Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 18:58:43.219 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:40420 10 6452 1 2025-11-21 18:58:43.157 00:00:10.346 TCP 23.104.0.1:40420 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:54:09.616 00:05:52.107 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 18:59:43.555 00:00:10.366 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:59:53.985 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55728 1 40 1 2025-11-21 18:55:01.722 00:06:00.046 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:00:43.960 00:00:10.371 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:00:44.024 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56676 9 6412 1 2025-11-21 19:01:44.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46222 9 6412 1 2025-11-21 19:01:44.367 00:00:10.367 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:57:01.755 00:06:00.003 TCP 23.154.0.1:43631 -> 23.152.0.1:179 7 497 1 2025-11-21 18:57:10.706 00:05:51.094 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:02:44.773 00:00:10.441 TCP 23.104.0.1:48618 -> 1.101.0.1:3000 15 1926 1 2025-11-21 18:59:01.754 00:05:07.857 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:03:55.678 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59500 1 40 1 2025-11-21 19:03:45.253 00:00:10.362 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:00:01.758 00:05:02.488 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 18:59:52.421 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-21 19:04:45.654 00:00:10.364 TCP 23.104.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:04:45.718 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42304 9 6412 1 2025-11-21 19:00:09.621 00:05:52.103 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:05:57.282 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53792 1 40 1 2025-11-21 19:05:46.081 00:00:11.138 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:06:47.257 00:00:10.328 TCP 23.104.0.1:50898 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:06:57.647 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50898 1 40 1 2025-11-21 19:02:01.723 00:06:00.047 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:07:47.628 00:00:10.366 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:07:47.690 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48392 10 6452 1 2025-11-21 19:03:10.711 00:05:51.093 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:08:48.035 00:00:10.364 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:04:01.758 00:06:00.005 TCP 23.154.0.1:43631 -> 23.152.0.1:179 7 497 1 2025-11-21 19:05:01.753 00:05:07.862 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:05:12.425 00:05:00.825 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2840 1 2025-11-21 19:09:48.437 00:00:10.363 TCP 23.104.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:06:01.758 00:05:02.491 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:10:48.838 00:00:10.374 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:10:48.901 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33342 10 6452 1 2025-11-21 19:06:09.620 00:05:52.114 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:11:49.249 00:00:10.368 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:11:49.312 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58826 9 6412 1 2025-11-21 19:12:49.658 00:00:10.326 TCP 23.104.0.1:57450 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:09:01.734 00:06:00.040 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:13:50.027 00:00:10.374 TCP 23.104.0.1:59582 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:09:10.716 00:05:51.092 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:10:22.432 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2784 1 2025-11-21 19:15:00.875 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54350 1 40 1 2025-11-21 19:14:50.446 00:00:10.366 TCP 23.104.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:11:01.765 00:05:07.852 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:15:50.916 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 9 6412 1 2025-11-21 19:15:50.853 00:00:10.396 TCP 23.104.0.1:48184 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:11:01.764 00:06:00.001 TCP 23.154.0.1:43631 -> 23.152.0.1:179 7 497 1 2025-11-21 19:12:01.764 00:05:02.485 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:16:51.321 00:00:10.521 TCP 23.104.0.1:53270 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:17:01.905 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53270 1 40 1 2025-11-21 19:12:09.626 00:05:52.114 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:17:51.952 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43164 10 6452 1 2025-11-21 19:17:51.890 00:00:10.369 TCP 23.104.0.1:43164 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:18:52.361 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53982 9 6412 1 2025-11-21 19:18:52.297 00:00:10.370 TCP 23.104.0.1:53982 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:15:42.438 00:05:11.018 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-21 19:15:10.719 00:05:51.092 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:19:52.706 00:00:10.371 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:19:52.770 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45900 10 6452 1 2025-11-21 19:21:03.546 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46008 1 40 1 2025-11-21 19:16:01.738 00:06:00.038 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:20:53.118 00:00:10.367 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:17:01.769 00:05:07.850 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:21:53.518 00:00:10.363 TCP 23.104.0.1:46942 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:18:01.766 00:05:02.485 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:22:03.945 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46942 1 40 1 2025-11-21 19:22:53.923 00:00:10.362 TCP 23.104.0.1:52308 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:18:01.766 00:06:00.001 TCP 23.154.0.1:43631 -> 23.152.0.1:179 7 497 1 2025-11-21 19:23:04.347 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52308 1 40 1 2025-11-21 19:18:09.626 00:05:52.114 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:23:54.386 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56552 9 6412 1 2025-11-21 19:23:54.323 00:00:10.365 TCP 23.104.0.1:56552 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:24:54.726 00:00:10.335 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:25:05.123 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55004 1 40 1 2025-11-21 19:21:02.440 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2520 1 2025-11-21 19:21:10.721 00:05:51.090 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:25:55.103 00:00:10.365 TCP 23.104.0.1:47754 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:26:55.574 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58672 10 6452 1 2025-11-21 19:26:55.511 00:00:10.365 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:23:01.771 00:05:07.848 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:23:01.741 00:06:00.038 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:24:01.767 00:05:02.488 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:27:55.909 00:00:10.377 TCP 23.104.