Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 04:59:33.447 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47210 9 6412 1 2025-11-12 04:59:33.386 00:00:10.366 TCP 23.104.0.1:47210 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:55:56.300 00:05:03.131 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 04:55:55.347 00:05:09.579 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:00:33.787 00:00:10.365 TCP 23.104.0.1:48756 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:56:55.317 00:05:00.996 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 04:56:55.317 00:05:09.620 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:01:34.193 00:00:10.793 TCP 23.104.0.1:48598 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:57:55.328 00:05:00.975 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:02:35.036 00:00:10.364 TCP 23.104.0.1:56040 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:02:35.098 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 9 6412 1 2025-11-12 04:58:52.814 00:05:10.023 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2700 1 2025-11-12 04:58:55.388 00:05:10.388 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:03:35.441 00:00:10.366 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:04:35.845 00:00:10.363 TCP 23.104.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:04:35.908 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42396 9 6412 1 2025-11-12 05:05:36.254 00:00:10.368 TCP 23.104.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:05:36.317 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54144 10 6452 1 2025-11-12 05:01:56.302 00:05:03.132 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:01:55.349 00:05:09.588 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:06:36.667 00:00:10.326 TCP 23.104.0.1:50630 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:06:47.057 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50630 1 40 1 2025-11-12 05:02:55.318 00:05:00.997 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:02:55.318 00:05:09.629 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:07:37.034 00:00:19.072 TCP 23.104.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:03:55.328 00:05:00.976 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:07:37.097 00:00:19.072 TCP 1.101.0.1:3000 -> 23.104.0.1:52112 10 6452 1 2025-11-12 05:04:12.827 00:05:10.013 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-12 05:08:46.147 00:00:10.365 TCP 23.104.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:04:55.388 00:05:10.397 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:09:46.548 00:00:10.366 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:09:56.977 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33066 1 40 1 2025-11-12 05:10:46.959 00:00:10.367 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:11:47.365 00:00:10.676 TCP 23.104.0.1:49998 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:07:56.305 00:05:03.130 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:11:47.428 00:00:10.677 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-11-12 05:07:55.352 00:05:09.587 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:08:55.321 00:05:00.995 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:12:48.154 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45206 10 6452 1 2025-11-12 05:12:48.091 00:00:10.364 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:08:55.321 00:05:09.627 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:09:32.839 00:05:10.012 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2648 1 2025-11-12 05:13:58.917 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54368 1 40 1 2025-11-12 05:13:48.490 00:00:10.364 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:09:55.331 00:05:00.974 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:14:48.955 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 9 6412 1 2025-11-12 05:14:48.893 00:00:10.381 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:10:55.392 00:05:10.396 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:15:49.309 00:00:10.365 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:16:49.710 00:00:10.367 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:18:00.538 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47420 1 40 1 2025-11-12 05:17:50.112 00:00:10.364 TCP 23.104.0.1:47420 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:13:56.306 00:05:03.132 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:13:55.353 00:05:09.586 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:18:50.512 00:00:10.361 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:14:52.853 00:05:10.030 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-12 05:14:55.322 00:05:00.995 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:14:55.322 00:05:09.627 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:15:55.332 00:05:00.974 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:19:50.914 00:00:10.394 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:19:50.976 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6452 1 2025-11-12 05:20:51.416 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39100 10 6452 1 2025-11-12 05:20:51.353 00:00:10.362 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:16:55.392 00:05:10.396 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:21:51.752 00:00:10.369 TCP 23.104.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:21:51.815 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53580 9 6412 1 2025-11-12 05:23:02.590 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53390 1 40 1 2025-11-12 05:22:52.159 00:00:10.367 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:19:56.308 00:05:03.131 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:23:52.565 00:00:10.366 TCP 23.104.0.1:33584 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:19:55.353 00:05:09.586 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:20:12.859 00:05:10.005 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-12 05:20:55.322 00:05:00.998 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:24:52.971 00:00:10.376 TCP 23.104.0.1:57568 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:20:55.324 00:05:09.626 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:24:53.035 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57568 10 6452 1 2025-11-12 05:21:55.333 00:05:00.977 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:25:53.389 00:00:10.326 TCP 23.104.0.1:50132 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:26:03.777 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50132 1 40 1 2025-11-12 05:26:53.757 00:00:10.370 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:26:53.820 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-11-12 05:22:55.395 00:05:10.395 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:27:54.223 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45310 10 6452 1 2025-11-12 05:27:54.161 00:00:10.359 TCP 23.104.0.1:45310 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:28:54.558 00:00:10.367 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:28:54.