Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 19:59:08.416 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 19:59:08.356 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 19:59:08.467 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 19:55:30.720 00:05:03.729 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 19:55:30.700 00:05:03.808 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:00:20.176 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41642 1 40 1 2025-09-16 19:56:30.681 00:05:03.772 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:01:20.576 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38288 1 40 1 2025-09-16 19:57:30.642 00:05:03.833 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 19:57:30.642 00:05:03.894 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 19:57:47.964 00:05:10.003 OSPF 23.0.4.2:0 -> 224.0.0.5:0 39 2796 1 2025-09-16 20:02:10.616 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33566 10 6452 1 2025-09-16 19:59:29.094 00:05:01.568 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:04:08.313 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:04:08.549 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:04:08.254 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:00:29.114 00:05:01.528 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:00:30.642 00:05:03.829 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:00:29.235 00:05:01.407 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:01:30.721 00:05:03.730 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:01:30.701 00:05:03.809 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:02:30.682 00:05:03.778 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:03:07.967 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2336 1 2025-09-16 20:07:29.619 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34318 1 40 1 2025-09-16 20:03:30.642 00:05:03.839 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:03:30.642 00:05:03.888 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:08:19.657 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45828 10 6452 1 2025-09-16 20:09:08.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:09:08.688 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:09:08.762 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:05:29.096 00:05:01.567 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:06:29.116 00:05:01.527 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:06:30.642 00:05:03.830 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:06:29.244 00:05:01.399 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:10:31.373 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38538 1 40 1 2025-09-16 20:11:21.418 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44558 9 6412 1 2025-09-16 20:07:30.724 00:05:03.730 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:07:30.704 00:05:03.808 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:08:30.684 00:05:03.776 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:12:32.183 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 1 40 1 2025-09-16 20:08:27.973 00:05:10.003 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2336 1 2025-09-16 20:09:30.643 00:05:03.837 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:09:30.643 00:05:03.889 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:13:32.596 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 1 40 1 2025-09-16 20:14:08.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:14:08.627 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:14:08.601 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:15:23.033 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36564 9 6412 1 2025-09-16 20:11:29.099 00:05:01.567 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:12:29.118 00:05:01.526 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:12:30.644 00:05:03.832 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:12:29.247 00:05:01.398 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:16:33.775 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 1 40 1 2025-09-16 20:17:23.792 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48372 10 6452 1 2025-09-16 20:13:30.725 00:05:03.732 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:13:30.704 00:05:03.811 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:13:47.975 00:05:10.004 OSPF 23.0.4.2:0 -> 224.0.0.5:0 37 2592 1 2025-09-16 20:14:30.684 00:05:03.791 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:19:08.983 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:19:08.815 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:19:08.923 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:15:30.644 00:05:03.838 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:19:24.603 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51864 10 6452 1 2025-09-16 20:15:30.645 00:05:03.888 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:17:29.099 00:05:01.567 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:18:29.119 00:05:01.528 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:18:29.249 00:05:01.398 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:18:30.646 00:05:03.834 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:22:36.166 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44246 1 40 1 2025-09-16 20:19:07.979 00:05:10.006 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2564 1 2025-09-16 20:19:30.726 00:05:03.739 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:19:30.706 00:05:03.815 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:23:26.199 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53020 10 6452 1 2025-09-16 20:24:08.942 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:24:09.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:24:09.590 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:20:30.687 00:05:03.777 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:21:30.645 00:05:03.839 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:21:30.645 00:05:03.894 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:25:37.339 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 1 40 1 2025-09-16 20:23:29.101 00:05:01.566 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:27:27.775 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52128 9 6412 1 2025-09-16 20:24:27.987 00:05:00.015 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2572 1 2025-09-16 20:24:29.121 00:05:01.526 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:24:30.646 00:05:03.838 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:24:29.252 00:05:01.395 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:28:38.554 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38224 1 40 1 2025-09-16 20:29:09.023 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:29:08.