Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 08:58:54.458 00:00:10.992 TCP 1.101.0.1:3000 -> 23.104.0.1:37780 10 6452 1 2025-11-28 08:58:54.394 00:00:10.993 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-11-28 08:55:04.911 00:05:09.182 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 08:59:55.426 00:00:10.361 TCP 23.104.0.1:45146 -> 1.101.0.1:3000 11 1507 1 2025-11-28 08:55:04.850 00:06:00.090 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 08:55:07.505 00:05:57.435 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:00:05.850 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 1 40 1 2025-11-28 09:00:55.829 00:00:10.328 TCP 23.104.0.1:35184 -> 1.101.0.1:3000 11 1507 1 2025-11-28 08:57:04.869 00:05:08.565 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 08:57:35.450 00:05:10.005 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-28 09:01:56.256 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42654 10 6452 1 2025-11-28 09:01:56.194 00:00:10.370 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:02:56.604 00:00:10.324 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-11-28 08:59:04.841 00:06:00.110 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-28 09:03:56.962 00:00:10.365 TCP 23.104.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:04:07.390 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42322 1 40 1 2025-11-28 09:00:04.840 00:05:08.606 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:04:57.431 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43558 10 6452 1 2025-11-28 09:04:57.370 00:00:10.372 TCP 23.104.0.1:43558 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:01:04.911 00:05:09.183 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:05:57.842 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:55510 10 6464 1 2025-11-28 09:01:07.507 00:05:57.434 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:05:57.779 00:00:10.385 TCP 23.104.0.1:55510 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:06:58.266 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59460 9 6412 1 2025-11-28 09:02:04.851 00:06:00.091 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 09:02:55.456 00:05:10.004 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-28 09:06:58.204 00:00:10.364 TCP 23.104.0.1:59460 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:03:04.872 00:05:08.566 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:07:58.605 00:00:10.364 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:08:59.009 00:00:10.364 TCP 23.104.0.1:44860 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:09:59.469 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 10 6464 1 2025-11-28 09:09:59.406 00:00:10.410 TCP 23.104.0.1:52796 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:06:04.841 00:05:08.606 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:06:04.841 00:06:00.111 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-28 09:10:59.854 00:00:10.334 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:11:10.251 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59198 1 40 1 2025-11-28 09:07:04.911 00:05:09.187 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:07:07.518 00:05:57.423 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:12:10.649 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40356 1 40 1 2025-11-28 09:12:00.224 00:00:10.363 TCP 23.104.0.1:40356 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:08:15.459 00:05:10.006 OSPF 23.0.6.2:0 -> 224.0.0.5:0 34 2460 1 2025-11-28 09:13:00.622 00:00:10.362 TCP 23.104.0.1:36944 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:13:00.684 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36944 9 6412 1 2025-11-28 09:09:04.873 00:05:08.565 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:09:04.852 00:06:00.090 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 09:14:01.032 00:00:10.328 TCP 23.104.0.1:52826 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:14:01.093 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52826 10 6452 1 2025-11-28 09:15:01.462 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 10 6452 1 2025-11-28 09:15:01.399 00:00:10.370 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:16:01.805 00:00:10.440 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:12:04.841 00:05:08.607 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:16:01.868 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 11 6504 1 2025-11-28 09:17:02.345 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53552 9 6412 1 2025-11-28 09:17:02.282 00:00:10.358 TCP 23.104.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:13:04.912 00:05:09.184 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:13:35.464 00:05:10.010 OSPF 23.0.6.