Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 11:58:45.975 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54260 10 6452 1 2025-08-30 11:55:21.600 00:05:01.102 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 11:54:21.635 00:06:00.053 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 11:59:46.386 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60958 9 6412 1 2025-08-30 11:56:03.664 00:05:10.006 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2304 1 2025-08-30 11:56:20.825 00:05:00.783 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:00:40.550 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:00:40.454 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:00:40.514 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:00:46.792 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38810 9 6412 1 2025-08-30 11:56:21.125 00:06:00.484 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:01:47.159 00:00:21.205 TCP 1.101.0.1:3000 -> 23.104.0.1:55434 9 6412 1 2025-08-30 11:57:21.600 00:06:00.133 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-30 11:58:21.679 00:06:00.034 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-30 11:59:21.649 00:05:01.035 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 11:58:21.106 00:06:00.524 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-30 12:03:58.857 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:53242 10 6452 1 2025-08-30 12:04:59.211 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47058 10 6452 1 2025-08-30 12:00:21.610 00:06:00.058 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-30 12:01:21.610 00:05:01.096 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:01:23.669 00:05:10.228 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2452 1 2025-08-30 12:05:40.708 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:05:40.552 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:05:40.647 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:05:59.614 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47520 10 6452 1 2025-08-30 12:02:20.830 00:05:00.781 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:01:21.646 00:06:00.046 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 12:07:10.396 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41454 1 40 1 2025-08-30 12:08:00.440 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56134 9 6412 1 2025-08-30 12:03:21.126 00:06:00.486 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:09:00.840 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55592 10 6452 1 2025-08-30 12:04:21.610 00:06:00.127 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-30 12:05:21.650 00:05:01.036 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:05:21.669 00:06:00.047 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-30 12:05:21.106 00:06:00.525 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-30 12:10:40.801 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:10:41.019 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:10:41.081 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:06:43.681 00:05:10.012 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2304 1 2025-08-30 12:11:01.654 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49224 10 6452 1 2025-08-30 12:07:21.611 00:05:01.096 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:12:12.422 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41914 1 40 1 2025-08-30 12:07:21.611 00:06:00.069 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-30 12:08:20.831 00:05:00.783 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:13:12.783 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39176 1 40 1 2025-08-30 12:08:21.656 00:06:00.052 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 12:14:02.822 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47206 9 6412 1 2025-08-30 12:11:21.652 00:05:01.037 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:10:21.128 00:06:00.501 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:15:40.882 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:15:40.483 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:15:40.823 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:16:14.003 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39280 1 40 1 2025-08-30 12:12:03.692 00:05:10.011 OSPF 23.0.4.2:0 -> 224.0.0.5:0 40 2752 1 2025-08-30 12:11:21.612 00:06:00.126 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-30 12:17:04.036 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50386 10 6452 1 2025-08-30 12:12:21.108 00:06:00.542 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-30 12:12:21.674 00:06:00.046 TCP 23.157.0.1:40165 -> 23.155.0.1:179 10 653 1 2025-08-30 12:13:21.614 00:05:01.097 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:18:04.447 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:57806 12 10365 1 2025-08-30 12:14:20.832 00:05:00.798 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:14:21.629 00:06:00.051 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-30 12:15:21.657 00:06:00.052 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 12:20:40.922 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:20:41.076 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:20:41.018 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:17:21.669 00:05:01.020 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:17:23.703 00:05:10.006 OSPF 23.0.4.2:0 -> 224.0.0.5:0 37 2780 1 2025-08-30 12:22:06.162 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39204 10 6452 1 2025-08-30 12:17:21.129 00:06:00.501 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:23:06.568 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52482 12 6556 1 2025-08-30 12:19:21.630 00:05:01.081 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:18:21.630 00:06:00.117 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-30 12:24:17.337 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43388 1 40 1 2025-08-30 12:20:20.833 00:05:00.797 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:19:21.116 00:06:00.535 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-30 12:19:21.719 00:06:00.009 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-30 12:25:07.373 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43876 10 6452 1 2025-08-30 12:25:40.843 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:25:41.226 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:25:41.287 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:21:21.630 00:06:00.051 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-30 12:22:43.709 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2464 1 2025-08-30 12:27:11.405 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46570 9 6412 1 2025-08-30 12:23:21.671 00:05:01.021 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:22:21.661 00:06:00.052 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 12:28:22.149 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50742 1 40 1 2025-08-30 12:24:21.136 00:06:00.496 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:25:21.630 