Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 00:58:56.155 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42044 1 40 1 2025-07-25 00:54:02.523 00:06:00.462 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 00:54:02.503 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 00:55:01.958 00:05:00.525 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 00:59:56.553 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 1 40 1 2025-07-25 00:55:02.562 00:06:00.309 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 00:55:02.482 00:06:00.114 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:00:46.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38686 10 6438 1 2025-07-25 00:57:02.483 00:05:00.522 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 00:56:57.422 00:05:10.009 OSPF 23.0.4.2:0 -> 224.0.0.5:0 37 2584 1 2025-07-25 00:57:02.483 00:06:00.409 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:02:47.412 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57088 10 6438 1 2025-07-25 00:58:02.543 00:06:00.259 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:03:07.589 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:03:07.411 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:03:07.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:03:47.815 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:60202 9 6398 1 2025-07-25 00:59:02.484 00:06:00.338 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:04:58.534 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35044 1 40 1 2025-07-25 01:01:01.959 00:05:00.526 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:05:58.939 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 1 40 1 2025-07-25 01:01:02.524 00:06:00.467 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:01:02.504 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:02:17.429 00:05:10.009 OSPF 23.0.4.2:0 -> 224.0.0.5:0 32 2176 1 2025-07-25 01:06:59.343 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 1 40 1 2025-07-25 01:02:02.564 00:06:00.308 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:02:02.483 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:03:02.484 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:07:49.378 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52778 9 6398 1 2025-07-25 01:08:07.502 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:08:07.433 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:08:07.494 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:08:49.784 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:39674 11 10310 1 2025-07-25 01:04:02.485 00:06:00.409 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:09:50.272 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 10 6438 1 2025-07-25 01:05:02.544 00:06:00.260 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:07:01.960 00:05:00.526 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:06:02.484 00:06:00.340 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:07:37.437 00:05:10.007 OSPF 23.0.4.2:0 -> 224.0.0.5:0 37 2548 1 2025-07-25 01:12:01.363 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60828 1 40 1 2025-07-25 01:08:02.526 00:06:00.466 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:08:02.505 00:06:00.074 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:09:02.486 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:13:07.654 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:13:07.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:13:07.594 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:09:02.485 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:09:02.565 00:06:00.310 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:14:52.228 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49092 10 6438 1 2025-07-25 01:11:02.487 00:06:00.409 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:15:52.638 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53120 10 6438 1 2025-07-25 01:12:02.547 00:06:00.259 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:13:01.961 00:05:00.526 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:12:57.445 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 37 2776 1 2025-07-25 01:13:02.487 00:06:00.339 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:18:07.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:18:07.742 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:18:07.803 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:18:53.770 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59466 10 6438 1 2025-07-25 01:15:02.487 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:15:02.508 00:06:00.072 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:15:02.528 00:06:00.465 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:19:54.174 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51524 9 6398 1 2025-07-25 01:16:02.568 00:06:00.310 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:16:02.487 00:06:00.112 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:20:54.577 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54958 9 6398 1 2025-07-25 01:18:17.450 00:05:04.739 OSPF 23.0.4.2:0 -> 224.0.0.5:0 38 2636 1 2025-07-25 01:22:55.412 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6438 1 2025-07-25 01:18:02.488 00:06:00.411 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:19:01.964 00:05:00.526 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:23:07.685 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:23:07.641 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:23:07.701 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:19:02.548 00:06:00.261 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:23:55.810 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34544 9 6398 1 2025-07-25 01:21:02.488 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:20:02.489 00:06:00.342 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:25:06.576 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38162 1 40 1 2025-07-25 01:25:56.611 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48446 10 6438 1 2025-07-25 01:22:02.528 00:06:00.467 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:22:02.508 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:27:07.384 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41702 1 40 1 2025-07-25 01:23:27.456 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2440 1 2025-07-25 01:23:02.568 00:06:00.311 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:23:02.487 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:28:08.003 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:28:07.852 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:28:07.789 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60178 1 40 1 2025-07-25 01:28:07.943 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:25:01.967 00:05:00.523 