Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 14:59:07.262 00:00:10.362 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:59:07.324 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38962 9 6412 1 2025-12-01 15:00:07.658 00:00:18.426 TCP 23.104.0.1:45282 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:57:06.302 00:05:08.617 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:01:16.136 00:00:10.361 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:01:26.559 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36250 1 40 1 2025-12-01 15:02:16.538 00:00:10.365 TCP 23.104.0.1:45294 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:02:16.601 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45294 10 6452 1 2025-12-01 14:59:06.435 00:05:02.788 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 14:58:14.927 00:05:51.345 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:03:17.016 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 10 6452 1 2025-12-01 15:03:16.952 00:00:10.325 TCP 23.104.0.1:52024 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:59:31.764 00:05:10.001 OSPF 23.0.6.1:0 -> 224.0.0.5:0 43 3148 1 2025-12-01 14:59:06.282 00:06:00.152 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-01 14:59:15.548 00:05:50.795 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 14:59:06.271 00:06:00.172 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-01 15:04:17.317 00:00:10.366 TCP 23.104.0.1:51384 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:04:17.382 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51384 9 6412 1 2025-12-01 15:05:17.718 00:00:10.363 TCP 23.104.0.1:56348 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:06:18.119 00:00:10.364 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:06:28.545 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60728 1 40 1 2025-12-01 15:03:06.303 00:05:08.620 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:07:18.581 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52904 10 6452 1 2025-12-01 15:07:18.521 00:00:10.321 TCP 23.104.0.1:52904 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:08:18.878 00:00:10.366 TCP 23.104.0.1:59168 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:08:18.942 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59168 11 6516 1 2025-12-01 15:04:51.766 00:05:10.004 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2568 1 2025-12-01 15:04:14.930 00:05:51.345 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:05:06.435 00:05:02.790 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:09:19.349 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40182 10 6452 1 2025-12-01 15:09:19.288 00:00:10.366 TCP 23.104.0.1:40182 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:05:15.554 00:05:50.791 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 15:10:19.697 00:00:10.369 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:10:19.760 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52878 9 6412 1 2025-12-01 15:06:06.283 00:06:00.152 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-01 15:06:06.273 00:06:00.171 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-01 15:11:20.106 00:00:13.489 TCP 23.104.0.1:43980 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:11:33.657 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43980 1 40 1 2025-12-01 15:12:23.635 00:00:10.439 TCP 23.104.0.1:55288 -> 1.101.0.1:3000 15 1926 1 2025-12-01 15:12:23.699 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:55288 12 10369 1 2025-12-01 15:09:06.304 00:05:08.622 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:13:24.176 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54586 9 6412 1 2025-12-01 15:13:24.113 00:00:10.364 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:10:11.770 00:05:10.001 OSPF 23.0.6.1:0 -> 224.0.0.5:0 39 2852 1 2025-12-01 15:14:24.518 00:00:10.368 TCP 23.104.0.1:55596 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:14:24.581 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55596 9 6412 1 2025-12-01 15:11:06.434 00:05:02.791 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:10:14.933 00:05:51.343 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:15:24.927 00:00:10.562 TCP 23.104.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:11:15.555 00:05:50.792 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 15:16:25.530 00:00:10.414 TCP 23.104.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:16:36.044 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35966 1 40 1 2025-12-01 15:17:25.984 00:00:10.442 TCP 23.104.0.1:37548 -> 1.101.0.1:3000 15 1926 1 2025-12-01 15:13:06.285 00:06:00.150 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-01 15:13:06.274 00:06:00.171 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-01 15:18:26.460 00:00:10.365 TCP 23.104.0.1:47962 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:18:36.888 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47962 1 40 1 2025-12-01 15:15:06.306 00:05:08.620 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:19:26.861 00:00:10.371 TCP 23.104.0.1:41402 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:19:37.295 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 1 40 1 2025-12-01 15:15:31.772 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-01 15:20:27.271 00:00:10.365 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:20:27.333 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54828 9 6412 1 2025-12-01 15:16:14.936 00:05:51.340 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:17:06.435 00:05:02.791 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:21:27.672 00:00:10.368 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:21:27.735 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55754 9 6412 1 2025-12-01 15:17:15.557 00:05:50.789 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 15:22:28.085 00:00:10.432 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 15 1926 1 2025-12-01 15:22:28.168 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:54644 11 10335 1 2025-12-01 15:23:28.567 00:00:10.376 TCP 23.104.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:24:28.981 00:00:10.367 TCP 23.104.0.1:44226 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:20:51.782 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2448 1 2025-12-01 15:20:06.277 00:06:00.170 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-01 15:20:06.289 00:06:00.147 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-01 15:21:06.307 00:05:08.623 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:25:29.452 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46852 9 6412 1 2025-12-01 15:25:29.389 00:00:10.375 TCP 23.104.0.1:46852 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:26:29.805 00:00:10.395 TCP 23.104.