Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 11:59:04.719 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 10 6452 1 2025-11-25 11:59:04.657 00:00:10.363 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:00:05.138 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50154 10 6452 1 2025-11-25 11:56:03.616 00:05:08.979 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:00:05.075 00:00:10.367 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:01:05.481 00:00:10.368 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:01:05.543 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53834 9 6412 1 2025-11-25 11:57:03.547 00:06:00.090 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 11:58:03.576 00:05:08.522 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:02:05.889 00:00:10.344 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-11-25 11:58:49.797 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 33 2256 1 2025-11-25 11:59:03.627 00:05:02.508 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:03:06.272 00:00:10.363 TCP 23.104.0.1:47740 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:00:03.547 00:05:08.562 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:04:06.669 00:00:10.323 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:04:06.734 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45890 9 6412 1 2025-11-25 12:00:03.556 00:06:00.077 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 12:05:07.038 00:00:10.331 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:02:03.618 00:05:08.980 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:06:07.399 00:00:10.401 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:06:17.863 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52278 1 40 1 2025-11-25 12:07:07.838 00:00:10.377 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:07:18.276 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58858 1 40 1 2025-11-25 12:04:03.579 00:05:08.520 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:08:08.264 00:00:10.362 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:08:08.329 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52072 9 6412 1 2025-11-25 12:04:09.804 00:05:10.076 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2824 1 2025-11-25 12:04:03.549 00:06:00.096 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 12:05:03.633 00:05:02.502 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:09:08.670 00:00:10.364 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:09:08.733 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42040 9 6412 1 2025-11-25 12:06:03.550 00:05:08.561 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:10:19.471 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46030 1 40 1 2025-11-25 12:10:09.081 00:00:10.327 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:11:09.449 00:00:10.380 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:07:03.560 00:06:00.075 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 12:08:03.620 00:05:08.980 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:12:09.860 00:00:11.290 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:12:09.924 00:00:11.290 TCP 1.101.0.1:3000 -> 23.104.0.1:35338 11 6516 1 2025-11-25 12:13:11.187 00:00:10.363 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:13:11.250 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53046 9 6412 1 2025-11-25 12:09:29.812 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2672 1 2025-11-25 12:10:03.580 00:05:08.520 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:14:11.588 00:00:10.370 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:11:03.635 00:05:02.502 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:15:11.994 00:00:10.343 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:11:03.551 00:06:00.095 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 12:12:03.550 00:05:08.562 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:16:12.370 00:00:10.362 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:16:12.432 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39180 10 6452 1 2025-11-25 12:17:12.765 00:00:10.343 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:17:12.827 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:58936 9 6412 1 2025-11-25 12:14:03.622 00:05:08.980 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:18:13.145 00:00:10.364 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:18:13.208 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47808 10 6452 1 2025-11-25 12:14:03.561 00:06:00.075 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 12:14:49.821 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2804 1 2025-11-25 12:19:13.546 00:00:10.362 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:16:03.581 00:05:08.521 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:20:14.011 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34138 9 6412 1 2025-11-25 12:20:13.947 00:00:10.371 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:17:03.636 00:05:02.502 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:21:14.356 00:00:10.363 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:21:14.419 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40174 9 6412 1 2025-11-25 12:18:03.550 00:05:08.562 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:22:14.760 00:00:10.368 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:22:25.189 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38832 1 40 1 2025-11-25 12:18:03.551 00:06:00.095 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 12:23:15.230 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-11-25 12:23:15.166 00:00:10.324 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:20:09.830 00:05:00.367 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2460 1 2025-11-25 12:20:03.623 00:05:08.980 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:24:15.595 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39078 9 6412 1 2025-11-25 12:24:15.532 00:00:10.361 TCP 23.104.0.1:39078 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:25:15.931 00:00:10.367 TCP 23.104.0.1:51074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:25:26.361 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51074 1 40 1 2025-11-25 12:21:03.562 00:06:00.075 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 12:22:03.583 00:05:08.521 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:26:16.331 00:00:10.364 TCP 23.104.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:26:16.393 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36178 10 6452 1 2025-11-25 12:23:03.638 00:05:02.503 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:27:16.740 00:00:10.380 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:27:16.802 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53852 10 6452 1 2025-11-25 12:24:03.554 00:05:08.562 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:28:27.590 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41570 1 40 1 2025-11-25 12:28:17.159 00:00:10.367 TCP 23.104.