Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 04:59:06.985 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52474 10 6452 1 2025-11-10 04:59:06.922 00:00:10.366 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2025-11-10 04:55:54.466 00:05:00.897 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 04:55:55.364 00:05:02.958 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:00:07.324 00:00:10.375 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:00:07.387 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43246 10 6452 1 2025-11-10 04:56:03.803 00:05:50.684 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 04:56:59.071 00:05:10.003 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-10 05:01:07.735 00:00:10.387 TCP 23.104.0.1:38106 -> 1.101.0.1:3000 11 1507 1 2025-11-10 04:57:03.813 00:05:50.644 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 04:57:54.456 00:05:00.918 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:02:08.146 00:00:10.366 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:03:18.941 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59858 1 40 1 2025-11-10 05:03:08.549 00:00:10.329 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-11-10 04:59:04.840 00:05:49.686 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:04:19.361 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37100 1 40 1 2025-11-10 05:04:08.912 00:00:10.386 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:05:09.330 00:00:10.363 TCP 23.104.0.1:59898 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:05:09.393 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59898 9 6412 1 2025-11-10 05:01:54.466 00:05:00.899 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:01:55.363 00:05:02.959 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:06:09.731 00:00:10.374 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:06:09.794 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36942 9 6412 1 2025-11-10 05:02:19.074 00:05:10.002 OSPF 23.0.6.2:0 -> 224.0.0.5:0 38 2776 1 2025-11-10 05:02:03.804 00:05:50.684 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:07:20.574 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35142 1 40 1 2025-11-10 05:07:10.143 00:00:10.368 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:03:03.816 00:05:50.643 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:03:54.457 00:05:00.920 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:08:10.547 00:00:10.443 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 15 1926 1 2025-11-10 05:08:21.055 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43378 1 40 1 2025-11-10 05:09:11.036 00:00:10.363 TCP 23.104.0.1:32920 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:09:11.099 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32920 10 6452 1 2025-11-10 05:05:04.841 00:05:49.687 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:10:11.433 00:00:10.366 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:11:11.834 00:00:10.383 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:11:11.897 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53592 9 6412 1 2025-11-10 05:07:39.077 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-10 05:07:54.469 00:05:00.897 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:07:55.366 00:05:02.958 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:12:12.255 00:00:10.363 TCP 23.104.0.1:55926 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:08:03.807 00:05:50.684 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:13:12.653 00:00:10.368 TCP 23.104.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:09:03.817 00:05:50.642 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:09:54.458 00:05:00.919 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:14:13.071 00:00:10.366 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:14:13.134 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53522 9 6412 1 2025-11-10 05:15:13.473 00:00:10.367 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:15:23.904 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 1 40 1 2025-11-10 05:11:04.844 00:05:49.687 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:16:24.306 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39134 1 40 1 2025-11-10 05:16:13.878 00:00:10.367 TCP 23.104.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:12:59.080 00:05:10.003 OSPF 23.0.6.2:0 -> 224.0.0.5:0 38 2676 1 2025-11-10 05:17:14.282 00:00:10.368 TCP 23.104.0.1:52504 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:17:24.714 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52504 1 40 1 2025-11-10 05:13:54.470 00:05:00.898 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:13:55.366 00:05:02.959 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:18:14.750 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34486 9 6412 1 2025-11-10 05:18:14.686 00:00:10.376 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:14:03.808 00:05:50.683 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:19:15.097 00:00:10.324 TCP 23.104.0.1:53962 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:19:15.161 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53962 9 6412 1 2025-11-10 05:15:03.819 00:05:50.642 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:15:54.460 00:05:00.919 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:20:15.460 00:00:10.370 TCP 23.104.0.1:41730 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:21:15.878 00:00:10.374 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:17:04.844 00:05:49.686 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:18:19.084 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-10 05:22:16.302 00:00:10.327 TCP 23.104.0.1:48160 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:23:16.669 00:00:10.364 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:23:16.732 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57462 10 6452 1 2025-11-10 05:19:54.471 00:05:00.899 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:19:55.369 00:05:02.957 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:24:17.081 00:00:10.327 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:20:03.809 00:05:50.684 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:25:17.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44388 10 6452 1 2025-11-10 05:25:17.448 00:00:10.366 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:21:03.820 00:05:50.643 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:21:54.461 00:05:00.919 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:26:17.869 00:00:10.374 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:27:18.356 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37876 9 6412 1 2025-11-10 05:27:18.294 00:00:10.326 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:23:39.087 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-10 05:23:04.846 00:05:49.687 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:28:18.658 00:00:10.367 TCP 23.104.