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-28 09:13:07.521 00:05:57.423 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:13:04.842 00:06:00.110 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-28 09:18:02.680 00:00:10.370 TCP 23.104.0.1:40164 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:18:02.745 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40164 9 6412 1 2025-11-28 09:19:03.163 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42312 9 6412 1 2025-11-28 09:19:03.100 00:00:10.368 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:15:04.873 00:05:08.566 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:20:03.507 00:00:10.365 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:16:04.854 00:06:00.089 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 09:21:03.907 00:00:10.383 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:21:14.353 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 1 40 1 2025-11-28 09:18:04.844 00:05:08.607 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:22:14.733 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42924 1 40 1 2025-11-28 09:22:04.338 00:00:10.331 TCP 23.104.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:18:55.473 00:05:10.007 OSPF 23.0.6.2:0 -> 224.0.0.5:0 41 3084 1 2025-11-28 09:23:04.780 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49366 10 6452 1 2025-11-28 09:19:04.914 00:05:09.184 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:23:04.716 00:00:10.364 TCP 23.104.0.1:49366 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:19:07.521 00:05:57.426 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:24:05.123 00:00:10.362 TCP 23.104.0.1:54114 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:20:04.844 00:06:00.115 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-28 09:25:05.593 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56062 9 6412 1 2025-11-28 09:25:05.531 00:00:10.361 TCP 23.104.0.1:56062 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:21:04.876 00:05:08.566 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:26:05.930 00:00:10.324 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:26:16.317 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 1 40 1 2025-11-28 09:27:06.300 00:00:10.329 TCP 23.104.0.1:34474 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:27:06.363 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34474 9 6412 1 2025-11-28 09:23:04.855 00:06:00.103 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 09:24:04.845 00:05:08.607 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:28:06.677 00:00:10.363 TCP 23.104.0.1:48570 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:28:17.104 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48570 1 40 1 2025-11-28 09:24:15.481 00:05:10.011 OSPF 23.0.6.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-28 09:25:04.915 00:05:09.184 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:29:07.083 00:00:10.364 TCP 23.104.0.1:60676 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:25:07.523 00:05:57.435 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:30:07.486 00:00:10.364 TCP 23.104.0.1:47806 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:27:04.875 00:05:08.567 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:31:18.339 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 1 40 1 2025-11-28 09:31:07.891 00:00:10.385 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:27:04.845 00:06:00.123 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-28 09:32:08.313 00:00:10.365 TCP 23.104.0.1:38458 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:32:08.375 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38458 10 6452 1 2025-11-28 09:33:19.146 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44040 1 40 1 2025-11-28 09:33:08.717 00:00:10.366 TCP 23.104.0.1:44040 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:29:35.491 00:05:10.012 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-28 09:30:04.847 00:05:08.606 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:34:09.118 00:00:10.377 TCP 23.104.0.1:40102 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:30:04.856 00:06:00.103 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 09:31:04.916 00:05:09.188 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:35:09.542 00:00:10.367 TCP 23.104.0.1:44032 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:31:07.524 00:05:57.436 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:36:10.010 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51800 9 6412 1 2025-11-28 09:36:09.945 00:00:10.368 TCP 23.104.0.1:51800 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:33:04.875 00:05:08.567 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:37:10.351 00:00:10.366 TCP 23.104.0.1:49060 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:37:20.783 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49060 1 40 1 2025-11-28 09:38:10.755 00:00:10.375 TCP 23.104.0.1:41502 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:34:04.846 00:06:00.124 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-28 09:34:55.504 00:05:10.010 OSPF 23.0.6.2:0 -> 224.0.0.5:0 35 2540 1 2025-11-28 09:39:21.565 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34148 1 40 1 2025-11-28 09:39:11.170 00:00:10.333 