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60460 9 6412 1 2025-11-12 05:25:32.864 00:05:10.032 OSPF 23.0.6.2:0 -> 224.0.0.5:0 39 2756 1 2025-11-12 05:25:56.311 00:05:03.131 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:30:05.389 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35052 1 40 1 2025-11-12 05:29:54.963 00:00:10.363 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:25:55.354 00:05:09.586 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:26:55.325 00:05:00.998 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:30:55.368 00:00:10.320 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:26:55.325 00:05:09.626 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:30:55.432 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57092 9 6412 1 2025-11-12 05:27:55.334 00:05:00.978 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:31:55.731 00:00:10.376 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:31:55.794 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38292 9 6412 1 2025-11-12 05:28:55.394 00:05:10.397 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:32:56.145 00:00:10.367 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:32:56.207 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54026 9 6412 1 2025-11-12 05:33:56.613 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-11-12 05:33:56.550 00:00:10.367 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:30:52.872 00:05:10.008 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2740 1 2025-11-12 05:34:56.956 00:00:10.329 TCP 23.104.0.1:41258 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:34:57.020 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41258 9 6412 1 2025-11-12 05:31:56.311 00:05:03.134 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:35:57.387 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59128 9 6412 1 2025-11-12 05:31:55.355 00:05:09.587 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:35:57.323 00:00:10.365 TCP 23.104.0.1:59128 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:32:55.326 00:05:00.998 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:32:55.326 00:05:09.627 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:36:57.728 00:00:10.379 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:33:55.337 00:05:00.977 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:37:58.148 00:00:10.366 TCP 23.104.0.1:41026 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:37:58.212 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41026 10 6452 1 2025-11-12 05:34:55.396 00:05:10.396 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:38:58.554 00:00:10.366 TCP 23.104.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:39:08.983 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33954 1 40 1 2025-11-12 05:39:58.958 00:00:10.372 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:39:59.022 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38152 10 6452 1 2025-11-12 05:36:12.879 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2424 1 2025-11-12 05:40:59.366 00:00:10.325 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:40:59.430 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6452 1 2025-11-12 05:37:56.313 00:05:03.142 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:37:55.357 00:05:09.587 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:41:59.731 00:00:10.341 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:38:55.327 00:05:00.998 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:38:55.327 00:05:09.628 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:43:00.110 00:00:10.946 TCP 23.104.0.1:52470 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:43:11.119 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52470 1 40 1 2025-11-12 05:39:55.337 00:05:00.979 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:44:01.091 00:00:10.368 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:40:55.398 00:05:10.397 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:45:01.497 00:00:10.359 TCP 23.104.0.1:47858 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:45:01.560 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47858 9 6412 1 2025-11-12 05:41:32.884 00:05:10.006 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2528 1 2025-11-12 05:46:01.892 00:00:10.383 TCP 23.104.0.1:48334 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:46:12.338 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48334 1 40 1 2025-11-12 05:47:02.314 00:00:10.366 TCP 23.104.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:47:02.378 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42400 9 6412 1 2025-11-12 05:43:56.315 00:05:03.142 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:43:55.358 00:05:09.587 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:48:02.783 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38562 10 6452 1 2025-11-12 05:48:02.721 00:00:10.364 TCP 23.104.0.1:38562 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:44:55.329 00:05:01.000 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:44:55.329 00:05:09.628 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:49:03.123 00:00:10.337 TCP 23.104.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:45:55.340 00:05:00.979 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:50:03.496 00:00:10.363 TCP 23.104.0.1:45046 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:50:13.922 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45046 1 40 1 2025-11-12 05:46:52.890 00:05:10.008 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-12 05:46:55.400 00:05:10.397 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:51:03.897 00:00:10.381 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:51:03.960 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56768 9 6412 1 2025-11-12 05:52:04.383 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 9 6412 1 2025-11-12 05:52:04.321 00:00:10.324 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:53:04.687 00:00:10.385 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:49:56.320 00:05:03.143 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-12 05:49:55.361 00:05:09.597 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-12 05:54:05.111 00:00:10.367 TCP 23.104.0.1:38990 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:50:55.333 00:05:00.997 TCP 23.152.0.1:179 -> 23.154.0.1:43631 12 738 1 2025-11-12 05:50:55.333 00:05:09.635 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-12 05:55:05.515 00:00:10.369 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:51:55.344 00:05:00.976 TCP 23.154.0.1:43631 -> 23.152.0.1:179 12 738 1 2025-11-12 05:56:05.990 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51106 9 6412 1 2025-11-12 05:56:05.929 00:00:10.319 TCP 23.104.0.1:51106 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:52:12.898 00:05:10.009 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2596 1 2025-11-12 05:52:55.404 00:05:10.394 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-12 05:57:06.285 00:00:10.370 TCP 23.104.0.1:46728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:57:06.348 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46728 9 6412 1 2025-11-12 05:58:06.691 00:00:10.380 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 172, total bytes: 361189, total packets: 2072, avg bps: 772, avg pps: 0, avg bpp: 174 Time window: 2025-11-12 04:55:55 - 2025-11-12 05:58:17 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0039s User: 0.0024s Wall: 0.0023s flows/second: 75907.0 Runtime: 0.0023s