Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 01:58:46.630 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56912 9 6412 1 2025-11-20 01:58:46.567 00:00:10.362 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:54:00.533 00:06:00.044 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 01:55:00.565 00:05:08.273 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 01:59:46.968 00:00:10.365 TCP 23.104.0.1:34416 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:59:47.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34416 9 6412 1 2025-11-20 02:00:57.803 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59462 1 40 1 2025-11-20 02:00:47.374 00:00:10.367 TCP 23.104.0.1:59462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:01:47.840 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40670 10 6452 1 2025-11-20 02:01:47.778 00:00:10.364 TCP 23.104.0.1:40670 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:57:09.831 00:05:50.807 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 01:58:29.000 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 02:02:48.240 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34486 9 6412 1 2025-11-20 02:02:48.177 00:00:10.364 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:59:00.598 00:05:08.232 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:03:48.579 00:00:10.366 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:00:00.533 00:05:02.843 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:04:49.048 00:00:10.537 TCP 1.101.0.1:3000 -> 23.104.0.1:34806 10 6452 1 2025-11-20 02:04:48.985 00:00:10.537 TCP 23.104.0.1:34806 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:00:00.567 00:06:00.000 TCP 23.152.0.1:179 -> 23.154.0.1:43631 7 497 1 2025-11-20 02:01:00.567 00:05:08.273 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:05:49.558 00:00:10.328 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:01:00.534 00:06:00.044 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 02:06:49.934 00:00:10.378 TCP 23.104.0.1:56032 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:06:49.996 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56032 10 6452 1 2025-11-20 02:03:49.007 00:05:10.031 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2788 1 2025-11-20 02:07:50.354 00:00:10.401 TCP 23.104.0.1:34038 -> 1.101.0.1:3000 15 1926 1 2025-11-20 02:03:09.836 00:05:50.803 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:07:50.416 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:34038 12 10375 1 2025-11-20 02:08:50.787 00:00:10.365 TCP 23.104.0.1:44594 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:08:50.849 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44594 9 6412 1 2025-11-20 02:05:00.598 00:05:08.232 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:09:51.250 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47446 10 6452 1 2025-11-20 02:09:51.187 00:00:10.365 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:06:00.535 00:05:02.844 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:10:51.585 00:00:10.351 TCP 23.104.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:10:51.649 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 10 6452 1 2025-11-20 02:07:00.568 00:05:08.273 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:11:52.035 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42938 9 6412 1 2025-11-20 02:07:00.568 00:06:00.001 TCP 23.152.0.1:179 -> 23.154.0.1:43631 7 497 1 2025-11-20 02:11:51.971 00:00:10.363 TCP 23.104.0.1:42938 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:12:52.372 00:00:10.361 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:08:00.534 00:06:00.045 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 02:09:09.038 00:05:10.014 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2752 1 2025-11-20 02:09:09.845 00:05:50.794 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:13:52.770 00:00:10.369 TCP 23.104.0.1:51008 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:14:53.174 00:00:10.367 TCP 23.104.0.1:47362 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:14:53.237 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47362 10 6452 1 2025-11-20 02:11:00.599 00:05:08.232 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:15:53.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55262 10 6452 1 2025-11-20 02:15:53.579 00:00:10.367 TCP 23.104.0.1:55262 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:12:00.550 00:05:02.830 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:16:53.985 00:00:10.364 TCP 23.104.0.1:48840 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:13:00.568 00:05:08.273 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:17:54.386 00:00:10.366 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:14:29.054 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2748 1 2025-11-20 02:14:00.568 00:06:00.001 TCP 23.152.0.1:179 -> 23.154.0.1:43631 7 497 1 2025-11-20 02:18:54.858 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46054 9 6412 1 2025-11-20 02:18:54.795 00:00:10.327 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:15:00.551 00:06:00.028 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 02:15:09.846 00:05:50.793 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:19:55.160 00:00:10.364 TCP 23.104.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:21:05.992 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36824 1 40 1 2025-11-20 02:17:00.604 00:05:08.229 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:20:55.561 00:00:10.368 TCP 23.104.0.1:36824 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:21:56.029 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43178 9 6412 1 2025-11-20 02:18:00.552 00:05:02.829 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:21:55.966 00:00:10.361 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:22:56.370 00:00:10.382 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:19:00.570 00:05:08.274 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:19:49.060 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2664 1 2025-11-20 02:23:56.787 00:00:10.811 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:24:57.643 00:00:10.377 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:24:57.706 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54798 9 6412 1 2025-11-20 02:21:09.847 00:05:50.795 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:21:00.570 00:06:00.001 TCP 23.152.0.1:179 -> 23.154.0.1:43631 7 497 1 2025-11-20 02:25:58.137 00:00:11.342 TCP 1.101.0.1:3000 -> 23.104.0.1:32792 9 6412 1 2025-11-20 02:25:58.074 00:00:11.342 TCP 23.104.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:22:00.553 00:06:00.028 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 02:26:59.522 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37214 9 6412 1 2025-11-20 02:23:00.601 00:05:08.234 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:26:59.458 00:00:10.326 TCP 23.104.0.1:37214 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:24:00.553 00:05:02.832 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:27:59.883 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52738 10 6452 1 2025-11-20 02:27:59.820 00:00:10.379 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:25:00.572 00:05:08.274 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:29:00.238 00:00:10.367 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:25:09.067 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-20 02:30:00.703 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46636 9 6412 1 2025-11-20 02:30:00.641 00:00:10.368 TCP 23.104.