Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 12:58:41.525 00:00:10.365 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:58:51.953 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 1 40 1 2025-11-24 12:54:03.094 00:06:00.085 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 12:55:17.976 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-24 12:59:41.995 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35418 9 6412 1 2025-11-24 12:59:41.932 00:00:10.361 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:56:03.155 00:05:08.944 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:00:42.394 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59148 10 6452 1 2025-11-24 13:00:42.331 00:00:10.323 TCP 23.104.0.1:59148 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:01:42.699 00:00:10.373 TCP 23.104.0.1:33770 -> 1.101.0.1:3000 12 1559 1 2025-11-24 12:58:03.115 00:05:08.414 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:02:43.108 00:00:10.365 TCP 23.104.0.1:37980 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:58:03.085 00:06:00.105 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 13:03:53.943 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 1 40 1 2025-11-24 13:03:43.516 00:00:10.364 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:59:05.604 00:05:57.576 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:00:03.086 00:05:08.455 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:00:37.985 00:05:10.010 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2712 1 2025-11-24 13:04:43.986 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59970 10 6452 1 2025-11-24 13:04:43.924 00:00:10.362 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:05:44.329 00:00:10.332 TCP 23.104.0.1:58808 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:05:44.391 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 9 6412 1 2025-11-24 13:01:03.096 00:06:00.084 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 13:02:03.157 00:05:08.944 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:06:44.706 00:00:10.371 TCP 23.104.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:06:55.141 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33178 1 40 1 2025-11-24 13:07:45.177 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-11-24 13:07:45.114 00:00:10.328 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:04:03.116 00:05:08.415 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:08:45.480 00:00:10.371 TCP 23.104.0.1:40518 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:08:45.544 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40518 10 6452 1 2025-11-24 13:05:57.996 00:05:00.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 33 2252 1 2025-11-24 13:09:56.274 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 1 40 1 2025-11-24 13:09:45.881 00:00:10.329 TCP 23.104.0.1:38214 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:05:05.610 00:05:57.573 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:05:03.088 00:06:00.106 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 13:06:03.087 00:05:08.458 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:10:46.310 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45108 9 6412 1 2025-11-24 13:10:46.247 00:00:10.321 TCP 23.104.0.1:45108 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:11:46.670 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55054 10 6452 1 2025-11-24 13:11:46.607 00:00:10.327 TCP 23.104.0.1:55054 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:08:03.158 00:05:08.946 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:12:46.971 00:00:10.364 TCP 23.104.0.1:33866 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:08:03.097 00:06:00.086 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 13:13:47.438 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45304 9 6412 1 2025-11-24 13:13:47.375 00:00:10.365 TCP 23.104.0.1:45304 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:10:03.118 00:05:08.419 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:14:47.781 00:00:10.371 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:14:58.216 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 1 40 1 2025-11-24 13:11:08.005 00:05:10.032 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2868 1 2025-11-24 13:15:48.188 00:00:10.389 TCP 23.104.0.1:58196 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:15:58.639 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58196 1 40 1 2025-11-24 13:11:05.610 00:05:57.573 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:12:03.089 00:05:08.461 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:16:48.618 00:00:10.365 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:12:03.088 00:06:00.106 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 13:17:49.031 00:00:10.365 TCP 23.104.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:17:49.094 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56690 10 6452 1 2025-11-24 13:14:03.159 00:05:08.947 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:18:49.501 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 9 6412 1 2025-11-24 13:18:49.438 00:00:10.397 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:20:00.309 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 1 40 1 2025-11-24 13:15:03.099 00:06:00.087 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 13:19:49.877 00:00:10.370 TCP 23.104.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:16:03.119 00:05:08.423 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:16:28.037 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2752 1 2025-11-24 13:20:50.285 00:00:10.361 TCP 23.104.0.1:53956 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:21:50.684 00:00:10.334 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:17:05.612 00:05:57.574 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:18:03.089 00:05:08.464 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:22:51.078 00:00:10.367 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:23:51.481 00:00:10.367 TCP 23.104.0.1:42822 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:19:03.089 00:06:00.109 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 13:20:03.159 00:05:08.951 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:25:02.340 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 1 40 1 2025-11-24 13:24:51.901 00:00:10.375 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:21:48.045 00:05:10.011 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2644 1 2025-11-24 13:25:52.314 00:00:10.373 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:26:02.750 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 1 40 1 2025-11-24 13:22:03.121 00:05:08.424 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:26:52.791 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37092 9 6412 1 2025-11-24 13:26:52.728 00:00:10.359 TCP 23.104.0.1:37092 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:22:03.101 00:06:00.088 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 13:27:53.121 00:00:10.368 TCP 23.104.0.1:55198 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:23:05.615 00:05:57.574 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:27:53.