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:29:09.040 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:25:30.727 00:05:03.736 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:25:30.707 00:05:03.821 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:26:30.690 00:05:03.777 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:27:30.646 00:05:03.840 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:27:30.646 00:05:03.901 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:31:39.738 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59398 1 40 1 2025-09-16 20:32:29.775 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:38362 10 6452 1 2025-09-16 20:29:29.102 00:05:01.566 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:29:38.003 00:05:10.012 OSPF 23.0.4.2:0 -> 224.0.0.5:0 37 2576 1 2025-09-16 20:34:09.190 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:34:09.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:34:09.150 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:30:29.122 00:05:01.528 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:30:29.254 00:05:01.396 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:30:30.648 00:05:03.859 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:34:31.190 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33136 10 6452 1 2025-09-16 20:31:30.708 00:05:03.821 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:31:30.728 00:05:03.756 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:32:30.688 00:05:03.787 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:36:32.278 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56220 10 6452 1 2025-09-16 20:33:30.649 00:05:03.848 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:33:30.649 00:05:03.901 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:38:33.125 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42682 9 6412 1 2025-09-16 20:39:09.408 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:39:09.460 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:39:09.348 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:34:58.014 00:05:10.004 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2336 1 2025-09-16 20:35:29.104 00:05:01.568 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:39:33.490 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49792 9 6412 1 2025-09-16 20:36:29.123 00:05:01.529 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:36:30.649 00:05:03.856 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:36:29.255 00:05:01.397 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:40:44.274 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46480 1 40 1 2025-09-16 20:37:30.729 00:05:03.756 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:37:30.709 00:05:03.823 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:41:44.669 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56390 1 40 1 2025-09-16 20:38:30.689 00:05:03.796 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:39:30.651 00:05:03.852 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:39:30.651 00:05:03.901 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:43:45.501 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33536 1 40 1 2025-09-16 20:44:09.861 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:44:09.775 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:44:09.800 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:40:18.018 00:05:10.033 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2624 1 2025-09-16 20:44:35.538 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40430 9 6412 1 2025-09-16 20:41:29.103 00:05:01.569 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:42:29.123 00:05:01.529 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:42:30.651 00:05:03.856 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:42:29.256 00:05:01.396 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:43:30.733 00:05:03.756 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:43:30.713 00:05:03.823 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:44:30.692 00:05:03.793 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:49:09.307 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:49:09.528 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:49:09.588 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:45:30.653 00:05:03.853 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:45:30.653 00:05:03.912 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:45:38.050 00:05:10.007 OSPF 23.0.4.2:0 -> 224.0.0.5:0 38 2692 1 2025-09-16 20:47:29.105 00:05:01.571 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:48:29.125 00:05:01.530 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:48:30.652 00:05:03.859 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:48:29.258 00:05:01.397 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-16 20:49:30.714 00:05:03.824 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-16 20:49:30.734 00:05:03.757 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-16 20:53:49.834 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40458 1 40 1 2025-09-16 20:54:09.458 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:54:09.577 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 20:54:09.637 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 20:50:30.693 00:05:03.794 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-16 20:54:50.261 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38526 1 40 1 2025-09-16 20:50:58.057 00:05:10.012 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2432 1 2025-09-16 20:51:30.654 00:05:03.854 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-16 20:51:30.654 00:05:03.905 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-16 20:55:40.300 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53536 12 6556 1 2025-09-16 20:56:40.714 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54310 10 6452 1 2025-09-16 20:53:29.109 00:05:01.567 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-16 20:54:29.125 00:05:01.530 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-16 20:54:30.655 00:05:03.857 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-16 20:54:29.258 00:05:01.397 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 Summary: total flows: 169, total bytes: 207084, total packets: 1757, avg bps: 430, avg pps: 0, avg bpp: 117 Time window: 2025-09-16 19:55:30 - 2025-09-16 20:59:34 Total flows processed: 169, passed: 169, Blocks skipped: 0, Bytes read: 17640 Sys: 0.0025s User: 0.0025s Wall: 0.0030s flows/second: 55849.1 Runtime: 0.0031s