Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 17:59:04.553 00:00:10.363 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:59:14.978 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36686 1 40 1 2025-11-24 17:55:03.199 00:06:00.061 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 17:56:03.260 00:05:08.917 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:00:05.019 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43522 10 6452 1 2025-11-24 18:00:04.955 00:00:10.329 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:01:05.319 00:00:10.436 TCP 23.104.0.1:42268 -> 1.101.0.1:3000 15 1926 1 2025-11-24 18:01:05.382 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 11 10329 1 2025-11-24 17:58:03.221 00:05:08.439 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:02:05.792 00:00:10.325 TCP 23.104.0.1:58716 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:58:58.397 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2744 1 2025-11-24 18:03:06.217 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53504 10 6452 1 2025-11-24 18:03:06.154 00:00:10.363 TCP 23.104.0.1:53504 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:59:03.190 00:06:00.082 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 17:59:05.708 00:05:57.554 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:00:03.190 00:05:08.480 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:04:06.561 00:00:10.325 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:05:06.992 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-11-24 18:05:06.927 00:00:10.367 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:06:17.754 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44868 1 40 1 2025-11-24 18:02:03.260 00:05:08.920 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:06:07.331 00:00:10.360 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:02:03.200 00:06:00.063 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 18:07:07.728 00:00:10.333 TCP 23.104.0.1:38798 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:07:07.792 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38798 9 6412 1 2025-11-24 18:04:03.221 00:05:08.439 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:08:08.159 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37658 9 6412 1 2025-11-24 18:08:08.096 00:00:10.364 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:04:18.405 00:05:10.002 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2404 1 2025-11-24 18:09:08.564 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57648 9 6412 1 2025-11-24 18:09:08.501 00:00:10.363 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:05:05.711 00:05:57.553 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:06:03.191 00:05:08.479 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:10:08.971 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59792 9 6412 1 2025-11-24 18:10:08.910 00:00:10.380 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:06:03.191 00:06:00.083 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 18:11:09.325 00:00:10.365 TCP 23.104.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:11:09.388 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52432 10 6452 1 2025-11-24 18:08:03.261 00:05:08.920 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:12:09.733 00:00:10.361 TCP 23.104.0.1:37224 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:12:09.797 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37224 10 6452 1 2025-11-24 18:13:20.553 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33110 1 40 1 2025-11-24 18:13:10.131 00:00:10.360 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:09:38.408 00:05:10.479 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2788 1 2025-11-24 18:09:03.201 00:06:00.063 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 18:10:03.222 00:05:08.440 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:14:10.532 00:00:10.321 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:15:10.894 00:00:10.387 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:11:05.713 00:05:57.551 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:12:03.191 00:05:08.481 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:16:11.315 00:00:10.396 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:17:11.812 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56492 10 6452 1 2025-11-24 18:17:11.750 00:00:10.364 TCP 23.104.0.1:56492 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:13:03.192 00:06:00.085 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 18:14:03.262 00:05:08.921 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:18:22.590 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36558 1 40 1 2025-11-24 18:18:12.155 00:00:10.372 TCP 23.104.0.1:36558 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:14:58.412 00:05:10.002 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-24 18:19:12.625 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48846 10 6452 1 2025-11-24 18:19:12.562 00:00:10.359 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:16:03.222 00:05:08.440 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:20:12.963 00:00:10.402 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:20:13.026 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:38438 10 6452 1 2025-11-24 18:16:03.201 00:06:00.065 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 18:21:13.410 00:00:10.365 TCP 23.104.0.1:60100 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:17:05.715 00:05:57.551 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:18:03.192 00:05:08.481 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:22:24.269 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56104 1 40 1 2025-11-24 18:22:13.812 00:00:10.393 TCP 23.104.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:23:14.245 00:00:10.366 TCP 23.104.0.1:44184 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:23:24.673 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44184 1 40 1 2025-11-24 18:20:03.263 00:05:08.922 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:24:14.652 00:00:10.328 TCP 23.104.0.1:34758 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:24:25.043 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34758 1 40 1 2025-11-24 18:20:18.414 00:05:10.004 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2460 1 2025-11-24 18:20:03.193 00:06:00.085 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 18:25:15.024 00:00:10.366 TCP 23.104.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:22:03.223 00:05:08.440 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:26:15.428 00:00:10.379 TCP 23.104.