Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 01:59:05.320 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55500 1 40 1 2025-11-25 01:58:54.889 00:00:10.370 TCP 23.104.0.1:55500 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:54:03.352 00:06:00.057 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 01:55:29.083 00:05:10.009 OSPF 23.0.6.2:0 -> 224.0.0.5:0 38 2648 1 2025-11-25 01:59:55.293 00:00:10.329 TCP 23.104.0.1:47476 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:55:03.340 00:06:00.077 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 01:56:03.406 00:05:02.481 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 01:56:03.411 00:05:08.993 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:00:55.719 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53418 10 6452 1 2025-11-25 02:00:55.656 00:00:10.370 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:01:56.084 00:00:10.361 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:58:03.371 00:05:08.458 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:02:56.488 00:00:10.324 TCP 23.104.0.1:56684 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:03:56.862 00:00:10.368 TCP 23.104.0.1:34200 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:00:03.343 00:05:08.498 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:00:49.092 00:05:10.005 OSPF 23.0.6.2:0 -> 224.0.0.5:0 34 2460 1 2025-11-25 02:04:57.275 00:00:10.369 TCP 23.104.0.1:49680 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:04:57.338 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49680 10 6452 1 2025-11-25 02:01:03.352 00:06:00.064 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 02:05:57.680 00:00:10.370 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:02:03.407 00:05:02.481 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:06:08.112 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59198 1 40 1 2025-11-25 02:02:03.413 00:05:08.992 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:02:03.342 00:06:00.084 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 02:06:58.084 00:00:10.366 TCP 23.104.0.1:41712 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:07:58.488 00:00:10.359 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:07:58.550 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53478 9 6412 1 2025-11-25 02:04:03.372 00:05:08.458 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:08:58.887 00:00:10.365 TCP 23.104.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:09:09.315 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51336 1 40 1 2025-11-25 02:09:59.295 00:00:10.343 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:06:03.344 00:05:08.497 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:06:09.097 00:05:10.008 OSPF 23.0.6.2:0 -> 224.0.0.5:0 38 2772 1 2025-11-25 02:10:59.741 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40332 9 6412 1 2025-11-25 02:10:59.678 00:00:10.386 TCP 23.104.0.1:40332 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:12:00.100 00:00:10.365 TCP 23.104.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:08:03.416 00:05:02.474 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:08:03.415 00:05:08.992 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:13:00.567 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:49092 9 6412 1 2025-11-25 02:08:03.354 00:06:00.066 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 02:13:00.504 00:00:10.335 TCP 23.104.0.1:49092 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:09:03.346 00:06:00.085 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 02:14:00.888 00:00:10.364 TCP 23.104.0.1:55992 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:10:03.376 00:05:08.455 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:15:01.290 00:00:10.365 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:15:01.354 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37960 9 6412 1 2025-11-25 02:11:29.105 00:05:10.003 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2416 1 2025-11-25 02:16:01.692 00:00:10.381 TCP 23.104.0.1:52712 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:12:03.348 00:05:08.512 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:16:12.136 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52712 1 40 1 2025-11-25 02:17:02.199 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43260 9 6412 1 2025-11-25 02:17:02.136 00:00:10.364 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:14:03.420 00:05:02.472 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:14:03.418 00:05:08.990 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:18:02.541 00:00:10.365 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:19:03.008 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34408 9 6412 1 2025-11-25 02:19:02.944 00:00:10.366 TCP 23.104.0.1:34408 -> 1.101.0.1:3000 12 1559 1 2025-11-25 02:15:03.358 00:06:00.064 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 02:20:03.405 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32976 9 6412 1 2025-11-25 02:16:03.380 00:05:08.455 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:20:03.343 00:00:10.371 TCP 23.104.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:16:49.108 00:05:10.003 OSPF 23.0.6.2:0 -> 224.0.0.5:0 38 2712 1 2025-11-25 02:16:03.348 00:06:00.084 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 02:21:03.742 00:00:10.369 TCP 23.104.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:21:03.805 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 9 6412 1 2025-11-25 02:18:03.349 00:05:08.495 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:22:04.214 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 9 6412 1 2025-11-25 02:22:04.148 00:00:10.370 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:23:04.555 00:00:10.335 TCP 23.104.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:20:03.422 00:05:02.472 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:20:03.420 00:05:08.991 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:24:04.926 00:00:10.324 TCP 23.104.0.1:37138 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:25:05.357 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45824 9 6412 1 2025-11-25 02:25:05.295 00:00:10.362 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:22:03.379 00:05:08.455 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:26:05.695 00:00:10.368 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:22:09.111 00:05:10.006 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-25 02:26:05.758 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40798 10 6452 1 2025-11-25 02:22:03.359 00:06:00.064 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 02:27:06.097 00:00:10.327 TCP 23.104.0.1:42180 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:27:16.487 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42180 1 40 1 2025-11-25 02:23:03.350 00:06:00.084 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 02:24:03.350 00:05:08.498 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:28:16.918 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60350 1 40 1 2025-11-25 02:28:06.469 00:00:10.384 TCP 23.104.