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55198 10 6452 1 2025-11-24 13:24:03.090 00:05:08.464 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:28:53.529 00:00:10.366 TCP 23.104.0.1:37722 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:29:03.957 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37722 1 40 1 2025-11-24 13:29:53.934 00:00:10.364 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:26:03.161 00:05:08.948 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:26:03.092 00:06:00.109 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 13:30:54.337 00:00:10.365 TCP 23.104.0.1:48610 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:27:08.056 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2792 1 2025-11-24 13:31:54.803 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53988 10 6452 1 2025-11-24 13:31:54.739 00:00:10.375 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:28:03.122 00:05:08.423 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:32:55.225 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-11-24 13:32:55.162 00:00:10.387 TCP 23.104.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:29:03.102 00:06:00.090 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 13:29:05.615 00:05:57.577 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:33:55.592 00:00:10.366 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:33:55.655 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53668 9 6412 1 2025-11-24 13:30:03.092 00:05:08.463 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:34:55.997 00:00:10.369 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:35:56.402 00:00:10.326 TCP 23.104.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:32:03.161 00:05:08.949 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:32:28.061 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-24 13:36:56.769 00:00:10.338 TCP 23.104.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:36:56.832 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:40078 10 6452 1 2025-11-24 13:33:03.092 00:06:00.110 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 13:34:03.122 00:05:08.423 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:37:57.140 00:00:19.704 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:37:57.204 00:00:19.704 TCP 1.101.0.1:3000 -> 23.104.0.1:33736 10 6452 1 2025-11-24 13:39:06.907 00:00:10.381 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:39:06.970 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35462 10 6452 1 2025-11-24 13:35:05.624 00:05:57.568 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:36:03.093 00:05:08.464 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:40:07.333 00:00:10.323 TCP 23.104.0.1:41078 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:36:03.102 00:06:00.090 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 13:41:07.755 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35748 10 6452 1 2025-11-24 13:41:07.693 00:00:10.378 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:37:48.070 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2508 1 2025-11-24 13:42:18.542 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 1 40 1 2025-11-24 13:38:03.164 00:05:08.948 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:42:08.108 00:00:10.372 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:43:08.577 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39364 10 6452 1 2025-11-24 13:43:08.513 00:00:10.325 TCP 23.104.0.1:39364 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:40:03.130 00:05:08.417 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:44:08.881 00:00:10.376 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:40:03.099 00:06:00.103 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 13:45:09.291 00:00:10.365 TCP 23.104.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:41:05.618 00:05:57.575 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:42:03.100 00:05:08.457 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:46:09.693 00:00:10.322 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:43:08.076 00:05:10.865 OSPF 23.0.6.1:0 -> 224.0.0.5:0 43 2996 1 2025-11-24 13:47:10.145 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:49854 10 6452 1 2025-11-24 13:47:10.082 00:00:10.407 TCP 23.104.0.1:49854 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:43:03.111 00:06:00.082 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 13:44:03.172 00:05:08.942 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:48:10.525 00:00:10.366 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:49:10.926 00:00:10.333 TCP 23.104.0.1:39446 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:46:03.132 00:05:08.418 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:50:11.292 00:00:10.367 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:51:11.695 00:00:10.327 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:51:22.083 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39520 1 40 1 2025-11-24 13:47:03.102 00:06:00.103 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 13:47:05.622 00:05:57.572 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:48:03.103 00:05:08.458 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:52:22.506 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40848 1 40 1 2025-11-24 13:52:12.073 00:00:10.371 TCP 23.104.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:48:28.082 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2580 1 2025-11-24 13:53:12.477 00:00:10.333 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:53:12.541 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-11-24 13:50:03.172 00:05:08.945 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 13:54:12.848 00:00:10.381 TCP 23.104.0.1:53202 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:50:03.112 00:06:00.084 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 13:55:13.265 00:00:10.332 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:55:13.329 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46350 9 6412 1 2025-11-24 13:52:03.133 00:05:08.418 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 13:56:13.640 00:00:10.814 TCP 23.104.0.1:41192 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:57:14.556 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53196 10 6452 1 2025-11-24 13:57:14.494 00:00:10.326 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:53:48.085 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-24 13:53:05.628 00:05:57.570 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 13:54:03.104 00:05:08.457 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 13:58:14.923 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48128 9 6412 1 2025-11-24 13:58:14.860 00:00:10.342 TCP 23.104.0.1:48128 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 168, total bytes: 334301, total packets: 2096, avg bps: 684, avg pps: 0, avg bpp: 159 Time window: 2025-11-24 12:54:03 - 2025-11-24 13:59:11 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0032s User: 0.0021s Wall: 0.0024s flows/second: 70267.6 Runtime: 0.0024s