Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 02:59:15.301 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36984 10 6452 1 2025-09-04 02:59:15.237 00:00:10.330 TCP 23.104.0.1:36984 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:00:15.608 00:00:10.364 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:57:22.418 00:05:00.682 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:01:16.094 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48146 10 6452 1 2025-09-04 03:01:16.031 00:00:10.369 TCP 23.104.0.1:48146 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:57:23.090 00:05:01.500 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 02:58:22.429 00:05:00.662 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 02:58:22.419 00:05:02.787 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:02:16.436 00:00:10.363 TCP 23.104.0.1:58912 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:58:22.741 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-04 02:59:22.449 00:05:02.746 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:03:16.840 00:00:10.372 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:00:22.489 00:05:02.461 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:04:17.252 00:00:10.365 TCP 23.104.0.1:46482 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:04:17.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46482 10 6452 1 2025-09-04 03:05:17.657 00:00:10.364 TCP 23.104.0.1:35900 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:05:28.083 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35900 1 40 1 2025-09-04 03:06:18.081 00:00:10.366 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:06:18.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59308 9 6412 1 2025-09-04 03:03:22.421 00:05:00.683 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:07:28.928 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43082 1 40 1 2025-09-04 03:07:18.487 00:00:10.378 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:03:23.091 00:05:01.500 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:03:42.746 00:05:10.046 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2784 1 2025-09-04 03:04:22.431 00:05:00.663 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:08:18.904 00:00:10.394 TCP 23.104.0.1:40456 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:04:22.422 00:05:02.785 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:09:19.338 00:00:10.367 TCP 23.104.0.1:60086 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:05:22.452 00:05:02.744 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:09:19.401 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60086 9 6412 1 2025-09-04 03:06:22.493 00:05:02.461 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:10:19.746 00:00:10.369 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:10:30.176 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59954 1 40 1 2025-09-04 03:11:20.218 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54398 10 6452 1 2025-09-04 03:11:20.157 00:00:10.382 TCP 23.104.0.1:54398 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:12:20.640 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52510 9 6412 1 2025-09-04 03:12:20.577 00:00:10.361 TCP 23.104.0.1:52510 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:09:02.750 00:05:10.002 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2384 1 2025-09-04 03:09:22.422 00:05:00.683 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:09:23.095 00:05:01.499 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:13:31.411 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41906 1 40 1 2025-09-04 03:13:20.976 00:00:10.371 TCP 23.104.0.1:41906 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:10:22.433 00:05:00.662 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:10:22.423 00:05:02.795 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:14:21.390 00:00:10.327 TCP 23.104.0.1:49166 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:11:22.455 00:05:02.742 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:15:21.821 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 9 6412 1 2025-09-04 03:15:21.757 00:00:10.361 TCP 23.104.0.1:49936 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:12:22.498 00:05:02.456 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:16:22.156 00:00:10.362 TCP 23.104.0.1:50294 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:17:22.615 00:00:10.697 TCP 1.101.0.1:3000 -> 23.104.0.1:33294 10 6452 1 2025-09-04 03:17:22.553 00:00:10.697 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:14:22.753 00:05:00.356 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2620 1 2025-09-04 03:18:23.282 00:00:10.378 TCP 23.104.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:18:23.344 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:45744 10 6452 1 2025-09-04 03:15:22.428 00:05:00.678 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:15:23.096 00:05:01.498 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:19:23.687 00:00:10.370 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:19:23.752 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52708 9 6412 1 2025-09-04 03:16:22.439 00:05:00.663 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:16:22.428 00:05:02.779 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:20:24.097 00:00:10.362 TCP 23.104.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:20:34.523 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60636 1 40 1 2025-09-04 03:17:22.458 00:05:02.740 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:21:35.459 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51164 1 40 1 2025-09-04 03:21:24.498 00:00:10.898 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:18:22.499 00:05:02.456 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:22:25.432 00:00:10.319 TCP 23.104.0.1:42954 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:23:25.787 00:00:10.412 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 15 1926 1 2025-09-04 03:23:25.850 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:48902 12 10365 1 2025-09-04 03:19:32.758 00:05:10.042 OSPF 23.0.6.1:0 -> 224.0.0.5:0 43 3256 1 2025-09-04 03:24:26.302 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40452 9 6412 1 2025-09-04 03:24:26.239 00:00:10.368 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:21:22.429 00:05:00.681 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:21:23.100 00:05:01.495 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:25:26.659 00:00:10.376 TCP 23.104.0.1:55062 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:25:26.721 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55062 9 6412 1 2025-09-04 03:22:22.438 00:05:00.661 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:22:22.428 00:05:02.784 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:26:27.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57060 9 6412 1 2025-09-04 03:26:27.077 00:00:10.362 TCP 23.104.0.1:57060 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:23:22.459 00:05:02.744 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:27:27.543 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 10 6452 1 2025-09-04 03:27:27.481 00:00:10.367 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:24:22.499 00:05:02.456 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:28:27.948 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56162 10 6452 1 2025-09-04 03:28:27.885 00:00:10.372 TCP 23.104.0.1:56162 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:24:52.760 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 33 2240 1 2025-09-04 03:29:28.293 00:00:10.365 TCP 23.104.