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:36:04.850 00:05:08.603 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:40:11.607 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47622 9 6412 1 2025-11-28 09:40:11.544 00:00:10.325 TCP 23.104.0.1:47622 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:37:04.920 00:05:09.186 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:41:11.975 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56392 10 6452 1 2025-11-28 09:41:11.914 00:00:10.382 TCP 23.104.0.1:56392 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:37:04.857 00:06:00.104 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 09:37:07.523 00:05:57.438 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:42:12.396 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57298 10 6452 1 2025-11-28 09:42:12.332 00:00:10.359 TCP 23.104.0.1:57298 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:39:04.876 00:05:08.567 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:43:12.733 00:00:10.337 TCP 23.104.0.1:40726 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:43:23.133 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40726 1 40 1 2025-11-28 09:44:13.171 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37566 10 6452 1 2025-11-28 09:44:13.107 00:00:10.369 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:40:15.513 00:05:10.008 OSPF 23.0.6.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-28 09:45:13.516 00:00:10.327 TCP 23.104.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:45:13.579 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50346 9 6412 1 2025-11-28 09:41:04.847 00:06:00.125 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-28 09:42:04.847 00:05:08.608 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:46:13.878 00:00:10.371 TCP 23.104.0.1:52672 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:43:04.918 00:05:09.191 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:47:14.349 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60826 10 6452 1 2025-11-28 09:47:14.288 00:00:10.365 TCP 23.104.0.1:60826 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:43:07.526 00:05:57.437 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:48:14.689 00:00:10.373 TCP 23.104.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:48:25.125 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 1 40 1 2025-11-28 09:44:04.858 00:06:00.105 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 09:45:04.878 00:05:08.568 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:49:15.100 00:00:10.359 TCP 23.104.0.1:51814 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:45:35.522 00:05:10.006 OSPF 23.0.6.2:0 -> 224.0.0.5:0 40 2884 1 2025-11-28 09:50:15.497 00:00:10.360 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:51:15.893 00:00:10.369 TCP 23.104.0.1:39422 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:48:04.848 00:05:08.608 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:52:16.369 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41490 10 6452 1 2025-11-28 09:52:16.306 00:00:10.362 TCP 23.104.0.1:41490 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:48:04.850 00:06:00.125 TCP 23.152.0.1:179 -> 23.154.0.1:43631 14 861 1 2025-11-28 09:49:04.919 00:05:09.191 TCP 23.158.0.1:179 -> 23.152.0.1:33265 12 738 1 2025-11-28 09:53:16.714 00:00:10.360 TCP 23.104.0.1:38682 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:49:07.528 00:05:57.437 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-28 09:54:17.175 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40888 10 6452 1 2025-11-28 09:54:17.113 00:00:10.363 TCP 23.104.0.1:40888 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:50:55.529 00:05:10.011 OSPF 23.0.6.2:0 -> 224.0.0.5:0 36 2584 1 2025-11-28 09:51:04.880 00:05:08.570 TCP 23.153.0.1:39511 -> 23.152.0.1:179 12 738 1 2025-11-28 09:55:27.951 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34368 1 40 1 2025-11-28 09:55:17.519 00:00:10.369 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:51:04.860 00:06:00.104 TCP 23.154.0.1:43631 -> 23.152.0.1:179 14 861 1 2025-11-28 09:56:17.988 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41442 10 6452 1 2025-11-28 09:56:17.926 00:00:10.365 TCP 23.104.0.1:41442 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:57:18.333 00:00:10.376 TCP 23.104.0.1:60308 -> 1.101.0.1:3000 11 1507 1 2025-11-28 09:57:28.773 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60308 1 40 1 2025-11-28 09:54:04.850 00:05:08.610 TCP 23.152.0.1:179 -> 23.153.0.1:39511 12 738 1 2025-11-28 09:58:29.178 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:59570 1 40 1 2025-11-28 09:58:18.750 00:00:10.365 TCP 23.104.0.1:59570 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 172, total bytes: 337297, total packets: 2054, avg bps: 701, avg pps: 0, avg bpp: 164 Time window: 2025-11-28 08:55:04 - 2025-11-28 09:59:13 Total flows processed: 172, passed: 172, Blocks skipped: 0, Bytes read: 17952 Sys: 0.0037s User: 0.0015s Wall: 0.0036s flows/second: 47136.2 Runtime: 0.0037s