00:05:01.081 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:30:12.548 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52920 10 6452 1 2025-08-30 12:26:20.833 00:05:00.799 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:25:21.630 00:06:00.122 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-30 12:30:41.352 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:30:41.146 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:30:41.293 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:26:21.117 00:06:00.536 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-30 12:26:21.728 00:06:00.005 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-30 12:31:12.953 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:49830 9 6412 1 2025-08-30 12:28:03.717 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2452 1 2025-08-30 12:32:13.382 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46110 9 6412 1 2025-08-30 12:29:21.675 00:05:01.019 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:28:21.632 00:06:00.049 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-30 12:33:13.783 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 9 6412 1 2025-08-30 12:29:21.661 00:06:00.052 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 12:34:24.834 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33196 1 40 1 2025-08-30 12:35:25.264 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 1 40 1 2025-08-30 12:31:21.632 00:05:01.082 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:35:41.289 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:35:41.119 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:35:41.348 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:31:21.139 00:06:00.497 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:36:25.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54418 1 40 1 2025-08-30 12:32:20.837 00:05:00.799 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:32:21.633 00:06:00.122 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-30 12:33:23.721 00:05:10.002 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2304 1 2025-08-30 12:33:21.118 00:06:00.539 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-30 12:33:21.734 00:06:00.002 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-30 12:38:26.530 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34178 1 40 1 2025-08-30 12:35:21.673 00:05:01.026 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:39:26.974 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 1 40 1 2025-08-30 12:35:21.634 00:06:00.048 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-30 12:40:27.375 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43198 1 40 1 2025-08-30 12:40:41.443 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:40:41.436 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:40:41.496 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:36:21.662 00:06:00.055 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 12:37:21.636 00:05:01.085 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:41:17.415 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51788 10 6452 1 2025-08-30 12:38:20.837 00:05:00.801 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:38:43.725 00:05:10.014 OSPF 23.0.4.2:0 -> 224.0.0.5:0 40 2768 1 2025-08-30 12:38:21.143 00:06:00.494 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:39:21.636 00:06:00.120 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-30 12:44:18.619 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58574 10 6452 1 2025-08-30 12:41:21.678 00:05:01.024 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:40:21.126 00:06:00.533 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-30 12:40:21.737 00:06:00.000 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-30 12:45:18.982 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54480 9 6412 1 2025-08-30 12:45:41.541 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:45:41.573 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:45:41.632 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:46:19.388 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50542 10 6452 1 2025-08-30 12:43:21.638 00:05:01.084 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:42:21.638 00:06:00.054 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-30 12:47:30.116 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 1 40 1 2025-08-30 12:44:03.738 00:05:10.004 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2500 1 2025-08-30 12:44:20.839 00:05:00.800 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:43:21.664 00:06:00.056 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 12:48:20.153 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45548 9 6412 1 2025-08-30 12:45:21.146 00:06:00.493 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:50:41.722 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:50:41.753 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:50:41.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:46:21.638 00:06:00.120 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-30 12:47:21.679 00:05:01.025 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:47:21.126 00:06:00.533 TCP 23.151.0.1:42035 -> 23.155.0.1:179 14 861 1 2025-08-30 12:47:21.737 00:06:00.002 TCP 23.157.0.1:40165 -> 23.155.0.1:179 7 497 1 2025-08-30 12:52:21.700 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56090 10 6452 1 2025-08-30 12:49:21.639 00:05:01.084 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-30 12:49:23.743 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 39 2728 1 2025-08-30 12:53:22.062 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39242 10 6452 1 2025-08-30 12:49:21.638 00:06:00.058 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-30 12:50:20.842 00:05:00.797 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-30 12:54:32.835 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40314 1 40 1 2025-08-30 12:50:21.672 00:06:00.062 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-30 12:55:33.256 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44316 1 40 1 2025-08-30 12:55:41.793 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 12:55:41.596 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:55:41.733 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 12:56:23.301 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59460 10 6452 1 2025-08-30 12:52:21.148 00:06:00.492 TCP 23.155.0.1:179 -> 23.151.0.1:42035 14 861 1 2025-08-30 12:53:21.679 00:05:01.024 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-30 12:57:23.664 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:58640 11 10327 1 2025-08-30 12:53:21.640 00:06:00.122 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 Summary: total flows: 173, total bytes: 302515, total packets: 1851, avg bps: 620, avg pps: 0, avg bpp: 163 Time window: 2025-08-30 11:54:21 - 2025-08-30 12:59:21 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0025s User: 0.0017s Wall: 0.0017s flows/second: 102661.9 Runtime: 0.0017s