Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 01:58:45.593 00:00:11.807 TCP 12.102.0.1:57488 -> 1.101.0.1:3000 11 1507 1 2025-07-24 01:59:47.437 00:00:11.809 TCP 12.102.0.1:48098 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:00:49.284 00:00:11.798 TCP 12.102.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-07-24 01:57:03.852 00:05:00.257 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:01:51.122 00:00:11.772 TCP 12.102.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:02:39.747 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:02:39.715 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:02:39.911 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:02:39.784 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:02:39.893 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:02:39.727 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:02:39.725 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:02:52.930 00:00:11.868 TCP 12.102.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:03:54.834 00:00:11.802 TCP 12.102.0.1:39938 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:00:03.849 00:05:00.261 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:04:56.705 00:00:11.823 TCP 12.102.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:05:58.563 00:00:11.809 TCP 12.102.0.1:49566 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:03:03.855 00:05:00.254 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:07:00.413 00:00:11.815 TCP 12.102.0.1:35398 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:07:40.061 00:00:00.038 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:07:40.288 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:07:40.145 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:07:40.028 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:07:40.126 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:07:40.071 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:07:40.037 00:00:00.038 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:08:02.266 00:00:11.805 TCP 12.102.0.1:56656 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:09:04.108 00:00:11.799 TCP 12.102.0.1:54792 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:06:03.854 00:05:00.258 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:10:05.941 00:00:11.814 TCP 12.102.0.1:49044 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:11:07.799 00:00:11.794 TCP 12.102.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:12:09.637 00:00:11.800 TCP 12.102.0.1:42436 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:12:39.963 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:12:39.995 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:12:39.990 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:12:39.888 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:12:40.190 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:12:40.096 00:00:00.036 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:12:39.940 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:09:03.858 00:05:00.255 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:13:11.474 00:00:11.799 TCP 12.102.0.1:34880 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:14:13.327 00:00:11.853 TCP 12.102.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:15:15.224 00:00:11.809 TCP 12.102.0.1:48674 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:12:03.857 00:05:00.260 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:16:17.080 00:00:11.797 TCP 12.102.0.1:37172 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:17:18.915 00:00:11.821 TCP 12.102.0.1:33636 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:17:40.179 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:17:40.092 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:17:39.942 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:17:40.116 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:17:40.115 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:17:39.995 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:17:40.156 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:18:20.770 00:00:11.799 TCP 12.102.0.1:47502 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:15:03.862 00:05:00.255 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:19:22.609 00:00:11.802 TCP 12.102.0.1:50022 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:20:24.447 00:00:11.806 TCP 12.102.0.1:53154 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:21:26.292 00:00:11.802 TCP 12.102.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:18:03.858 00:05:00.260 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:22:28.130 00:00:11.800 TCP 12.102.0.1:44004 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:22:39.996 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:22:40.027 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:22:40.077 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:22:40.316 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:22:40.037 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:22:40.276 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:22:39.973 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:23:29.994 00:00:12.211 TCP 12.102.0.1:60436 -> 1.101.0.1:3000 15 1925 1 2025-07-24 02:24:32.253 00:00:11.806 TCP 12.102.0.1:41726 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:21:03.863 00:05:00.254 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:25:34.097 00:00:11.795 TCP 12.102.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:26:35.933 00:00:11.784 TCP 12.102.0.1:52790 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:27:40.271 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:27:40.257 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:27:40.294 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:27:40.268 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:27:40.288 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:27:40.280 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:27:40.158 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:27:37.751 00:00:11.796 TCP 12.102.0.1:40002 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:24:03.863 00:05:00.258 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:28:39.588 00:00:11.810 TCP 12.102.0.1:45518 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:29:41.430 00:00:11.756 TCP 12.102.0.1:37948 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:30:43.227 00:00:11.802 TCP 12.102.0.1:47388 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:27:03.865 00:05:00.253 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:31:45.077 00:00:11.800 TCP 12.102.0.1:41238 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:32:40.473 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:32:40.483 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:32:40.199 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:32:40.515 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:32:40.515 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:32:40.476 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:32:40.450 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:32:46.923 00:00:11.780 TCP 12.102.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:33:48.738 00:00:11.799 TCP 12.102.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:30:03.863 00:05:00.258 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:34:50.579 00:00:11.764 TCP 12.102.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:35:52.395 00:00:11.801 TCP 12.102.0.1:52394 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:36:54.232 00:00:11.804 TCP 12.102.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:33:03.866 00:05:00.253 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:37:40.503 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:37:40.715 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:37:40.575 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:37:40.546 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:37:40.586 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:37:40.350 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:37:40.480 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:37:56.079 00:00:11.842 TCP 12.102.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:38:57.950 00:00:11.801 TCP 12.102.0.1:56600 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:36:03.865 00:05:00.263 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:39:59.789 00:00:11.798 TCP 12.102.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:41:01.628 00:00:11.762 TCP 12.102.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:42:03.430 00:00:11.802 TCP 12.102.0.1:48804 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:42:40.553 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:42:40.780 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:42:40.722 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:42:40.471 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:42:40.592 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:42:40.581 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:42:40.576 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:39:03.867 00:05:00.259 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:43:05.266 00:00:11.775 TCP 12.102.0.1:56196 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:44:07.080 00:00:11.805 TCP 12.102.0.1:45626 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:45:08.943 00:00:11.806 TCP 12.102.0.1:36666 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:42:03.864 00:05:00.264 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:46:10.784 00:00:11.795 TCP 12.102.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:47:12.618 00:00:11.800 TCP 12.102.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:47:40.483 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:47:40.506 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:47:40.646 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:47:40.532 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:47:40.716 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:47:40.558 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:47:40.742 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:48:14.462 00:00:11.802 TCP 12.102.0.1:36838 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:45:03.868 00:05:00.258 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:49:16.300 00:00:11.801 TCP 12.102.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:50:18.137 00:00:11.810 TCP 12.102.0.1:35286 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:51:19.991 00:00:11.815 TCP 12.102.0.1:50558 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:48:03.869 00:05:00.262 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:52:21.845 00:00:11.839 TCP 12.102.0.1:34264 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:52:40.803 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:52:40.788 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:52:40.706 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:52:40.847 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:52:40.885 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:52:40.818 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:52:40.780 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:53:23.720 00:00:12.238 TCP 12.102.0.1:41938 -> 1.101.0.1:3000 15 1925 1 2025-07-24 02:54:26.002 00:00:11.762 TCP 12.102.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:51:03.871 00:05:00.258 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-07-24 02:55:27.818 00:00:11.799 TCP 12.102.0.1:40488 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:56:29.656 00:00:11.810 TCP 12.102.0.1:60932 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:57:40.594 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 02:57:40.616 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-24 02:57:41.004 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 02:57:40.867 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-24 02:57:40.903 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-24 02:57:40.940 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-24 02:57:40.818 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-24 02:57:31.503 00:00:11.818 TCP 12.102.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-07-24 02:54:03.869 00:05:00.263 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-07-24 02:58:33.361 00:00:11.830 TCP 12.102.0.1:45488 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 125677, total packets: 1149, avg bps: 270, avg pps: 0, avg bpp: 109 Time window: 2025-07-24 01:57:03 - 2025-07-24 02:59:04 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0020s Wall: 0.0029s flows/second: 56112.2 Runtime: 0.0029s