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:27:15.840 00:00:10.364 TCP 23.104.0.1:36312 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:23:03.205 00:06:00.063 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 18:23:05.719 00:05:57.550 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:24:03.195 00:05:08.481 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:28:16.305 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45792 9 6412 1 2025-11-24 18:28:16.241 00:00:10.375 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:29:16.666 00:00:10.370 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:29:16.730 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34930 10 6452 1 2025-11-24 18:25:38.419 00:05:10.724 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2912 1 2025-11-24 18:26:03.265 00:05:08.920 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:30:17.083 00:00:10.367 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:31:17.487 00:00:10.362 TCP 23.104.0.1:56560 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:27:03.194 00:06:00.083 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 18:28:03.225 00:05:08.439 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:32:28.312 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41232 1 40 1 2025-11-24 18:32:17.887 00:00:10.363 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:33:18.288 00:00:10.362 TCP 23.104.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:33:18.351 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 9 6412 1 2025-11-24 18:29:05.725 00:05:57.544 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:30:03.195 00:05:08.480 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:34:18.689 00:00:10.384 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:30:03.205 00:06:00.063 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 18:30:58.425 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2772 1 2025-11-24 18:35:19.169 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33996 10 6452 1 2025-11-24 18:35:19.106 00:00:10.376 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:32:03.280 00:05:08.906 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:36:19.526 00:00:10.433 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 15 1926 1 2025-11-24 18:36:30.021 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50960 1 40 1 2025-11-24 18:37:20.002 00:00:10.318 TCP 23.104.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:34:03.227 00:05:08.439 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:38:20.358 00:00:10.359 TCP 23.104.0.1:40518 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:38:30.780 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40518 1 40 1 2025-11-24 18:34:03.197 00:06:00.083 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 18:39:20.756 00:00:10.365 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:35:05.728 00:05:57.541 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:36:03.196 00:05:08.480 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:36:18.430 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2644 1 2025-11-24 18:40:21.163 00:00:10.365 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:41:21.564 00:00:10.336 TCP 23.104.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:37:03.207 00:06:00.063 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 18:38:03.267 00:05:08.921 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:42:32.374 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39766 1 40 1 2025-11-24 18:42:21.948 00:00:10.364 TCP 23.104.0.1:39766 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:43:22.348 00:00:10.359 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:40:03.228 00:05:08.439 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:44:22.811 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53304 9 6412 1 2025-11-24 18:44:22.748 00:00:10.325 TCP 23.104.0.1:53304 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:45:23.112 00:00:11.830 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 13 1611 1 2025-11-24 18:45:35.005 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51406 1 40 1 2025-11-24 18:41:38.438 00:05:10.069 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2664 1 2025-11-24 18:41:05.731 00:05:57.541 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:41:03.198 00:06:00.084 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 18:42:03.198 00:05:08.480 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:46:24.979 00:00:10.363 TCP 23.104.0.1:35950 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:46:25.043 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35950 9 6412 1 2025-11-24 18:47:25.381 00:00:10.370 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:47:25.444 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36324 9 6412 1 2025-11-24 18:44:03.269 00:05:08.921 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:48:25.793 00:00:10.374 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:44:03.208 00:06:00.064 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 18:49:26.208 00:00:10.853 TCP 23.104.0.1:53304 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:49:26.271 00:00:10.852 TCP 1.101.0.1:3000 -> 23.104.0.1:53304 9 6412 1 2025-11-24 18:46:03.229 00:05:08.448 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:50:27.164 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 9 6412 1 2025-11-24 18:50:27.102 00:00:10.359 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:46:49.318 00:05:09.128 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2700 1 2025-11-24 18:51:27.501 00:00:10.436 TCP 23.104.0.1:39472 -> 1.101.0.1:3000 15 1926 1 2025-11-24 18:51:38.001 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39472 1 40 1 2025-11-24 18:47:05.732 00:05:57.540 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:48:03.200 00:05:08.489 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:52:27.978 00:00:10.321 TCP 23.104.0.1:39902 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:52:28.043 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39902 10 6452 1 2025-11-24 18:48:03.200 00:06:00.083 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-24 18:53:28.338 00:00:10.365 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:53:28.401 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34308 9 6412 1 2025-11-24 18:50:03.273 00:05:08.920 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-24 18:54:28.739 00:00:10.367 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:55:29.208 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33002 10 6452 1 2025-11-24 18:55:29.145 00:00:10.325 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:51:03.211 00:06:00.062 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-24 18:52:03.231 00:05:08.449 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-24 18:52:08.447 00:05:10.002 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2508 1 2025-11-24 18:56:29.510 00:00:10.327 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:57:29.872 00:00:10.372 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:53:05.732 00:05:57.541 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-24 18:54:03.202 00:05:08.490 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-24 18:58:30.285 00:00:10.361 TCP 23.104.0.1:38804 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 166, total bytes: 330479, total packets: 2059, avg bps: 686, avg pps: 0, avg bpp: 160 Time window: 2025-11-24 17:55:03 - 2025-11-24 18:59:11 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0027s User: 0.0037s Wall: 0.0022s flows/second: 74338.5 Runtime: 0.0022s