Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 09:59:15.900 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45264 10 6452 1 2025-11-30 09:59:15.839 00:00:10.370 TCP 23.104.0.1:45264 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:00:16.239 00:00:10.325 TCP 23.104.0.1:41200 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:00:26.626 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41200 1 40 1 2025-11-30 09:56:05.762 00:06:00.146 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 09:57:05.792 00:05:08.569 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:01:16.606 00:00:10.365 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:02:17.008 00:00:10.324 TCP 23.104.0.1:58022 -> 1.101.0.1:3000 11 1507 1 2025-11-30 09:58:29.425 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 44 3256 1 2025-11-30 09:59:05.897 00:05:02.753 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 09:59:05.762 00:05:08.609 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:03:17.372 00:00:10.376 TCP 23.104.0.1:60358 -> 1.101.0.1:3000 11 1507 1 2025-11-30 09:59:05.772 00:06:00.126 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-30 10:00:05.834 00:05:09.175 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:04:17.839 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55858 9 6412 1 2025-11-30 10:04:17.776 00:00:10.368 TCP 23.104.0.1:55858 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:05:18.180 00:00:10.362 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:06:18.584 00:00:10.375 TCP 23.104.0.1:59194 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:06:18.647 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59194 10 6452 1 2025-11-30 10:03:05.795 00:05:08.566 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:07:18.992 00:00:10.364 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:03:49.431 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2768 1 2025-11-30 10:03:05.767 00:06:00.142 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 10:08:19.398 00:00:11.025 TCP 23.104.0.1:55764 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:08:30.488 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55764 1 40 1 2025-11-30 10:05:05.899 00:05:02.753 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:05:05.766 00:05:08.607 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:09:20.523 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35336 10 6452 1 2025-11-30 10:09:20.460 00:00:10.328 TCP 23.104.0.1:35336 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:06:05.837 00:05:09.173 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:10:20.823 00:00:10.382 TCP 23.104.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:06:05.777 00:06:00.123 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-30 10:11:21.307 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42526 9 6412 1 2025-11-30 10:11:21.246 00:00:10.370 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:12:21.650 00:00:10.323 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:12:21.714 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53834 9 6412 1 2025-11-30 10:09:05.797 00:05:08.566 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:09:09.440 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-30 10:13:22.021 00:00:10.366 TCP 23.104.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:14:22.428 00:00:10.365 TCP 23.104.0.1:36124 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:14:22.490 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36124 12 6556 1 2025-11-30 10:10:05.767 00:06:00.146 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 10:11:05.900 00:05:02.753 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:11:05.768 00:05:08.607 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:15:22.830 00:00:10.766 TCP 23.104.0.1:54158 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:15:22.893 00:00:10.767 TCP 1.101.0.1:3000 -> 23.104.0.1:54158 10 6452 1 2025-11-30 10:12:05.840 00:05:09.171 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:16:23.635 00:00:10.368 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:16:34.066 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48022 1 40 1 2025-11-30 10:17:24.066 00:00:10.436 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 15 1926 1 2025-11-30 10:17:34.566 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59500 1 40 1 2025-11-30 10:13:05.777 00:06:00.126 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-30 10:18:24.542 00:00:10.367 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:18:24.605 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33570 10 6452 1 2025-11-30 10:14:29.450 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-30 10:15:05.798 00:05:08.567 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:19:24.949 00:00:10.367 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:19:35.379 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32872 1 40 1 2025-11-30 10:20:25.360 00:00:10.366 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:20:25.423 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 9 6412 1 2025-11-30 10:17:05.904 00:05:02.753 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:17:05.769 00:05:08.607 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:21:25.763 00:00:10.363 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:21:25.826 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45426 9 6412 1 2025-11-30 10:17:05.769 00:06:00.145 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 10:18:05.839 00:05:09.172 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:22:26.235 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50934 10 6452 1 2025-11-30 10:22:26.172 00:00:10.373 TCP 23.104.0.1:50934 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:23:26.583 00:00:10.369 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:19:49.455 00:05:10.010 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-30 10:24:26.996 00:00:10.374 TCP 23.104.0.1:46160 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:20:05.780 00:06:00.125 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-30 10:21:05.800 00:05:08.567 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:25:27.477 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50850 10 6452 1 2025-11-30 10:25:27.413 00:00:10.366 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:26:27.817 00:00:10.389 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:26:27.880 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:47682 10 6452 1 2025-11-30 10:23:05.904 00:05:02.753 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:23:05.771 00:05:08.615 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:27:28.243 00:00:10.369 TCP 23.104.0.1:39240 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:24:05.841 00:05:09.172 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:28:28.651 00:00:10.324 TCP 23.104.0.1:50270 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:24:05.771 00:06:00.147 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 10:25:09.463 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 43 3128 1 2025-11-30 10:29:29.020 00:00:10.360 TCP 23.104.0.1:58328 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:29:39.443 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58328 1 40 1 2025-11-30 10:30:39.971 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53094 1 40 1 2025-11-30 10:30:29.425 00:00:10.483 TCP 23.104.0.1:53094 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:27:05.803 00:05:08.575 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:31:29.946 00:00:10.366 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:27:05.784 00:06:00.126 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-30 10:32:40.861 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54082 1 40 1 2025-11-30 10:32:30.350 00:00:10.448 TCP 23.104.0.1:54082 -> 1.101.0.1:3000 15 1926 1 2025-11-30 10:29:05.908 00:05:02.753 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:29:05.774 00:05:08.614 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:33:30.834 00:00:10.331 TCP 23.104.