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:27:55.972 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47482 10 6452 1 2025-11-21 19:24:09.628 00:05:52.114 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:28:56.327 00:00:10.328 TCP 23.104.0.1:35616 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:25:01.768 00:06:00.000 TCP 23.154.0.1:43631 -> 23.152.0.1:179 7 497 1 2025-11-21 19:30:07.139 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40128 1 40 1 2025-11-21 19:29:56.700 00:00:10.376 TCP 23.104.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:26:22.448 00:05:10.017 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-21 19:30:57.122 00:00:10.368 TCP 23.104.0.1:56574 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:27:10.723 00:05:51.091 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:31:57.528 00:00:10.365 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:32:07.957 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41812 1 40 1 2025-11-21 19:32:57.993 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49994 9 6412 1 2025-11-21 19:32:57.929 00:00:10.365 TCP 23.104.0.1:49994 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:29:01.772 00:05:07.850 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:33:58.331 00:00:10.368 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:30:01.776 00:05:02.480 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:30:01.742 00:06:00.038 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:30:09.630 00:05:52.114 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:35:09.128 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 1 40 1 2025-11-21 19:34:58.737 00:00:10.327 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:31:42.466 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2748 1 2025-11-21 19:35:59.109 00:00:10.345 TCP 23.104.0.1:43648 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:35:59.172 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:43648 9 6412 1 2025-11-21 19:32:01.769 00:06:00.000 TCP 23.154.0.1:43631 -> 23.152.0.1:179 7 497 1 2025-11-21 19:36:59.498 00:00:10.329 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:33:10.723 00:05:51.090 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:37:59.865 00:00:10.380 TCP 23.104.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:37:59.927 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37660 9 6412 1 2025-11-21 19:35:01.778 00:05:07.844 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:39:00.282 00:00:10.364 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:39:10.708 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41942 1 40 1 2025-11-21 19:36:01.768 00:05:02.494 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:40:00.743 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 9 6412 1 2025-11-21 19:40:00.681 00:00:10.387 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:36:09.632 00:05:52.112 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:37:02.473 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 42 2976 1 2025-11-21 19:41:01.110 00:00:10.362 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:37:01.744 00:06:00.037 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:42:01.513 00:00:10.366 TCP 23.104.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:42:01.576 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37740 10 6452 1 2025-11-21 19:43:01.979 00:00:10.793 TCP 1.101.0.1:3000 -> 23.104.0.1:36820 10 6452 1 2025-11-21 19:43:01.917 00:00:10.793 TCP 23.104.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:39:01.770 00:06:00.001 TCP 23.154.0.1:43631 -> 23.152.0.1:179 7 497 1 2025-11-21 19:39:10.725 00:05:51.090 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:44:02.750 00:00:10.366 TCP 23.104.0.1:36438 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:41:01.775 00:05:07.848 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:45:03.154 00:00:10.364 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:42:01.770 00:05:02.497 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:46:03.561 00:00:10.371 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:42:22.480 00:05:10.004 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2500 1 2025-11-21 19:42:09.632 00:05:52.113 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:47:03.971 00:00:10.366 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 12 1559 1 2025-11-21 19:47:14.400 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43012 2 80 1 2025-11-21 19:48:04.376 00:00:10.366 TCP 23.104.0.1:50212 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:48:04.439 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50212 9 6412 1 2025-11-21 19:44:01.745 00:06:00.053 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:49:04.782 00:00:10.368 TCP 23.104.0.1:50480 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:45:10.728 00:05:51.089 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:50:05.189 00:00:10.364 TCP 23.104.0.1:43846 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:46:01.786 00:06:00.013 TCP 23.154.0.1:43631 -> 23.152.0.1:179 9 601 1 2025-11-21 19:47:01.774 00:05:07.852 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:51:15.974 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52090 1 40 1 2025-11-21 19:51:05.591 00:00:10.321 TCP 23.104.0.1:52090 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:47:42.484 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 41 2952 1 2025-11-21 19:48:01.789 00:05:02.482 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:52:05.961 00:00:10.371 TCP 23.104.0.1:60822 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:52:06.023 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60822 9 6412 1 2025-11-21 19:48:09.636 00:05:52.110 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-21 19:53:06.371 00:00:10.369 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:53:16.803 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60098 1 40 1 2025-11-21 19:54:06.777 00:00:10.335 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:54:06.839 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52242 10 6452 1 2025-11-21 19:55:07.150 00:00:10.370 TCP 23.104.0.1:35216 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:55:07.212 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35216 9 6412 1 2025-11-21 19:51:01.747 00:06:00.061 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-21 19:51:10.732 00:05:51.085 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-21 19:56:07.555 00:00:10.367 TCP 23.104.0.1:57388 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:53:02.487 00:05:10.444 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-21 19:53:01.776 00:05:07.852 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-21 19:57:07.961 00:00:10.366 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:53:01.755 00:06:00.043 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-21 19:54:01.797 00:05:02.473 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-21 19:58:08.367 00:00:10.370 TCP 23.104.0.1:36628 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:58:08.430 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36628 10 6452 1 Summary: total flows: 171, total bytes: 323969, total packets: 2012, avg bps: 665, avg pps: 0, avg bpp: 161 Time window: 2025-11-21 18:54:09 - 2025-11-21 19:59:04 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0062s User: 0.0010s Wall: 0.0038s flows/second: 44894.0 Runtime: 0.0038s