Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 01:59:24.315 00:00:11.804 TCP 12.102.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:00:26.153 00:00:11.818 TCP 12.102.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-07-22 01:56:02.870 00:06:00.102 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:01:28.008 00:00:11.762 TCP 12.102.0.1:39694 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:01:42.168 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:01:42.189 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:01:42.132 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:01:42.166 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:01:42.053 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:01:42.058 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:01:42.021 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 01:57:02.867 00:06:00.109 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:02:29.814 00:00:11.806 TCP 12.102.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:03:31.655 00:00:11.773 TCP 12.102.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:04:33.469 00:00:11.800 TCP 12.102.0.1:37004 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:05:35.308 00:00:11.771 TCP 12.102.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:06:41.858 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:06:41.759 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:06:42.237 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:06:41.973 00:00:00.044 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:06:42.419 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:06:42.013 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:06:42.214 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:06:37.119 00:00:11.807 TCP 12.102.0.1:51586 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:07:38.963 00:00:11.817 TCP 12.102.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:03:02.872 00:06:00.102 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:08:40.805 00:00:11.805 TCP 12.102.0.1:40900 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:04:02.870 00:06:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:09:42.645 00:00:11.814 TCP 12.102.0.1:58762 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:10:44.496 00:00:11.803 TCP 12.102.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:11:41.869 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:11:41.893 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:11:41.916 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:11:42.202 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:11:42.070 00:00:00.032 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:11:42.043 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:11:42.074 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:11:46.340 00:00:11.804 TCP 12.102.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:12:48.180 00:00:11.802 TCP 12.102.0.1:56118 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:13:50.027 00:00:11.762 TCP 12.102.0.1:60592 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:10:02.874 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:14:51.830 00:00:11.804 TCP 12.102.0.1:53684 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:15:53.675 00:00:11.803 TCP 12.102.0.1:44658 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:11:02.872 00:06:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:16:42.077 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:16:42.099 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:16:42.490 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:16:42.490 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:16:42.392 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:16:42.330 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:16:42.072 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:16:55.528 00:00:11.808 TCP 12.102.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:17:57.368 00:00:11.814 TCP 12.102.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:18:59.221 00:00:11.812 TCP 12.102.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:20:01.083 00:00:11.799 TCP 12.102.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:21:02.926 00:00:11.822 TCP 12.102.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:21:42.262 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:21:42.499 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:21:42.431 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:21:42.401 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:21:42.484 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:21:42.155 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:21:42.240 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:17:02.875 00:06:00.108 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:22:04.784 00:00:11.827 TCP 12.102.0.1:59334 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:18:02.871 00:06:00.115 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:23:06.651 00:00:11.823 TCP 12.102.0.1:58352 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:24:08.513 00:00:11.813 TCP 12.102.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:25:10.380 00:00:11.787 TCP 12.102.0.1:40648 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:26:12.203 00:00:11.765 TCP 12.102.0.1:35198 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:26:42.542 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:26:42.565 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:26:42.670 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:26:42.429 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:26:42.467 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:26:42.265 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:26:42.517 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:27:14.002 00:00:11.808 TCP 12.102.0.1:44056 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:28:15.842 00:00:11.799 TCP 12.102.0.1:43282 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:24:02.875 00:06:00.109 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:29:17.683 00:00:11.781 TCP 12.102.0.1:58366 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:25:02.873 00:06:00.114 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:30:19.498 00:00:11.804 TCP 12.102.0.1:42112 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:31:21.338 00:00:11.794 TCP 12.102.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:31:42.494 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:31:42.517 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:31:42.545 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:31:42.370 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:31:42.356 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:31:42.442 00:00:00.029 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:31:42.325 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:32:23.173 00:00:11.768 TCP 12.102.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:33:24.972 00:00:11.817 TCP 12.102.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:34:26.826 00:00:11.801 TCP 12.102.0.1:56316 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:35:28.668 00:00:11.805 TCP 12.102.0.1:52434 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:31:02.876 00:06:00.108 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:36:42.954 00:00:00.031 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:36:30.525 00:00:11.804 TCP 12.102.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:36:42.978 00:00:00.033 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:36:42.690 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:36:42.945 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:36:42.910 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:36:42.995 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:36:42.794 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:32:02.874 00:06:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:37:32.368 00:00:11.822 TCP 12.102.0.1:39136 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:38:34.229 00:00:11.819 TCP 12.102.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:39:36.097 00:00:11.808 TCP 12.102.0.1:55758 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:40:37.941 00:00:11.817 TCP 12.102.0.1:60346 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:41:42.824 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:41:42.671 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:41:42.872 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:41:42.954 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:41:43.068 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:41:42.743 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:41:42.801 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:41:39.782 00:00:11.802 TCP 12.102.0.1:37040 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:42:41.627 00:00:11.810 TCP 12.102.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:38:02.881 00:06:00.105 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:43:43.497 00:00:11.809 TCP 12.102.0.1:47400 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:39:02.878 00:06:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:44:45.339 00:00:11.798 TCP 12.102.0.1:47922 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:45:47.180 00:00:11.828 TCP 12.102.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:46:42.846 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:46:42.869 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:46:42.910 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:46:42.910 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:46:42.961 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:46:42.809 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:46:42.685 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:46:49.070 00:00:11.802 TCP 12.102.0.1:34488 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:47:50.911 00:00:11.816 TCP 12.102.0.1:60212 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:48:52.774 00:00:11.768 TCP 12.102.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:49:54.572 00:00:11.811 TCP 12.102.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:45:02.885 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:46:02.882 00:06:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:50:56.425 00:00:11.804 TCP 12.102.0.1:40720 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:51:43.096 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:51:43.119 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:51:42.863 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:51:43.054 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:51:43.057 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:51:43.159 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:51:43.098 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:51:58.263 00:00:11.765 TCP 12.102.0.1:49730 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:53:00.083 00:00:12.666 TCP 12.102.0.1:57718 -> 1.101.0.1:3000 17 2239 1 2025-07-22 02:54:02.794 00:00:11.761 TCP 12.102.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:55:04.594 00:00:11.801 TCP 12.102.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:56:06.435 00:00:11.814 TCP 12.102.0.1:58490 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:56:43.073 00:00:00.042 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-22 02:56:42.949 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 02:56:42.858 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-22 02:56:43.051 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-22 02:56:43.060 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-22 02:56:43.034 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-22 02:56:43.050 00:00:00.041 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-22 02:52:02.886 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-22 02:57:08.272 00:00:11.764 TCP 12.102.0.1:54236 -> 1.101.0.1:3000 11 1507 1 2025-07-22 02:53:02.883 00:06:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-22 02:58:10.089 00:00:11.826 TCP 12.102.0.1:46306 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124804, total packets: 1148, avg bps: 264, avg pps: 0, avg bpp: 108 Time window: 2025-07-22 01:56:02 - 2025-07-22 02:59:02 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0032s User: 0.0008s Wall: 0.0020s flows/second: 79607.2 Runtime: 0.0020s