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:28:29.088 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37482 1 40 1 2025-11-10 05:29:19.072 00:00:10.335 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:25:54.472 00:05:00.898 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:25:55.369 00:05:02.961 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:30:19.503 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36640 10 6452 1 2025-11-10 05:30:19.440 00:00:10.369 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:26:03.811 00:05:50.684 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:31:19.844 00:00:10.363 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:31:19.907 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44736 10 6452 1 2025-11-10 05:27:03.821 00:05:50.643 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:27:54.463 00:05:00.917 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:32:20.309 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47164 10 6452 1 2025-11-10 05:32:20.247 00:00:10.366 TCP 23.104.0.1:47164 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:28:59.093 00:05:10.008 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2584 1 2025-11-10 05:33:20.657 00:00:10.330 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:29:04.846 00:05:49.688 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:34:31.417 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58060 1 40 1 2025-11-10 05:34:21.030 00:00:10.324 TCP 23.104.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:35:21.462 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59782 9 6412 1 2025-11-10 05:35:21.400 00:00:10.373 TCP 23.104.0.1:59782 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:31:54.473 00:05:00.897 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:31:55.369 00:05:02.962 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:36:32.270 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:43860 1 40 1 2025-11-10 05:36:21.814 00:00:10.392 TCP 23.104.0.1:43860 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:32:03.813 00:05:50.684 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:37:22.307 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 9 6412 1 2025-11-10 05:37:22.245 00:00:10.362 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:33:03.826 00:05:50.640 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:33:54.464 00:05:00.917 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:34:19.100 00:05:10.002 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2632 1 2025-11-10 05:38:22.644 00:00:10.393 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:39:23.145 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42224 12 6556 1 2025-11-10 05:39:23.082 00:00:10.371 TCP 23.104.0.1:42224 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:35:04.849 00:05:49.687 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:40:23.491 00:00:10.371 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:41:23.903 00:00:10.380 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:37:54.476 00:05:00.898 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:37:55.370 00:05:02.965 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:42:24.386 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37820 10 6452 1 2025-11-10 05:42:24.323 00:00:10.328 TCP 23.104.0.1:37820 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:38:03.817 00:05:50.680 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:43:24.693 00:00:10.381 TCP 23.104.0.1:36440 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:43:24.754 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36440 9 6412 1 2025-11-10 05:39:39.103 00:05:10.001 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-10 05:39:03.825 00:05:50.641 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:39:54.465 00:05:00.918 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:44:25.108 00:00:10.365 TCP 23.104.0.1:54338 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:44:25.170 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54338 10 6452 1 2025-11-10 05:45:25.567 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59142 9 6412 1 2025-11-10 05:45:25.506 00:00:10.323 TCP 23.104.0.1:59142 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:41:04.850 00:05:49.687 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:46:25.930 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 9 6412 1 2025-11-10 05:46:25.867 00:00:10.331 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:47:26.237 00:00:10.366 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:47:26.301 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36276 10 6452 1 2025-11-10 05:43:54.476 00:05:00.900 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:43:55.373 00:05:02.963 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:48:26.641 00:00:10.360 TCP 23.104.0.1:58322 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:44:03.817 00:05:50.680 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:44:59.104 00:05:10.005 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2516 1 2025-11-10 05:49:37.488 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45346 1 40 1 2025-11-10 05:49:27.065 00:00:10.361 TCP 23.104.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:45:03.827 00:05:50.640 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:45:54.466 00:05:00.924 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:50:27.466 00:00:10.330 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:51:27.833 00:00:10.384 TCP 23.104.0.1:40570 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:47:04.850 00:05:49.688 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:52:28.254 00:00:10.371 TCP 23.104.0.1:58636 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:52:28.317 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6452 1 2025-11-10 05:53:28.733 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43726 10 6452 1 2025-11-10 05:53:28.670 00:00:10.333 TCP 23.104.0.1:43726 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:49:54.479 00:05:00.899 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-10 05:49:55.378 00:05:02.962 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-10 05:50:19.108 00:05:10.007 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-10 05:54:29.075 00:00:10.364 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:54:39.503 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 1 40 1 2025-11-10 05:50:03.821 00:05:50.680 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-10 05:55:29.476 00:00:10.377 TCP 23.104.0.1:40970 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:51:03.830 00:05:50.639 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-10 05:51:54.468 00:05:00.919 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-10 05:56:29.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34164 9 6412 1 2025-11-10 05:56:29.921 00:00:10.364 TCP 23.104.0.1:34164 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:57:40.758 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40114 1 40 1 2025-11-10 05:57:30.330 00:00:10.366 TCP 23.104.0.1:40114 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:53:04.852 00:05:49.687 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-10 05:58:30.730 00:00:10.381 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 171, total bytes: 337571, total packets: 2054, avg bps: 714, avg pps: 0, avg bpp: 164 Time window: 2025-11-10 04:55:54 - 2025-11-10 05:58:54 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0037s User: 0.0028s Wall: 0.0029s flows/second: 58301.6 Runtime: 0.0030s