Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 02:59:25.243 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37018 1 40 1 2025-11-18 02:59:14.837 00:00:10.333 TCP 23.104.0.1:37018 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:55:02.409 00:05:56.772 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 02:55:07.882 00:05:51.210 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:00:15.208 00:00:10.371 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:00:25.642 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 1 40 1 2025-11-18 03:01:26.099 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 1 40 1 2025-11-18 03:01:15.617 00:00:10.420 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:56:59.102 00:06:00.078 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 02:57:55.001 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-18 03:02:16.076 00:00:10.365 TCP 23.104.0.1:52272 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:02:16.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52272 10 6452 1 2025-11-18 02:58:08.930 00:05:50.234 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:03:16.482 00:00:10.360 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:03:26.905 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 1 40 1 2025-11-18 02:59:07.872 00:05:51.251 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 02:58:59.093 00:06:00.099 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-18 03:04:16.883 00:00:10.366 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:04:16.946 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37368 10 6452 1 2025-11-18 03:05:27.714 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40120 1 40 1 2025-11-18 03:05:17.288 00:00:10.363 TCP 23.104.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:01:07.883 00:05:51.211 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:01:02.411 00:05:56.771 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:06:17.754 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42052 9 6412 1 2025-11-18 03:06:17.692 00:00:10.367 TCP 23.104.0.1:42052 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:07:18.162 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42178 9 6412 1 2025-11-18 03:03:15.006 00:05:10.035 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2520 1 2025-11-18 03:07:18.099 00:00:10.322 TCP 23.104.0.1:42178 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:08:18.461 00:00:10.371 TCP 23.104.0.1:49158 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:04:08.932 00:05:50.237 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:03:59.104 00:06:00.080 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 03:09:18.934 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:50150 9 6412 1 2025-11-18 03:09:18.871 00:00:10.402 TCP 23.104.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:05:07.875 00:05:51.254 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 03:10:19.370 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 9 6412 1 2025-11-18 03:10:19.307 00:00:10.364 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:05:59.093 00:06:00.101 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-18 03:11:30.102 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 1 40 1 2025-11-18 03:11:19.709 00:00:10.331 TCP 23.104.0.1:60732 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:07:07.884 00:05:51.214 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:07:02.414 00:05:56.770 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:12:20.078 00:00:10.437 TCP 23.104.0.1:57784 -> 1.101.0.1:3000 15 1926 1 2025-11-18 03:12:30.580 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57784 1 40 1 2025-11-18 03:08:35.040 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 38 2712 1 2025-11-18 03:13:20.553 00:00:10.365 TCP 23.104.0.1:53310 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:13:30.983 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53310 1 40 1 2025-11-18 03:14:20.957 00:00:10.365 TCP 23.104.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:14:21.022 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50444 10 6452 1 2025-11-18 03:10:08.933 00:05:50.236 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:15:21.362 00:00:10.325 TCP 23.104.0.1:44212 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:10:59.109 00:06:00.077 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 03:11:07.877 00:05:51.253 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 03:16:21.722 00:00:10.361 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:17:22.123 00:00:10.363 TCP 23.104.0.1:52696 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:13:07.886 00:05:51.213 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:12:59.099 00:06:00.096 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-18 03:13:02.415 00:05:56.772 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:13:55.046 00:05:10.012 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2424 1 2025-11-18 03:18:22.522 00:00:10.365 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:18:22.586 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 10 6452 1 2025-11-18 03:19:33.361 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49578 1 40 1 2025-11-18 03:19:22.930 00:00:10.368 TCP 23.104.0.1:49578 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:20:23.345 00:00:10.324 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:16:08.937 00:05:50.234 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:21:23.706 00:00:10.364 TCP 23.104.0.1:47060 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:17:07.877 00:05:51.253 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 03:22:24.169 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 12 10369 1 2025-11-18 03:22:24.106 00:00:10.436 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 15 1926 1 2025-11-18 03:17:59.110 00:06:00.077 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 03:19:15.056 00:05:10.007 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2604 1 2025-11-18 03:23:24.643 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40800 9 6412 1 2025-11-18 03:23:24.581 00:00:10.320 TCP 23.104.0.1:40800 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:19:07.888 00:05:51.212 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:19:02.415 00:05:56.771 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:24:24.938 00:00:10.330 TCP 23.104.0.1:52662 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:19:59.100 00:06:00.097 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-18 03:25:25.