Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 23:59:19.041 00:00:11.806 TCP 12.102.0.1:36992 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:00:20.884 00:00:11.802 TCP 12.102.0.1:34498 -> 1.101.0.1:3000 11 1507 1 2025-07-24 23:56:04.303 00:06:00.216 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:01:22.720 00:00:11.811 TCP 12.102.0.1:57884 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:02:24.572 00:00:11.760 TCP 12.102.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:03:06.265 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-24 23:58:04.303 00:06:00.220 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-25 00:03:06.287 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:03:06.233 00:00:00.042 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:03:06.415 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:03:06.029 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:03:06.289 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:03:06.166 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:03:26.374 00:00:11.820 TCP 12.102.0.1:50174 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:04:28.235 00:00:11.804 TCP 12.102.0.1:39838 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:05:30.077 00:00:11.795 TCP 12.102.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:06:31.913 00:00:11.824 TCP 12.102.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:07:33.783 00:00:11.803 TCP 12.102.0.1:40264 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:08:06.435 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:03:04.305 00:06:00.215 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:08:06.366 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:08:06.508 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:08:06.474 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:08:06.461 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:08:06.397 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:08:06.413 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:08:35.624 00:00:11.799 TCP 12.102.0.1:50886 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:09:37.468 00:00:12.176 TCP 12.102.0.1:36124 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:05:04.305 00:06:00.217 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-25 00:10:39.683 00:00:11.816 TCP 12.102.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:11:41.536 00:00:11.798 TCP 12.102.0.1:46496 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:12:43.369 00:00:11.773 TCP 12.102.0.1:56268 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:13:06.709 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:13:06.477 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:13:06.718 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:13:06.810 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:13:06.845 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:13:06.721 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:13:06.687 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:13:45.177 00:00:11.805 TCP 12.102.0.1:55858 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:14:47.028 00:00:11.808 TCP 12.102.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:10:04.307 00:06:00.213 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:15:48.877 00:00:11.800 TCP 12.102.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:12:04.306 00:06:00.219 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-25 00:16:50.715 00:00:11.759 TCP 12.102.0.1:55452 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:17:52.514 00:00:11.813 TCP 12.102.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:18:06.695 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:18:06.616 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:18:06.666 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:18:06.717 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:18:06.746 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:18:06.352 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:18:06.673 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:18:54.364 00:00:11.819 TCP 12.102.0.1:47576 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:19:56.221 00:00:11.809 TCP 12.102.0.1:34906 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:20:58.078 00:00:11.858 TCP 12.102.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:17:04.308 00:06:00.214 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:21:59.974 00:00:11.811 TCP 12.102.0.1:40488 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:23:06.928 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:23:06.951 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:23:06.671 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:23:06.910 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:23:06.789 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:23:06.775 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:23:07.004 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:23:01.837 00:00:11.802 TCP 12.102.0.1:56242 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:19:04.312 00:06:00.213 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-25 00:24:03.679 00:00:11.804 TCP 12.102.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:25:05.514 00:00:11.807 TCP 12.102.0.1:49060 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:26:07.359 00:00:11.819 TCP 12.102.0.1:33690 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:27:09.214 00:00:11.805 TCP 12.102.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:28:06.755 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:28:06.778 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:28:06.905 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:28:06.841 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:28:06.799 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:28:06.843 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:28:06.816 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:28:11.070 00:00:11.797 TCP 12.102.0.1:39536 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:24:04.316 00:06:00.207 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:29:12.909 00:00:11.838 TCP 12.102.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:30:14.787 00:00:11.803 TCP 12.102.0.1:48436 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:26:04.314 00:06:00.211 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-25 00:31:16.629 00:00:11.802 TCP 12.102.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:32:18.472 00:00:11.801 TCP 12.102.0.1:33898 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:33:07.053 00:00:00.044 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:33:07.348 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:33:07.282 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:33:07.263 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:33:07.490 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:33:07.332 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:33:07.031 00:00:00.045 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:33:20.309 00:00:12.186 TCP 12.102.0.1:39384 -> 1.101.0.1:3000 15 1925 1 2025-07-25 00:34:22.533 00:00:11.819 TCP 12.102.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:35:24.391 00:00:11.802 TCP 12.102.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:31:04.319 00:06:00.205 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:36:26.231 00:00:11.816 TCP 12.102.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:37:28.087 00:00:11.814 TCP 12.102.0.1:46156 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:38:06.866 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:38:06.929 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:38:06.719 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:38:06.974 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:33:04.317 00:06:00.210 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-25 00:38:06.996 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:38:07.021 00:00:00.010 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:38:06.978 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:38:29.949 00:00:12.244 TCP 12.102.0.1:55718 -> 1.101.0.1:3000 15 1925 1 2025-07-25 00:39:32.235 00:00:11.802 TCP 12.102.0.1:43834 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:40:34.085 00:00:11.802 TCP 12.102.0.1:56040 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:41:35.933 00:00:11.809 TCP 12.102.0.1:37096 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:42:37.786 00:00:11.800 TCP 12.102.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:38:04.320 00:06:00.207 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:43:06.833 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:43:06.944 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:43:06.972 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:43:06.996 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:43:07.037 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:43:07.184 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:43:06.987 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:43:39.625 00:00:11.807 TCP 12.102.0.1:48094 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:44:41.475 00:00:11.805 TCP 12.102.0.1:58364 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:40:04.318 00:06:00.211 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-25 00:45:43.316 00:00:11.762 TCP 12.102.0.1:37296 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:46:45.118 00:00:11.761 TCP 12.102.0.1:34928 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:48:06.888 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:47:46.926 00:00:11.815 TCP 12.102.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:48:06.910 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:48:07.147 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:48:07.063 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:48:07.033 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:48:07.137 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:48:07.125 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:48:48.793 00:00:11.820 TCP 12.102.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:45:04.321 00:06:00.206 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:49:50.643 00:00:11.811 TCP 12.102.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:50:52.485 00:00:11.820 TCP 12.102.0.1:37942 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:51:54.332 00:00:11.758 TCP 12.102.0.1:52310 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:47:04.321 00:06:00.209 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-07-25 00:53:07.142 00:00:00.031 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:52:56.132 00:00:11.759 TCP 12.102.0.1:48648 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:53:07.058 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:53:07.147 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:53:07.287 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:53:07.432 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:53:07.263 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:53:07.121 00:00:00.031 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:53:57.935 00:00:11.817 TCP 12.102.0.1:47410 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:54:59.792 00:00:11.804 TCP 12.102.0.1:41446 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:56:01.638 00:00:11.830 TCP 12.102.0.1:57346 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:52:04.324 00:06:00.205 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-07-25 00:57:03.506 00:00:11.827 TCP 12.102.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:58:07.066 00:00:00.037 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-07-25 00:58:07.388 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 00:58:07.427 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-07-25 00:58:07.321 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-07-25 00:58:07.204 00:00:00.038 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-07-25 00:58:07.287 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-07-25 00:58:07.045 00:00:00.037 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-07-25 00:58:05.375 00:00:11.808 TCP 12.102.0.1:34506 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124047, total packets: 1136, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-07-24 23:56:04 - 2025-07-25 00:58:17 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0031s User: 0.0015s Wall: 0.0026s flows/second: 60549.7 Runtime: 0.0026s