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:30:28.699 00:00:10.369 TCP 23.104.0.1:47876 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:27:22.428 00:05:00.686 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:27:23.100 00:05:01.497 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:31:29.169 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56988 10 6452 1 2025-09-04 03:31:29.105 00:00:10.371 TCP 23.104.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:28:22.440 00:05:00.666 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:28:22.431 00:05:02.784 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:32:29.578 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 9 6412 1 2025-09-04 03:32:29.515 00:00:10.370 TCP 23.104.0.1:46582 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:29:22.459 00:05:02.744 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:33:40.320 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 1 40 1 2025-09-04 03:33:29.925 00:00:10.333 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:30:12.769 00:05:00.575 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2584 1 2025-09-04 03:30:22.500 00:05:02.456 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:34:30.295 00:00:10.366 TCP 23.104.0.1:36214 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:35:30.702 00:00:10.372 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:36:31.108 00:00:10.371 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:36:31.171 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38808 10 6452 1 2025-09-04 03:33:23.106 00:05:01.493 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:33:22.430 00:05:00.689 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:37:31.514 00:00:10.319 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:37:31.578 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:35624 9 6412 1 2025-09-04 03:34:22.441 00:05:00.669 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:34:22.430 00:05:02.784 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:38:31.935 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41982 10 6452 1 2025-09-04 03:38:31.873 00:00:10.369 TCP 23.104.0.1:41982 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:35:22.460 00:05:02.744 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:35:22.783 00:05:10.015 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2580 1 2025-09-04 03:39:32.279 00:00:10.366 TCP 23.104.0.1:56270 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:36:22.500 00:05:02.460 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:40:32.684 00:00:10.326 TCP 23.104.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:40:32.746 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 9 6412 1 2025-09-04 03:41:33.137 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 9 6412 1 2025-09-04 03:41:33.073 00:00:10.368 TCP 23.104.0.1:50926 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:42:33.484 00:00:10.322 TCP 23.104.0.1:58718 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:42:33.547 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58718 9 6412 1 2025-09-04 03:39:22.432 00:05:00.689 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:39:23.109 00:05:01.493 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:43:33.845 00:00:10.333 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:43:44.241 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42340 1 40 1 2025-09-04 03:40:22.441 00:05:00.670 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:40:22.431 00:05:02.785 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:44:34.220 00:00:10.365 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:40:42.799 00:05:10.010 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2560 1 2025-09-04 03:41:22.462 00:05:02.745 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:45:34.626 00:00:10.372 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:45:45.062 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40198 1 40 1 2025-09-04 03:42:22.502 00:05:02.460 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:46:35.062 00:00:10.366 TCP 23.104.0.1:35266 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:46:35.126 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35266 10 6452 1 2025-09-04 03:47:35.534 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50086 9 6412 1 2025-09-04 03:47:35.471 00:00:10.366 TCP 23.104.0.1:50086 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:48:46.811 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52256 1 40 1 2025-09-04 03:48:35.882 00:00:10.865 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:45:23.111 00:05:01.491 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:45:22.433 00:05:00.690 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:49:36.785 00:00:10.330 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:49:36.849 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34926 9 6412 1 2025-09-04 03:46:02.809 00:05:00.802 OSPF 23.0.6.1:0 -> 224.0.0.5:0 42 2916 1 2025-09-04 03:46:22.444 00:05:00.669 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:46:22.435 00:05:02.784 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:50:37.153 00:00:10.366 TCP 23.104.0.1:52028 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:47:22.466 00:05:02.742 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:51:37.620 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34280 10 6452 1 2025-09-04 03:51:37.557 00:00:10.327 TCP 23.104.0.1:34280 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:48:22.503 00:05:02.460 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-09-04 03:52:37.917 00:00:10.367 TCP 23.104.0.1:53554 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:53:48.770 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48844 1 40 1 2025-09-04 03:53:38.324 00:00:10.384 TCP 23.104.0.1:48844 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:54:38.746 00:00:10.369 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:54:38.809 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58990 9 6412 1 2025-09-04 03:51:22.434 00:05:00.691 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-09-04 03:51:12.823 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2932 1 2025-09-04 03:51:23.113 00:05:01.491 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-09-04 03:55:39.159 00:00:10.371 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:52:22.444 00:05:00.670 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-09-04 03:52:22.434 00:05:02.786 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-09-04 03:56:39.567 00:00:10.374 TCP 23.104.0.1:42826 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:53:22.466 00:05:02.743 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-09-04 03:57:39.981 00:00:10.363 TCP 23.104.0.1:46590 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:54:22.504 00:05:02.460 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 Summary: total flows: 171, total bytes: 360061, total packets: 2083, avg bps: 773, avg pps: 0, avg bpp: 172 Time window: 2025-09-04 02:57:22 - 2025-09-04 03:59:24 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0042s User: 0.0008s Wall: 0.0020s flows/second: 84409.3 Runtime: 0.0020s