Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 09:59:18.949 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59450 1 40 1 2025-12-05 09:59:08.081 00:00:10.805 TCP 23.104.0.1:59450 -> 1.101.0.1:3000 11 1507 1 2025-12-05 09:55:16.669 00:05:51.465 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 09:55:08.104 00:06:00.075 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:00:08.923 00:00:10.366 TCP 23.104.0.1:35302 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:01:09.331 00:00:10.361 TCP 23.104.0.1:49636 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:01:09.394 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49636 10 6452 1 2025-12-05 09:57:16.679 00:05:51.425 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 09:57:17.449 00:05:50.726 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:02:09.733 00:00:10.383 TCP 23.104.0.1:52174 -> 1.101.0.1:3000 11 1507 1 2025-12-05 09:58:49.333 00:05:10.000 OSPF 23.0.6.1:0 -> 224.0.0.5:0 42 3088 1 2025-12-05 09:58:08.114 00:06:00.056 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-05 09:59:08.167 00:05:03.021 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:03:10.219 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48298 10 6452 1 2025-12-05 10:03:10.156 00:00:10.373 TCP 23.104.0.1:48298 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:04:10.565 00:00:10.370 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:04:10.627 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-12-05 10:05:10.971 00:00:10.359 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:01:16.670 00:05:51.465 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:06:11.380 00:00:10.367 TCP 23.104.0.1:60250 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:02:08.104 00:06:00.078 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:07:11.782 00:00:10.370 TCP 23.104.0.1:54596 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:03:17.451 00:05:50.724 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:03:16.683 00:05:51.422 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:08:12.189 00:00:10.325 TCP 23.104.0.1:40062 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:08:22.577 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40062 1 40 1 2025-12-05 10:04:09.332 00:05:10.010 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2448 1 2025-12-05 10:05:08.171 00:05:03.019 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:09:12.548 00:00:10.365 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:05:08.115 00:06:00.060 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-05 10:10:12.951 00:00:10.385 TCP 23.104.0.1:39372 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:10:13.016 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39372 10 6452 1 2025-12-05 10:11:13.388 00:00:10.367 TCP 23.104.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:07:16.674 00:05:51.467 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:12:24.218 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 1 40 1 2025-12-05 10:12:13.808 00:00:10.348 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:13:14.260 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55012 9 6412 1 2025-12-05 10:13:14.198 00:00:10.369 TCP 23.104.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:09:29.344 00:05:10.010 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2520 1 2025-12-05 10:09:08.105 00:06:00.080 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:09:16.684 00:05:51.422 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:09:17.452 00:05:50.725 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:14:14.606 00:00:10.368 TCP 23.104.0.1:57676 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:14:25.038 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57676 1 40 1 2025-12-05 10:11:08.175 00:05:03.016 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:15:25.440 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36628 1 40 1 2025-12-05 10:15:15.010 00:00:10.367 TCP 23.104.0.1:36628 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:16:15.413 00:00:10.362 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:12:08.116 00:06:00.060 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-05 10:17:15.812 00:00:10.351 TCP 23.104.0.1:44718 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:13:16.677 00:05:51.461 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:18:16.206 00:00:10.361 TCP 23.104.0.1:47012 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:14:49.354 00:05:10.011 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2508 1 2025-12-05 10:19:16.669 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40174 9 6412 1 2025-12-05 10:19:16.606 00:00:10.363 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:15:16.689 00:05:51.419 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:15:17.453 00:05:50.725 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:20:17.071 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37430 9 6412 1 2025-12-05 10:20:17.008 00:00:10.324 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:16:08.109 00:06:00.079 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:17:08.175 00:05:03.018 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:21:17.371 00:00:10.367 TCP 23.104.0.1:44914 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:21:17.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44914 9 6412 1 2025-12-05 10:22:28.213 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37094 1 40 1 2025-12-05 10:22:17.776 00:00:10.374 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:23:28.571 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 1 40 1 2025-12-05 10:23:18.186 00:00:10.322 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:19:16.680 00:05:51.459 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:19:08.118 00:06:00.059 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-05 10:20:09.365 00:05:10.009 OSPF 23.0.6.1:0 -> 224.0.0.5:0 41 2832 1 2025-12-05 10:24:18.549 00:00:10.361 TCP 23.104.0.1:44724 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:25:18.949 00:00:10.323 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:21:17.455 00:05:50.726 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:21:16.691 00:05:51.419 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:26:19.310 00:00:10.365 TCP 23.104.0.1:53614 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:23:08.177 00:05:03.017 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:27:19.777 00:00:10.501 TCP 1.101.0.1:3000 -> 23.104.0.1:52712 10 6452 1 2025-12-05 10:27:19.713 00:00:10.501 TCP 23.104.0.1:52712 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:23:08.108 00:06:00.080 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:28:20.260 00:00:10.365 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:28:30.688 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 1 40 1 2025-12-05 10:29:20.667 00:00:10.322 TCP 23.104.0.1:40964 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:29:31.051 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40964 1 40 1 2025-12-05 10:25:29.375 00:05:10.008 OSPF 23.0.6.1:0 -> 