Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 07:59:26.734 00:00:10.375 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:55:03.462 00:06:00.106 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 07:56:03.523 00:05:08.998 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:00:27.141 00:00:10.327 TCP 23.104.0.1:54320 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:00:37.532 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54320 1 40 1 2025-11-25 08:01:27.515 00:00:10.364 TCP 23.104.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:58:03.485 00:05:08.493 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:02:27.981 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56588 10 6452 1 2025-11-25 08:02:27.918 00:00:10.372 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:59:03.569 00:05:02.450 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:03:28.328 00:00:10.362 TCP 23.104.0.1:49144 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:59:39.565 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2644 1 2025-11-25 07:59:03.455 00:06:00.125 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 08:00:03.455 00:05:08.533 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:04:28.791 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41344 9 6412 1 2025-11-25 08:04:28.729 00:00:10.375 TCP 23.104.0.1:41344 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:05:29.205 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36020 10 6452 1 2025-11-25 08:05:29.143 00:00:10.322 TCP 23.104.0.1:36020 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:02:03.527 00:05:08.994 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:06:39.897 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39768 1 40 1 2025-11-25 08:06:29.506 00:00:10.329 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:02:03.467 00:06:00.103 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 08:07:29.870 00:00:10.375 TCP 23.104.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:04:03.488 00:05:08.492 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:08:30.280 00:00:10.327 TCP 23.104.0.1:36976 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:08:30.344 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36976 10 6452 1 2025-11-25 08:04:59.573 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2832 1 2025-11-25 08:05:03.569 00:05:02.452 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:09:41.069 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58934 1 40 1 2025-11-25 08:09:30.643 00:00:10.365 TCP 23.104.0.1:58934 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:06:03.458 00:05:08.532 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:10:31.074 00:00:10.369 TCP 23.104.0.1:57130 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:06:03.457 00:06:00.123 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 08:11:31.477 00:00:10.399 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 15 1926 1 2025-11-25 08:11:31.539 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:43490 12 10375 1 2025-11-25 08:08:03.529 00:05:08.998 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:12:31.977 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52048 9 6412 1 2025-11-25 08:12:31.915 00:00:10.392 TCP 23.104.0.1:52048 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:13:32.333 00:00:10.371 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:09:03.469 00:06:00.103 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 08:10:03.488 00:05:08.508 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:10:19.580 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2544 1 2025-11-25 08:14:32.744 00:00:10.370 TCP 23.104.0.1:57492 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:14:43.177 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57492 1 40 1 2025-11-25 08:11:03.572 00:05:02.453 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:15:43.580 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54334 1 40 1 2025-11-25 08:15:33.154 00:00:10.364 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:12:03.457 00:05:08.549 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:16:33.547 00:00:10.319 TCP 23.104.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:16:43.928 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42504 1 40 1 2025-11-25 08:17:33.905 00:00:10.336 TCP 23.104.0.1:44838 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:17:44.305 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44838 1 40 1 2025-11-25 08:13:03.458 00:06:00.123 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 08:14:03.529 00:05:08.998 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:18:34.285 00:00:10.364 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:18:34.349 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58282 9 6412 1 2025-11-25 08:19:34.682 00:00:10.364 TCP 23.104.0.1:54712 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:19:45.110 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54712 1 40 1 2025-11-25 08:15:39.589 00:05:10.004 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2536 1 2025-11-25 08:16:03.489 00:05:08.507 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:20:35.147 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43904 9 6412 1 2025-11-25 08:20:35.085 00:00:10.364 TCP 23.104.0.1:43904 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:16:03.469 00:06:00.103 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 08:17:03.571 00:05:02.455 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:21:35.482 00:00:10.366 TCP 23.104.0.1:59048 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:18:03.459 00:05:08.548 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:22:35.887 00:00:10.373 TCP 23.104.0.1:54178 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:23:46.726 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43970 1 40 1 2025-11-25 08:23:36.300 00:00:10.365 TCP 23.104.0.1:43970 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:20:03.531 00:05:08.998 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:24:36.763 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55686 10 6452 1 2025-11-25 08:24:36.701 00:00:10.380 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:20:03.459 00:06:00.124 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 08:20:59.592 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2592 1 2025-11-25 08:25:47.572 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58328 1 40 1 2025-11-25 08:25:37.147 00:00:10.364 TCP 23.104.0.1:58328 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:22:03.491 00:05:08.507 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:26:37.549 00:00:10.363 TCP 23.104.0.1:42926 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:26:47.976 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42926 1 40 1 2025-11-25 08:23:03.572 00:05:02.456 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:27:37.952 00:00:10.383 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:27:38.016 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59434 9 6412 1 2025-11-25 08:23:03.471 00:06:00.103 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 08:24:03.462 00:05:08.548 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:28:38.435 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57880 9 6412 1 2025-11-25 08:28:38.372 00:00:10.366 TCP 23.104.