Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 13:58:44.652 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:41816 11 6504 1 2025-09-03 13:54:24.351 00:06:00.456 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 13:54:24.310 00:06:00.493 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 13:59:55.528 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58002 1 40 1 2025-09-03 13:55:24.391 00:06:00.173 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 13:55:24.371 00:06:00.412 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:00:55.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42438 1 40 1 2025-09-03 13:56:41.688 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 40 2868 1 2025-09-03 13:57:24.312 00:06:00.517 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:02:38.464 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:02:38.594 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:02:38.524 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:02:46.358 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55442 9 6412 1 2025-09-03 13:59:23.011 00:05:01.329 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 13:58:24.312 00:06:00.273 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 14:03:57.093 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32806 1 40 1 2025-09-03 14:00:23.029 00:05:01.284 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:00:22.855 00:05:01.458 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:04:57.544 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41502 1 40 1 2025-09-03 14:02:01.693 00:05:10.010 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2520 1 2025-09-03 14:01:24.352 00:06:00.460 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 14:01:24.312 00:06:00.494 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 14:06:47.986 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55698 9 6412 1 2025-09-03 14:02:24.392 00:06:00.174 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 14:02:24.372 00:06:00.414 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:07:38.950 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:07:38.565 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:07:38.889 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:08:59.169 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38756 1 40 1 2025-09-03 14:05:23.013 00:05:01.322 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:04:24.313 00:06:00.524 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:06:23.031 00:05:01.282 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:05:24.312 00:06:00.273 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 14:06:22.855 00:05:01.458 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:10:49.585 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60366 9 6412 1 2025-09-03 14:07:21.704 00:05:10.009 OSPF 23.0.4.2:0 -> 224.0.0.5:0 33 2256 1 2025-09-03 14:12:38.874 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:12:38.746 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:12:38.935 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:12:50.915 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45966 12 6556 1 2025-09-03 14:08:24.353 00:06:00.463 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 14:08:24.314 00:06:00.495 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 14:13:51.323 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39162 9 6412 1 2025-09-03 14:09:24.394 00:06:00.173 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 14:09:24.374 00:06:00.415 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:15:02.053 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54356 1 40 1 2025-09-03 14:11:23.013 00:05:01.322 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:12:23.035 00:05:01.280 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:12:22.858 00:05:01.457 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:11:24.314 00:06:00.523 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:12:41.714 00:05:10.010 OSPF 23.0.4.2:0 -> 224.0.0.5:0 37 2580 1 2025-09-03 14:17:02.868 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52614 1 40 1 2025-09-03 14:12:24.315 00:06:00.274 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 14:17:38.872 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:17:38.904 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:17:38.965 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:18:03.265 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 1 40 1 2025-09-03 14:19:03.800 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49078 1 40 1 2025-09-03 14:19:53.837 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36086 10 6452 1 2025-09-03 14:15:24.355 00:06:00.463 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 14:15:24.314 00:06:00.513 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 14:17:23.016 00:05:01.319 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:16:24.395 00:06:00.174 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 14:16:24.375 00:06:00.432 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:21:54.649 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40588 10 6452 1 2025-09-03 14:18:01.724 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2400 1 2025-09-03 14:18:23.035 00:05:01.281 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:18:22.859 00:05:01.457 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:22:39.086 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:22:38.638 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:22:39.026 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:22:55.053 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47694 10 6452 1 2025-09-03 14:18:24.314 00:06:00.524 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:24:05.779 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53302 1 40 1 2025-09-03 14:19:24.315 00:06:00.274 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 14:25:56.230 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45198 9 6412 1 2025-09-03 14:27:06.960 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42478 1 40 1 2025-09-03 14:22:24.315 00:06:00.515 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 14:22:24.356 00:06:00.469 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 14:23:23.017 00:05:01.321 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:23:21.731 00:05:10.009 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2464 1 2025-09-03 14:27:39.188 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:27:39.126 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:27:38.788 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:27:56.995 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54030 9 6412 1 2025-09-03 14:23:24.396 00:06:00.177 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 14:23:24.376 00:06:00.434 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:24:23.036 00:05:01.282 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:24:22.861 00:05:01.457 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:29:07.726 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55230 1 40 1 2025-09-03 14:30:08.124 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39042 1 40 1 2025-09-03 14:25:24.319 00:06:00.529 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:30:58.161 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56604 9 6412 1 2025-09-03 14:26:24.317 00:06:00.276 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 14:31:58.