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:30:05.845 00:05:09.168 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:34:31.202 00:00:10.326 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:30:29.470 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-30 10:34:41.591 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 1 40 1 2025-11-30 10:35:41.995 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47236 1 40 1 2025-11-30 10:35:31.565 00:00:10.367 TCP 23.104.0.1:47236 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:31:05.776 00:06:00.144 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 10:36:32.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47088 9 6412 1 2025-11-30 10:36:31.971 00:00:10.371 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:33:05.808 00:05:08.570 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:37:32.445 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47530 10 6452 1 2025-11-30 10:37:32.384 00:00:10.328 TCP 23.104.0.1:47530 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:38:32.807 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:41754 9 6412 1 2025-11-30 10:38:32.744 00:00:10.331 TCP 23.104.0.1:41754 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:34:05.788 00:06:00.123 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-30 10:35:05.910 00:05:02.751 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:35:05.778 00:05:08.611 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:39:33.115 00:00:10.371 TCP 23.104.0.1:39488 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:39:33.180 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39488 10 6452 1 2025-11-30 10:35:49.479 00:05:10.015 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2708 1 2025-11-30 10:36:05.848 00:05:09.167 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:40:33.527 00:00:10.327 TCP 23.104.0.1:57066 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:40:33.590 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57066 10 6452 1 2025-11-30 10:41:33.890 00:00:10.349 TCP 23.104.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:42:34.278 00:00:10.330 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:42:34.341 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:57072 9 6412 1 2025-11-30 10:38:05.777 00:06:00.144 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 10:39:05.809 00:05:08.574 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:43:34.643 00:00:10.363 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:43:45.068 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 1 40 1 2025-11-30 10:44:35.071 00:00:10.365 TCP 23.104.0.1:44186 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:44:35.134 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44186 10 6452 1 2025-11-30 10:41:05.910 00:05:02.752 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:41:05.779 00:05:08.612 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:41:09.493 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-30 10:45:35.541 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41238 9 6412 1 2025-11-30 10:45:35.477 00:00:10.365 TCP 23.104.0.1:41238 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:41:05.790 00:06:00.122 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-30 10:42:05.850 00:05:09.166 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:46:35.886 00:00:10.363 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:46:46.312 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 1 40 1 2025-11-30 10:47:36.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54418 9 6412 1 2025-11-30 10:47:36.287 00:00:10.366 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:48:47.084 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 1 40 1 2025-11-30 10:48:36.691 00:00:10.330 TCP 23.104.0.1:37012 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:45:05.810 00:05:08.572 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:49:47.545 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36132 1 40 1 2025-11-30 10:49:37.080 00:00:10.402 TCP 23.104.0.1:36132 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:45:05.780 00:06:00.142 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 10:46:29.499 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-30 10:50:37.522 00:00:10.372 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:50:37.585 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 10 6464 1 2025-11-30 10:47:05.912 00:05:02.751 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:47:05.780 00:05:08.612 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:51:37.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38874 10 6452 1 2025-11-30 10:51:37.934 00:00:10.367 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:48:05.856 00:05:09.163 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-30 10:52:38.351 00:00:10.431 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:48:05.795 00:06:00.118 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-30 10:53:38.825 00:00:10.379 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:54:49.622 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35074 1 40 1 2025-11-30 10:54:39.237 00:00:10.323 TCP 23.104.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:51:05.815 00:05:08.568 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-30 10:55:39.598 00:00:10.360 TCP 23.104.0.1:43512 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:51:49.507 00:05:10.004 OSPF 23.0.6.1:0 -> 224.0.0.5:0 44 3208 1 2025-11-30 10:56:39.998 00:00:10.358 TCP 23.104.0.1:33462 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:56:50.419 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33462 1 40 1 2025-11-30 10:53:05.914 00:05:02.752 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-30 10:52:05.785 00:06:00.139 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-30 10:53:05.785 00:05:08.610 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-30 10:57:40.395 00:00:10.368 TCP 23.104.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:54:05.857 00:05:09.162 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 Summary: total flows: 168, total bytes: 325564, total packets: 2056, avg bps: 687, avg pps: 0, avg bpp: 158 Time window: 2025-11-30 09:56:05 - 2025-11-30 10:59:15 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0036s User: 0.0018s Wall: 0.0025s flows/second: 66905.0 Runtime: 0.0025s