224.0.0.5:0 41 3088 1 2025-12-05 10:25:16.681 00:05:51.463 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:30:21.034 00:00:10.324 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:26:08.120 00:06:00.060 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-05 10:31:21.463 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60748 10 6452 1 2025-12-05 10:31:21.399 00:00:10.363 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:27:16.692 00:05:51.423 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:27:17.456 00:05:50.729 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:32:21.804 00:00:10.345 TCP 23.104.0.1:50984 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:32:21.867 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:50984 9 6412 1 2025-12-05 10:29:08.178 00:05:03.023 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:33:32.694 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60042 1 40 1 2025-12-05 10:33:22.191 00:00:10.440 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 15 1926 1 2025-12-05 10:34:22.673 00:00:10.321 TCP 23.104.0.1:49888 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:30:49.382 00:05:10.058 OSPF 23.0.6.1:0 -> 224.0.0.5:0 38 2608 1 2025-12-05 10:30:08.113 00:06:00.077 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:35:23.060 00:00:10.363 TCP 23.104.0.1:49450 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:31:16.683 00:05:51.461 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:36:23.459 00:00:10.368 TCP 23.104.0.1:46568 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:36:33.891 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46568 1 40 1 2025-12-05 10:37:23.864 00:00:10.371 TCP 23.104.0.1:43202 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:37:34.299 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43202 1 40 1 2025-12-05 10:33:16.693 00:05:51.421 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:33:08.123 00:06:00.058 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-05 10:33:17.458 00:05:50.726 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:38:24.273 00:00:10.363 TCP 23.104.0.1:35546 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:35:08.180 00:05:03.023 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:39:24.740 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54416 9 6412 1 2025-12-05 10:39:24.678 00:00:10.363 TCP 23.104.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:35:59.828 00:05:09.569 OSPF 23.0.6.1:0 -> 224.0.0.5:0 36 2500 1 2025-12-05 10:40:25.083 00:00:10.371 TCP 23.104.0.1:52914 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:41:25.495 00:00:10.326 TCP 23.104.0.1:38576 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:37:08.114 00:06:00.079 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:37:16.686 00:05:51.459 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:42:25.922 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57238 12 6556 1 2025-12-05 10:42:25.860 00:00:10.377 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:43:26.357 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35638 10 6452 1 2025-12-05 10:43:26.294 00:00:10.327 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:39:17.460 00:05:50.727 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:39:16.697 00:05:51.419 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:44:26.665 00:00:10.365 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:40:08.125 00:06:00.060 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-05 10:41:08.182 00:05:03.023 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:45:27.074 00:00:10.367 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:41:19.397 00:05:10.006 OSPF 23.0.6.1:0 -> 224.0.0.5:0 35 2524 1 2025-12-05 10:45:37.505 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41872 1 40 1 2025-12-05 10:46:27.485 00:00:10.371 TCP 23.104.0.1:51504 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:47:27.894 00:00:10.646 TCP 23.104.0.1:51934 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:47:27.958 00:00:10.646 TCP 1.101.0.1:3000 -> 23.104.0.1:51934 10 6452 1 2025-12-05 10:43:16.687 00:05:51.459 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:48:28.576 00:00:10.366 TCP 23.104.0.1:58704 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:44:08.116 00:06:00.079 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:49:28.983 00:00:10.368 TCP 23.104.0.1:36310 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:49:39.414 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 1 40 1 2025-12-05 10:45:16.698 00:05:51.418 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:45:17.463 00:05:50.723 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:50:39.821 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57784 1 40 1 2025-12-05 10:50:29.390 00:00:10.367 TCP 23.104.0.1:57784 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:46:39.404 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 40 2812 1 2025-12-05 10:47:08.184 00:05:03.020 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:51:29.794 00:00:10.326 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:51:29.857 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 9 6412 1 2025-12-05 10:47:08.126 00:06:00.060 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-12-05 10:52:30.157 00:00:10.362 TCP 23.104.0.1:44740 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:52:30.222 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44740 9 6412 1 2025-12-05 10:53:30.560 00:00:10.370 TCP 23.104.0.1:47336 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:49:16.688 00:05:51.459 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-12-05 10:54:30.965 00:00:10.520 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:55:31.584 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:59784 10 6452 1 2025-12-05 10:55:31.521 00:00:10.417 TCP 23.104.0.1:59784 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:51:08.117 00:06:00.079 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-12-05 10:51:16.700 00:05:51.417 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-12-05 10:51:17.467 00:05:50.721 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-12-05 10:51:59.406 00:05:10.003 OSPF 23.0.6.1:0 -> 224.0.0.5:0 37 2644 1 2025-12-05 10:56:42.404 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48738 1 40 1 2025-12-05 10:56:31.977 00:00:10.364 TCP 23.104.0.1:48738 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:53:08.185 00:05:03.021 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-12-05 10:57:32.381 00:00:10.361 TCP 23.104.0.1:43416 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:57:42.817 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43416 1 40 1 2025-12-05 10:58:32.851 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-12-05 10:58:32.788 00:00:10.358 TCP 23.104.0.1:52976 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 287620, total packets: 2000, avg bps: 603, avg pps: 0, avg bpp: 143 Time window: 2025-12-05 09:55:08 - 2025-12-05 10:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0022s Wall: 0.0022s flows/second: 73773.7 Runtime: 0.0022s