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:29:38.848 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40418 10 6452 1 2025-11-25 08:29:38.785 00:00:10.368 TCP 23.104.0.1:40418 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:26:03.534 00:05:08.995 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:26:19.599 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2804 1 2025-11-25 08:30:49.628 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41014 1 40 1 2025-11-25 08:30:39.190 00:00:10.374 TCP 23.104.0.1:41014 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:31:39.603 00:00:10.365 TCP 23.104.0.1:58452 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:31:39.666 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58452 10 6452 1 2025-11-25 08:27:03.464 00:06:00.120 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 08:28:03.494 00:05:08.506 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:32:40.019 00:00:10.363 TCP 23.104.0.1:44350 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:29:03.573 00:05:02.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:33:40.419 00:00:10.365 TCP 23.104.0.1:43092 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:33:40.482 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43092 9 6412 1 2025-11-25 08:30:03.465 00:05:08.545 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:34:40.823 00:00:10.384 TCP 23.104.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:34:40.886 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40472 9 6412 1 2025-11-25 08:30:03.474 00:06:00.099 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 08:31:39.605 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2688 1 2025-11-25 08:35:41.308 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56218 9 6412 1 2025-11-25 08:35:41.245 00:00:10.366 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:32:03.535 00:05:08.994 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:36:41.652 00:00:10.366 TCP 23.104.0.1:41470 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:36:41.715 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41470 9 6412 1 2025-11-25 08:37:42.073 00:00:10.364 TCP 23.104.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:37:52.500 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52996 1 40 1 2025-11-25 08:34:03.495 00:05:08.506 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:38:42.554 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54602 9 6412 1 2025-11-25 08:38:42.491 00:00:10.366 TCP 23.104.0.1:54602 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:34:03.464 00:06:00.119 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 08:35:03.575 00:05:02.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:39:42.896 00:00:10.381 TCP 23.104.0.1:36696 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:36:03.466 00:05:08.547 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:40:43.380 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49684 10 6452 1 2025-11-25 08:40:43.317 00:00:10.364 TCP 23.104.0.1:49684 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:36:59.610 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2604 1 2025-11-25 08:41:43.719 00:00:10.365 TCP 23.104.0.1:52704 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:37:03.475 00:06:00.099 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 08:38:03.536 00:05:08.998 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:42:44.119 00:00:10.326 TCP 23.104.0.1:47716 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:42:44.182 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47716 10 6452 1 2025-11-25 08:43:44.481 00:00:10.362 TCP 23.104.0.1:45194 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:43:44.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45194 10 6452 1 2025-11-25 08:40:03.496 00:05:08.508 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:44:44.883 00:00:10.323 TCP 23.104.0.1:42684 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:41:03.575 00:05:02.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:45:55.674 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47024 1 40 1 2025-11-25 08:45:45.248 00:00:10.364 TCP 23.104.0.1:47024 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:41:03.465 00:06:00.121 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 08:42:03.467 00:05:08.547 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:42:19.617 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2652 1 2025-11-25 08:46:45.657 00:00:10.363 TCP 23.104.0.1:37590 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:46:45.720 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37590 9 6412 1 2025-11-25 08:47:46.077 00:00:10.363 TCP 23.104.0.1:55500 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:47:46.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55500 10 6452 1 2025-11-25 08:44:03.539 00:05:08.996 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:48:46.541 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52510 9 6412 1 2025-11-25 08:48:46.478 00:00:10.365 TCP 23.104.0.1:52510 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:44:03.478 00:06:00.099 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 08:49:46.945 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-11-25 08:49:46.881 00:00:10.326 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:46:03.497 00:05:08.507 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:50:47.248 00:00:10.371 TCP 23.104.0.1:45076 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:50:47.317 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45076 9 6412 1 2025-11-25 08:47:03.578 00:05:02.459 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:47:39.624 00:05:10.044 OSPF 23.0.6.1:0 -> 224.0.0.5:0 41 2884 1 2025-11-25 08:51:47.653 00:00:10.367 TCP 23.104.0.1:38526 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:48:03.467 00:05:08.548 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 08:52:48.081 00:00:10.368 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:52:58.511 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 1 40 1 2025-11-25 08:48:03.467 00:06:00.122 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 08:53:48.550 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46326 11 6516 1 2025-11-25 08:53:48.487 00:00:10.366 TCP 23.104.0.1:46326 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:50:03.538 00:05:09.001 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 08:54:48.891 00:00:10.371 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:55:59.741 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 1 40 1 2025-11-25 08:55:49.304 00:00:10.373 TCP 23.104.0.1:41402 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:51:03.479 00:06:00.099 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 08:52:03.500 00:05:08.506 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 08:56:49.782 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51650 9 6412 1 2025-11-25 08:56:49.720 00:00:10.370 TCP 23.104.0.1:51650 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:53:03.579 00:05:02.459 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 08:52:59.631 00:05:10.004 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2708 1 2025-11-25 08:57:50.131 00:00:10.369 TCP 23.104.0.1:59932 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:58:00.563 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59932 1 40 1 2025-11-25 08:54:03.470 00:05:08.547 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 Summary: total flows: 172, total bytes: 347700, total packets: 2072, avg bps: 722, avg pps: 0, avg bpp: 167 Time window: 2025-11-25 07:55:03 - 2025-11-25 08:59:12 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0034s User: 0.0026s Wall: 0.0026s flows/second: 65625.4 Runtime: 0.0026s