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42126 9 6412 1 2025-09-03 14:32:39.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:32:39.258 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:32:39.317 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:28:41.739 00:05:10.010 OSPF 23.0.4.2:0 -> 224.0.0.5:0 40 2928 1 2025-09-03 14:29:23.018 00:05:01.321 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:33:59.302 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37948 9 6412 1 2025-09-03 14:29:24.358 00:06:00.465 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 14:30:23.038 00:05:01.284 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:30:22.864 00:05:01.458 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:29:24.318 00:06:00.513 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 14:30:24.398 00:06:00.177 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 14:30:24.378 00:06:00.433 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:32:24.319 00:06:00.525 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:37:39.608 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:37:39.748 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:37:39.809 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:34:01.750 00:05:10.013 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-03 14:33:24.320 00:06:00.283 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 14:35:23.053 00:05:01.291 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:40:01.715 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 9 6412 1 2025-09-03 14:36:23.065 00:05:01.258 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:36:22.866 00:05:01.457 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:41:02.132 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41026 9 6412 1 2025-09-03 14:36:24.363 00:06:00.467 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 14:36:24.322 00:06:00.519 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 14:42:02.501 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55178 9 6412 1 2025-09-03 14:37:24.403 00:06:00.175 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 14:37:24.383 00:06:00.438 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:42:39.160 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:42:39.373 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:42:39.434 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:39:21.763 00:05:10.006 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2436 1 2025-09-03 14:44:13.693 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 1 40 1 2025-09-03 14:39:24.323 00:06:00.527 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:45:03.730 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57566 10 6452 1 2025-09-03 14:41:23.054 00:05:01.293 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:40:24.323 00:06:00.276 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 14:46:04.128 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54792 10 6452 1 2025-09-03 14:42:23.074 00:05:01.253 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:42:22.867 00:05:01.460 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:47:04.534 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57516 9 6412 1 2025-09-03 14:47:39.518 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:47:39.316 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:47:39.458 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:48:15.304 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36710 1 40 1 2025-09-03 14:43:24.365 00:06:00.467 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 14:43:24.324 00:06:00.519 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 14:44:41.769 00:05:10.004 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2336 1 2025-09-03 14:49:05.347 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46834 9 6412 1 2025-09-03 14:44:24.404 00:06:00.176 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 14:44:24.384 00:06:00.439 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:50:05.713 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51784 10 6452 1 2025-09-03 14:51:06.079 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44290 10 6452 1 2025-09-03 14:46:24.327 00:06:00.533 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:47:23.057 00:05:01.296 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:52:16.809 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41154 1 40 1 2025-09-03 14:48:23.079 00:05:01.251 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-03 14:47:24.327 00:06:00.273 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-09-03 14:48:22.869 00:05:01.461 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:52:39.551 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:52:39.664 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:52:39.725 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:50:01.774 00:05:10.004 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2480 1 2025-09-03 14:54:17.591 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42218 1 40 1 2025-09-03 14:55:07.635 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:55330 10 6452 1 2025-09-03 14:50:24.368 00:06:00.464 TCP 23.153.0.1:179 -> 23.155.0.1:37249 14 861 1 2025-09-03 14:50:24.328 00:06:00.517 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-09-03 14:51:24.409 00:06:00.171 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-09-03 14:51:24.389 00:06:00.436 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-09-03 14:53:23.067 00:05:01.284 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-03 14:57:08.443 00:00:15.559 TCP 1.101.0.1:3000 -> 23.104.0.1:45766 10 6452 1 2025-09-03 14:57:39.884 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 14:57:39.543 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:57:39.824 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 14:54:22.870 00:05:01.461 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-03 14:53:24.330 00:06:00.525 TCP 23.155.0.1:37249 -> 23.153.0.1:179 14 861 1 2025-09-03 14:58:14.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43698 9 6412 1 2025-09-03 14:54:23.086 00:05:01.245 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 Summary: total flows: 173, total bytes: 272421, total packets: 1871, avg bps: 558, avg pps: 0, avg bpp: 145 Time window: 2025-09-03 13:54:24 - 2025-09-03 14:59:24 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0031s User: 0.0015s Wall: 0.0021s flows/second: 82185.4 Runtime: 0.0021s