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:29:17.628 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58062 10 6452 1 2025-11-25 12:29:17.565 00:00:10.363 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:25:19.837 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2624 1 2025-11-25 12:25:03.554 00:06:00.094 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 12:26:03.624 00:05:08.980 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:30:17.968 00:00:10.888 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:30:18.030 00:00:10.888 TCP 1.101.0.1:3000 -> 23.104.0.1:37496 9 6412 1 2025-11-25 12:31:29.343 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55664 1 40 1 2025-11-25 12:31:18.892 00:00:10.388 TCP 23.104.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:28:03.586 00:05:08.529 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:32:19.317 00:00:10.372 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:28:03.566 00:06:00.072 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 12:29:03.637 00:05:02.505 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:33:19.728 00:00:10.692 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:30:03.557 00:05:08.563 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:34:20.466 00:00:10.367 TCP 23.104.0.1:58770 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:34:20.529 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58770 9 6412 1 2025-11-25 12:30:39.846 00:05:10.010 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2572 1 2025-11-25 12:35:20.872 00:00:10.728 TCP 23.104.0.1:57750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:35:20.935 00:00:10.728 TCP 1.101.0.1:3000 -> 23.104.0.1:57750 11 6516 1 2025-11-25 12:32:03.627 00:05:08.979 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:36:21.636 00:00:10.452 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:32:03.557 00:06:00.093 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 12:37:22.127 00:00:10.360 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:37:32.550 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37486 1 40 1 2025-11-25 12:34:03.587 00:05:08.522 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:38:22.589 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33692 10 6452 1 2025-11-25 12:38:22.527 00:00:10.358 TCP 23.104.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:35:03.638 00:05:02.505 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:39:22.924 00:00:10.373 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:35:03.568 00:06:00.072 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 12:35:59.855 00:05:10.603 OSPF 23.0.6.1:0 -> 224.0.0.5:0 42 2932 1 2025-11-25 12:36:03.558 00:05:08.561 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:40:23.334 00:00:10.371 TCP 23.104.0.1:42646 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:41:23.738 00:00:10.372 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:41:23.801 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-11-25 12:38:03.629 00:05:08.980 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:42:24.149 00:00:10.335 TCP 23.104.0.1:46776 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:42:34.546 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46776 1 40 1 2025-11-25 12:43:34.966 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38016 1 40 1 2025-11-25 12:43:24.534 00:00:10.371 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:39:03.559 00:06:00.092 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 12:40:03.593 00:05:08.518 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:44:24.940 00:00:10.376 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:44:25.004 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52132 10 6452 1 2025-11-25 12:41:03.641 00:05:02.505 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:45:25.350 00:00:10.364 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:41:19.869 00:05:10.002 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2708 1 2025-11-25 12:45:35.777 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59556 1 40 1 2025-11-25 12:42:03.564 00:05:08.560 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:46:25.747 00:00:10.372 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:46:25.811 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47404 9 6412 1 2025-11-25 12:42:03.572 00:06:00.069 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 12:47:26.163 00:00:10.327 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:47:26.227 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:45128 9 6412 1 2025-11-25 12:44:03.633 00:05:08.978 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:48:26.588 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43062 9 6412 1 2025-11-25 12:48:26.525 00:00:10.359 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:49:26.930 00:00:10.321 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:49:37.316 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54406 1 40 1 2025-11-25 12:46:03.592 00:05:08.521 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:50:27.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40990 9 6412 1 2025-11-25 12:50:27.293 00:00:10.367 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:46:39.872 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-25 12:46:03.563 00:06:00.089 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 12:47:03.641 00:05:02.504 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:51:27.694 00:00:11.033 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:48:03.563 00:05:08.561 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:52:39.194 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54648 1 40 1 2025-11-25 12:52:28.767 00:00:10.366 TCP 23.104.0.1:54648 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:53:29.175 00:00:10.363 TCP 23.104.0.1:59094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:49:03.573 00:06:00.073 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 12:50:03.634 00:05:08.978 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 12:54:29.639 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-11-25 12:54:29.577 00:00:10.324 TCP 23.104.0.1:38466 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:55:29.950 00:00:10.366 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:55:30.014 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51164 10 6452 1 2025-11-25 12:52:03.594 00:05:08.520 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 12:51:59.878 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2768 1 2025-11-25 12:56:30.353 00:00:10.431 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:53:03.646 00:05:02.502 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 12:57:30.889 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51260 10 6452 1 2025-11-25 12:57:30.826 00:00:10.371 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:53:03.564 00:06:00.102 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 12:54:03.564 00:05:08.561 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 12:58:31.242 00:00:10.362 TCP 23.104.0.1:60538 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 172, total bytes: 365098, total packets: 2114, avg bps: 770, avg pps: 0, avg bpp: 172 Time window: 2025-11-25 11:56:03 - 2025-11-25 12:59:12 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0042s User: 0.0011s Wall: 0.0027s flows/second: 64274.8 Runtime: 0.0027s