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:29:08.196 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41716 1 40 1 2025-07-25 01:25:02.488 00:06:00.410 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:29:58.230 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57942 10 6438 1 2025-07-25 01:26:02.549 00:06:00.263 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:27:02.489 00:05:00.528 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:27:02.489 00:06:00.342 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:31:59.047 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45462 9 6398 1 2025-07-25 01:28:47.461 00:05:10.010 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2320 1 2025-07-25 01:33:07.901 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:33:09.826 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54348 1 40 1 2025-07-25 01:33:07.908 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:33:07.968 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:29:02.528 00:06:00.467 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-07-25 01:29:02.508 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:30:02.489 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:31:01.968 00:05:00.522 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:30:02.570 00:06:00.311 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:35:00.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39904 10 6438 1 2025-07-25 01:36:11.015 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51652 1 40 1 2025-07-25 01:32:02.490 00:06:00.411 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:33:02.490 00:05:00.528 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:33:02.550 00:06:00.262 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:38:08.162 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:38:08.101 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:38:08.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:38:11.774 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47336 1 40 1 2025-07-25 01:34:07.471 00:05:10.007 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2420 1 2025-07-25 01:34:02.490 00:06:00.346 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:36:02.531 00:05:00.518 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 01:40:02.225 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6438 1 2025-07-25 01:37:01.969 00:05:00.522 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:36:02.511 00:06:00.077 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:41:02.670 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 10 6438 1 2025-07-25 01:37:02.570 00:06:00.311 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:37:02.491 00:06:00.117 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:42:03.086 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52532 10 6438 1 2025-07-25 01:39:02.492 00:05:00.529 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:43:08.396 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:43:08.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:43:08.462 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:43:03.491 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40142 10 6438 1 2025-07-25 01:39:27.478 00:05:10.008 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2440 1 2025-07-25 01:39:02.490 00:06:00.412 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:44:14.262 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56812 1 40 1 2025-07-25 01:40:02.552 00:06:00.266 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:42:02.531 00:05:00.470 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 01:41:02.491 00:06:00.350 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:46:04.655 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36906 10 6438 1 2025-07-25 01:43:01.971 00:05:00.527 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:47:05.057 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35936 10 6438 1 2025-07-25 01:43:02.511 00:06:00.077 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:48:08.418 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:48:08.594 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:48:08.479 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:48:15.796 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53458 1 40 1 2025-07-25 01:44:47.486 00:05:10.004 OSPF 23.0.4.2:0 -> 224.0.0.5:0 39 2740 1 2025-07-25 01:44:02.491 00:06:00.118 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:45:02.497 00:05:00.526 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:44:02.571 00:06:00.312 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:46:02.496 00:06:00.407 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:51:17.083 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38054 1 40 1 2025-07-25 01:48:02.537 00:05:00.466 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 01:47:02.557 00:06:00.267 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-07-25 01:49:01.971 00:05:00.529 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-07-25 01:48:02.497 00:06:00.347 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-07-25 01:53:08.396 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:53:08.455 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:53:08.516 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:53:07.532 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52612 9 6398 1 2025-07-25 01:50:07.492 00:05:10.013 OSPF 23.0.4.2:0 -> 224.0.0.5:0 38 2592 1 2025-07-25 01:50:02.517 00:06:00.073 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-07-25 01:51:02.498 00:05:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-07-25 01:55:18.704 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60510 1 40 1 2025-07-25 01:51:02.497 00:06:00.113 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-07-25 01:51:02.578 00:06:00.306 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-07-25 01:56:08.738 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 10 6438 1 2025-07-25 01:57:09.150 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 10 6438 1 2025-07-25 01:54:02.540 00:05:00.466 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-07-25 01:53:02.497 00:06:00.411 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-07-25 01:58:08.551 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:58:08.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 01:58:08.596 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 01:58:09.508 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57952 9 6398 1 Summary: total flows: 173, total bytes: 282452, total packets: 1884, avg bps: 579, avg pps: 0, avg bpp: 149 Time window: 2025-07-25 00:54:02 - 2025-07-25 01:59:03 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0035s User: 0.0012s Wall: 0.0024s flows/second: 73487.4 Runtime: 0.0024s