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:29:06.895 00:00:10.386 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:29:17.346 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58118 1 40 1 2025-11-25 02:26:03.423 00:05:02.473 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:26:03.420 00:05:08.991 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:30:17.763 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40636 1 40 1 2025-11-25 02:30:07.320 00:00:10.374 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:31:07.734 00:00:10.389 TCP 23.104.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:31:07.796 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56104 10 6452 1 2025-11-25 02:27:29.117 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-25 02:28:03.380 00:05:08.465 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:32:08.220 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35116 10 6452 1 2025-11-25 02:32:08.159 00:00:10.368 TCP 23.104.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:33:08.556 00:00:10.319 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:33:08.620 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38350 10 6452 1 2025-11-25 02:29:03.362 00:06:00.080 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 02:30:03.353 00:05:08.504 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:34:08.919 00:00:10.370 TCP 23.104.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:34:08.982 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37930 9 6412 1 2025-11-25 02:30:03.353 00:06:00.100 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 02:35:09.327 00:00:10.369 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:32:03.442 00:05:02.456 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:36:09.797 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58818 10 6452 1 2025-11-25 02:32:03.422 00:05:08.990 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:36:09.734 00:00:10.333 TCP 23.104.0.1:58818 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:32:49.121 00:05:10.022 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2644 1 2025-11-25 02:37:10.116 00:00:10.366 TCP 23.104.0.1:38290 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:37:10.178 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38290 9 6412 1 2025-11-25 02:34:03.383 00:05:08.465 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:38:10.520 00:00:10.369 TCP 23.104.0.1:42948 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:39:10.926 00:00:10.361 TCP 23.104.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:39:10.989 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35714 9 6412 1 2025-11-25 02:36:03.354 00:05:08.504 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:40:21.725 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40876 1 40 1 2025-11-25 02:40:11.331 00:00:10.331 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:36:03.364 00:06:00.080 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 02:41:22.099 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:33484 1 40 1 2025-11-25 02:41:11.706 00:00:10.329 TCP 23.104.0.1:33484 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:37:03.355 00:06:00.100 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 02:38:03.443 00:05:02.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:38:03.426 00:05:08.990 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:38:09.126 00:05:10.007 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-25 02:42:12.081 00:00:10.322 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:43:12.444 00:00:10.374 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:40:03.385 00:05:08.470 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:44:12.921 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35856 9 6412 1 2025-11-25 02:44:12.860 00:00:10.370 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:45:13.268 00:00:10.363 TCP 23.104.0.1:44912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:45:13.329 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44912 10 6452 1 2025-11-25 02:42:03.356 00:05:08.512 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:46:13.734 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37270 10 6452 1 2025-11-25 02:46:13.671 00:00:10.371 TCP 23.104.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:47:14.084 00:00:10.321 TCP 23.104.0.1:39618 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:47:24.467 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39618 1 40 1 2025-11-25 02:43:29.133 00:05:10.007 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2404 1 2025-11-25 02:43:03.367 00:06:00.078 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 02:44:03.444 00:05:02.457 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:44:03.425 00:05:08.992 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:48:14.442 00:00:10.327 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:48:24.833 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:41182 1 40 1 2025-11-25 02:44:03.355 00:06:00.100 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 02:49:14.813 00:00:10.379 TCP 23.104.0.1:36548 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:46:03.386 00:05:08.472 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:50:15.232 00:00:10.359 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:50:15.296 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36734 9 6412 1 2025-11-25 02:51:15.631 00:00:11.095 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:48:03.356 00:05:08.513 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:52:16.766 00:00:10.368 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:52:27.197 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49054 1 40 1 2025-11-25 02:48:49.140 00:05:10.007 OSPF 23.0.6.2:0 -> 224.0.0.5:0 38 2768 1 2025-11-25 02:53:17.168 00:00:10.367 TCP 23.104.0.1:34968 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:50:03.446 00:05:02.458 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-25 02:50:03.427 00:05:08.992 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-25 02:54:17.575 00:00:10.320 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:54:17.639 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:42466 9 6412 1 2025-11-25 02:50:03.367 00:06:00.081 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-25 02:55:17.939 00:00:10.324 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:51:03.357 00:06:00.102 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-25 02:52:03.387 00:05:08.472 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-25 02:56:18.301 00:00:10.381 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:56:28.746 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57798 1 40 1 2025-11-25 02:57:18.723 00:00:10.390 TCP 23.104.0.1:53260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:57:29.177 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:53260 1 40 1 2025-11-25 02:54:03.358 00:05:08.512 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-25 02:54:09.147 00:05:10.007 OSPF 23.0.6.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-25 02:58:19.147 00:00:11.800 TCP 23.104.0.1:34632 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 170, total bytes: 327482, total packets: 2076, avg bps: 669, avg pps: 0, avg bpp: 157 Time window: 2025-11-25 01:54:03 - 2025-11-25 02:59:19 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0025s User: 0.0033s Wall: 0.0022s flows/second: 78997.5 Runtime: 0.0022s