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:31:01.076 00:00:10.364 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:31:01.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50918 10 6452 1 2025-11-20 02:27:09.849 00:05:50.793 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:32:01.481 00:00:10.370 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:28:00.571 00:06:00.000 TCP 23.152.0.1:179 -> 23.154.0.1:43631 7 497 1 2025-11-20 02:29:00.601 00:05:08.236 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:33:01.949 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42314 9 6412 1 2025-11-20 02:33:01.887 00:00:10.367 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:29:00.558 00:06:00.024 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 02:30:00.560 00:05:02.828 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:34:02.352 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59354 9 6412 1 2025-11-20 02:34:02.290 00:00:10.368 TCP 23.104.0.1:59354 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:30:29.075 00:05:10.002 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2644 1 2025-11-20 02:35:02.695 00:00:10.371 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:31:00.573 00:05:08.276 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:35:02.760 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50976 10 6452 1 2025-11-20 02:36:03.168 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32956 10 6452 1 2025-11-20 02:36:03.107 00:00:10.367 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:37:13.951 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40222 1 40 1 2025-11-20 02:37:03.515 00:00:10.372 TCP 23.104.0.1:40222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:33:09.851 00:05:50.796 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:38:14.355 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35990 1 40 1 2025-11-20 02:38:03.920 00:00:10.372 TCP 23.104.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:39:14.902 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48918 1 40 1 2025-11-20 02:35:00.602 00:05:08.236 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:39:04.332 00:00:10.508 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:35:39.505 00:05:09.577 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2604 1 2025-11-20 02:36:00.561 00:05:02.827 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:35:00.572 00:06:00.004 TCP 23.152.0.1:179 -> 23.154.0.1:43631 7 497 1 2025-11-20 02:40:04.939 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60342 9 6412 1 2025-11-20 02:40:04.877 00:00:10.362 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:36:00.560 00:06:00.027 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 02:37:00.575 00:05:08.274 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:41:15.704 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51944 1 40 1 2025-11-20 02:41:05.276 00:00:10.365 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:42:05.679 00:00:10.365 TCP 23.104.0.1:46308 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:43:06.083 00:00:10.324 TCP 23.104.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:43:06.147 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46448 10 6452 1 2025-11-20 02:39:09.851 00:05:50.796 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:44:06.523 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58122 9 6412 1 2025-11-20 02:44:06.461 00:00:10.365 TCP 23.104.0.1:58122 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:41:00.607 00:05:08.232 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:40:59.083 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2764 1 2025-11-20 02:45:06.868 00:00:10.372 TCP 23.104.0.1:37450 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:45:06.932 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37450 10 6452 1 2025-11-20 02:42:00.562 00:05:02.827 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:46:07.283 00:00:10.367 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:42:00.577 00:06:00.004 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 757 1 2025-11-20 02:43:00.577 00:05:08.273 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:47:07.688 00:00:10.377 TCP 23.104.0.1:45256 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:43:00.563 00:06:00.030 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 02:48:18.531 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54470 1 40 1 2025-11-20 02:48:08.104 00:00:10.364 TCP 23.104.0.1:54470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:49:08.567 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59676 10 6452 1 2025-11-20 02:49:08.505 00:00:10.364 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:45:09.852 00:05:50.799 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:50:19.307 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47386 1 40 1 2025-11-20 02:50:08.908 00:00:10.336 TCP 23.104.0.1:47386 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:46:19.089 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2792 1 2025-11-20 02:47:00.607 00:05:08.234 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:51:09.282 00:00:10.315 TCP 23.104.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:51:09.345 00:00:10.315 TCP 1.101.0.1:3000 -> 23.104.0.1:53082 10 6452 1 2025-11-20 02:48:00.570 00:05:02.822 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:52:09.639 00:00:10.330 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:49:00.582 00:05:08.269 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-20 02:53:10.013 00:00:10.368 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:53:10.076 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45548 10 6452 1 2025-11-20 02:49:00.583 00:05:59.999 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-20 02:54:10.424 00:00:10.365 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:54:10.487 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-11-20 02:50:00.571 00:06:00.021 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-20 02:55:10.824 00:00:10.386 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:55:10.887 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48256 9 6412 1 2025-11-20 02:51:39.092 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2604 1 2025-11-20 02:51:09.853 00:05:50.800 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-20 02:56:11.311 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42370 9 6412 1 2025-11-20 02:56:11.246 00:00:10.368 TCP 23.104.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:53:00.611 00:05:08.232 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-20 02:57:11.648 00:00:10.374 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:54:00.573 00:05:02.824 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-20 02:58:12.075 00:00:10.444 TCP 23.104.0.1:50846 -> 1.101.0.1:3000 15 1926 1 2025-11-20 02:58:22.581 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50846 1 40 1 Summary: total flows: 172, total bytes: 391754, total packets: 2101, avg bps: 803, avg pps: 0, avg bpp: 186 Time window: 2025-11-20 01:54:00 - 2025-11-20 02:59:03 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0051s User: 0.0008s Wall: 0.0017s flows/second: 102620.2 Runtime: 0.0017s