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:26:29.867 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:43848 9 6412 1 2025-12-01 15:22:14.939 00:05:51.337 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:23:06.437 00:05:02.790 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:27:30.298 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 9 6412 1 2025-12-01 15:27:30.235 00:00:10.376 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:23:15.559 00:05:50.798 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 15:28:30.646 00:00:10.369 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:29:31.141 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:48194 10 6452 1 2025-12-01 15:29:31.078 00:00:10.451 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:26:11.788 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2920 1 2025-12-01 15:30:31.629 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 9 6412 1 2025-12-01 15:30:31.566 00:00:10.362 TCP 23.104.0.1:60248 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:27:06.307 00:05:08.623 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:31:31.968 00:00:10.366 TCP 23.104.0.1:60534 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:27:06.288 00:06:00.161 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-01 15:27:06.277 00:06:00.181 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-01 15:32:32.371 00:00:10.367 TCP 23.104.0.1:43610 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:32:32.434 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43610 9 6412 1 2025-12-01 15:28:14.940 00:05:51.338 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:29:06.450 00:05:02.781 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:33:32.774 00:00:10.371 TCP 23.104.0.1:40600 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:29:15.561 00:05:50.788 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 15:34:33.189 00:00:10.370 TCP 23.104.0.1:60968 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:31:31.797 00:05:10.005 OSPF 23.0.6.1:0 -> 224.0.0.5:0 42 2920 1 2025-12-01 15:35:33.666 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50016 10 6452 1 2025-12-01 15:35:33.603 00:00:10.365 TCP 23.104.0.1:50016 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:36:34.007 00:00:10.366 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:33:06.309 00:05:08.624 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:37:34.412 00:00:10.325 TCP 23.104.0.1:52320 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:38:34.839 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35490 10 6452 1 2025-12-01 15:38:34.776 00:00:10.363 TCP 23.104.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:34:06.278 00:06:00.182 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-01 15:34:14.941 00:05:51.338 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:34:06.289 00:06:00.162 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-01 15:35:06.450 00:05:02.781 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:39:35.239 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49788 10 6452 1 2025-12-01 15:39:35.177 00:00:10.365 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:35:15.563 00:05:50.786 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 15:40:35.578 00:00:10.367 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:40:46.009 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36716 1 40 1 2025-12-01 15:36:51.802 00:05:10.007 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2772 1 2025-12-01 15:41:35.981 00:00:10.362 TCP 23.104.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:41:36.046 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35492 10 6452 1 2025-12-01 15:42:36.385 00:00:10.365 TCP 23.104.0.1:53402 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:42:36.449 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53402 9 6412 1 2025-12-01 15:39:06.310 00:05:08.625 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:43:36.785 00:00:10.362 TCP 23.104.0.1:33084 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:43:36.847 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33084 9 6412 1 2025-12-01 15:44:37.188 00:00:10.345 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:40:14.943 00:05:51.338 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:41:06.450 00:05:02.781 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:45:37.552 00:00:10.365 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:45:47.980 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41276 1 40 1 2025-12-01 15:41:06.279 00:06:00.183 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-01 15:41:06.289 00:06:00.163 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-01 15:41:15.564 00:05:50.787 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 15:42:11.808 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2400 1 2025-12-01 15:46:37.953 00:00:10.367 TCP 23.104.0.1:41096 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:46:38.017 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41096 10 6452 1 2025-12-01 15:47:38.358 00:00:10.363 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:48:38.762 00:00:10.364 TCP 23.104.0.1:41028 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:45:06.311 00:05:08.625 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:49:39.163 00:00:10.374 TCP 23.104.0.1:47312 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:50:39.656 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 9 6412 1 2025-12-01 15:50:39.593 00:00:10.339 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:46:14.946 00:05:51.337 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:47:06.453 00:05:02.782 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:47:31.811 00:05:10.010 OSPF 23.0.6.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 15:51:40.040 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33648 9 6412 1 2025-12-01 15:51:39.976 00:00:10.361 TCP 23.104.0.1:33648 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:47:15.567 00:05:50.786 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-01 15:52:40.380 00:00:10.609 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:48:06.281 00:06:00.181 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-01 15:48:06.291 00:06:00.161 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-01 15:53:51.426 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 1 40 1 2025-12-01 15:53:41.035 00:00:10.329 TCP 23.104.0.1:33152 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:54:41.400 00:00:10.365 TCP 23.104.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:54:51.828 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 1 40 1 2025-12-01 15:51:06.312 00:05:08.627 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-01 15:55:41.808 00:00:10.337 TCP 23.104.0.1:45032 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:55:52.207 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45032 1 40 1 2025-12-01 15:56:42.187 00:00:10.370 TCP 23.104.0.1:39596 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:56:52.620 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39596 1 40 1 2025-12-01 15:52:51.821 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2944 1 2025-12-01 15:53:06.453 00:05:02.783 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-01 15:52:14.946 00:05:51.339 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-01 15:57:42.591 00:00:10.366 TCP 23.104.0.1:55736 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:57:53.022 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 1 40 1 2025-12-01 15:53:15.568 00:05:50.788 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 Summary: total flows: 168, total bytes: 357994, total packets: 2075, avg bps: 769, avg pps: 0, avg bpp: 172 Time window: 2025-12-01 14:57:06 - 2025-12-01 15:59:06 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0060s User: 0.0010s Wall: 0.0027s flows/second: 62198.2 Runtime: 0.0027s