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54686 10 6452 1 2025-11-18 03:25:25.306 00:00:10.363 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:26:25.770 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41246 10 6452 1 2025-11-18 03:26:25.707 00:00:10.367 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:22:08.938 00:05:50.234 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:27:26.182 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:38380 12 10375 1 2025-11-18 03:27:26.120 00:00:10.439 TCP 23.104.0.1:38380 -> 1.101.0.1:3000 15 1926 1 2025-11-18 03:23:07.880 00:05:51.252 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 03:28:26.599 00:00:10.373 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:24:35.064 00:05:10.006 OSPF 23.0.6.2:0 -> 224.0.0.5:0 38 2708 1 2025-11-18 03:29:27.019 00:00:10.361 TCP 23.104.0.1:53246 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:24:59.110 00:06:00.076 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 03:25:02.418 00:05:56.768 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:25:07.891 00:05:51.221 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:30:27.423 00:00:10.367 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:31:27.896 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41522 9 6412 1 2025-11-18 03:31:27.833 00:00:10.371 TCP 23.104.0.1:41522 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:26:59.101 00:06:00.095 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-18 03:32:28.250 00:00:10.439 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 15 1926 1 2025-11-18 03:28:08.939 00:05:50.244 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:33:28.728 00:00:10.333 TCP 23.104.0.1:38300 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:33:39.123 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 1 40 1 2025-11-18 03:29:07.883 00:05:51.261 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 03:29:55.070 00:05:10.010 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-18 03:34:29.157 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6452 1 2025-11-18 03:34:29.096 00:00:10.364 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:35:29.564 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59464 10 6452 1 2025-11-18 03:35:29.503 00:00:10.364 TCP 23.104.0.1:59464 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:31:07.895 00:05:51.218 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:31:02.421 00:05:56.766 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:36:29.904 00:00:10.435 TCP 23.104.0.1:52410 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:36:29.968 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:52410 9 6412 1 2025-11-18 03:31:59.123 00:06:00.065 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 03:37:30.385 00:00:10.364 TCP 23.104.0.1:58076 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:37:40.812 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58076 1 40 1 2025-11-18 03:38:30.794 00:00:10.589 TCP 23.104.0.1:42994 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:38:30.857 00:00:10.589 TCP 1.101.0.1:3000 -> 23.104.0.1:42994 9 6412 1 2025-11-18 03:34:08.939 00:05:50.244 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:33:59.112 00:06:00.085 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-18 03:35:15.081 00:05:10.006 OSPF 23.0.6.2:0 -> 224.0.0.5:0 39 2848 1 2025-11-18 03:39:31.424 00:00:10.325 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:35:07.888 00:05:51.256 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 03:40:42.213 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40722 1 40 1 2025-11-18 03:40:31.788 00:00:10.363 TCP 23.104.0.1:40722 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:41:32.190 00:00:10.444 TCP 23.104.0.1:33338 -> 1.101.0.1:3000 15 1926 1 2025-11-18 03:41:32.253 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:33338 12 10578 1 2025-11-18 03:37:02.423 00:05:56.766 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:37:07.896 00:05:51.218 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:42:32.738 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54746 9 6621 1 2025-11-18 03:42:32.675 00:00:10.367 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:43:33.079 00:00:10.362 TCP 23.104.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:43:33.144 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48202 9 6621 1 2025-11-18 03:38:59.123 00:06:00.067 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 03:44:33.480 00:00:10.361 TCP 23.104.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:40:35.087 00:05:10.006 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2388 1 2025-11-18 03:44:33.543 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58666 10 6661 1 2025-11-18 03:40:08.945 00:05:50.240 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:45:33.883 00:00:10.330 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:45:33.945 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44728 10 6661 1 2025-11-18 03:40:59.114 00:06:00.091 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-18 03:41:07.887 00:05:51.257 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 03:46:34.258 00:00:10.370 TCP 23.104.0.1:34016 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:46:34.321 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6661 1 2025-11-18 03:47:34.731 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:52370 9 6621 1 2025-11-18 03:47:34.668 00:00:10.319 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:43:07.898 00:05:51.217 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:43:02.423 00:05:56.771 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:48:45.459 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52644 1 40 1 2025-11-18 03:48:35.033 00:00:10.363 TCP 23.104.0.1:52644 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:49:35.435 00:00:10.369 TCP 23.104.0.1:44098 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:45:55.103 00:05:10.005 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2604 1 2025-11-18 03:50:46.270 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 1 40 1 2025-11-18 03:50:35.840 00:00:10.367 TCP 23.104.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:46:08.956 00:05:50.242 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:45:59.124 00:06:00.071 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 03:51:36.308 00:00:14.802 TCP 1.101.0.1:3000 -> 23.104.0.1:34022 10 6661 1 2025-11-18 03:51:36.247 00:00:14.801 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:47:07.891 00:05:51.256 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-18 03:52:41.157 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:41198 12 10793 1 2025-11-18 03:52:41.094 00:00:10.444 TCP 23.104.0.1:41198 -> 1.101.0.1:3000 15 1926 1 2025-11-18 03:47:59.115 00:06:00.092 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-18 03:53:41.636 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57528 9 6830 1 2025-11-18 03:53:41.572 00:00:10.363 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:49:02.428 00:05:56.770 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-18 03:49:07.903 00:05:51.215 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-18 03:54:41.976 00:00:10.360 TCP 23.104.0.1:35630 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:54:42.039 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35630 9 6830 1 2025-11-18 03:51:15.107 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2468 1 2025-11-18 03:55:42.435 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:32910 9 6830 1 2025-11-18 03:55:42.373 00:00:10.320 TCP 23.104.0.1:32910 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:56:42.809 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:53044 10 6882 1 2025-11-18 03:56:42.745 00:00:10.420 TCP 23.104.0.1:53044 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:52:08.957 00:05:50.230 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-18 03:57:43.206 00:00:10.325 TCP 23.104.0.1:45624 -> 1.101.0.1:3000 11 1507 1 2025-11-18 03:52:59.125 00:06:00.072 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-18 03:53:07.891 00:05:51.256 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 Summary: total flows: 172, total bytes: 383222, total packets: 2106, avg bps: 799, avg pps: 0, avg bpp: 181 Time window: 2025-11-18 02:55:02 - 2025-11-18 03:58:59 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0056s User: 0.0000s Wall: 0.0015s flows/second: 116848.1 Runtime: 0.0015s