-01 13:40:51.658 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2600 1 2025-12-01 13:45:37.492 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:45:37.872 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:45:37.932 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:45:46.898 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45638 1 40 1 2025-12-01 13:42:06.360 00:05:02.828 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:46:36.932 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34144 9 6412 1 2025-12-01 13:44:06.450 00:05:02.719 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:43:14.929 00:05:54.240 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:44:06.380 00:05:02.789 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:43:15.573 00:05:53.657 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:48:37.782 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50678 9 6412 1 2025-12-01 13:44:15.556 00:05:53.614 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:44:15.536 00:05:53.714 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:44:14.910 00:05:54.300 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:49:38.206 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:41546 9 6412 1 2025-12-01 13:46:09.169 00:05:06.425 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:46:11.663 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 36 2604 1 2025-12-01 13:50:38.047 00:00:00.016 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:50:37.816 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:50:37.986 00:00:00.017 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:50:38.587 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38270 9 6412 1 2025-12-01 13:51:38.999 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:56786 10 6452 1 2025-12-01 13:48:06.360 00:05:02.829 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-12-01 13:53:39.739 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35442 9 6412 1 2025-12-01 13:50:06.453 00:05:02.717 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-12-01 13:49:14.931 00:05:54.239 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-12-01 13:50:06.381 00:05:02.788 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-12-01 13:49:15.573 00:05:53.656 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-12-01 13:54:40.131 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49336 9 6412 1 2025-12-01 13:50:15.554 00:05:53.615 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-12-01 13:50:15.534 00:05:53.715 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-12-01 13:50:14.911 00:05:54.298 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-12-01 13:55:38.004 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:55:37.957 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 13:55:38.018 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 13:51:31.666 00:05:10.006 OSPF 23.0.4.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-01 13:52:09.170 00:05:06.427 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-12-01 13:57:51.713 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 1 40 1 2025-12-01 13:54:06.364 00:05:02.828 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 259836, total packets: 1839, avg bps: 542, avg pps: 0, avg bpp: 141 Time window: 2025-12-01 12:55:14 - 2025-12-01 13:59:09 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0040s User: 0.0020s Wall: 0.0023s flows/second: 75185.4 Runtime: 0.0023s