Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 09:58:45.246 00:00:11.803 TCP 12.102.0.1:34874 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:59:47.088 00:00:11.796 TCP 12.102.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:00:48.931 00:00:11.815 TCP 12.102.0.1:40480 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:57:07.740 00:05:00.761 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 09:57:07.737 00:05:00.765 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:01:40.408 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:01:40.627 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:01:40.712 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:01:40.534 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:01:40.273 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:01:40.512 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:01:40.386 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:01:50.788 00:00:11.803 TCP 12.102.0.1:49652 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:02:52.630 00:00:11.803 TCP 12.102.0.1:44748 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:03:54.469 00:00:11.797 TCP 12.102.0.1:42102 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:04:56.307 00:00:11.755 TCP 12.102.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:05:58.102 00:00:11.806 TCP 12.102.0.1:51256 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:06:40.530 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:06:40.553 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:06:40.513 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:06:40.676 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:06:40.472 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:06:40.744 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:06:40.551 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:03:07.743 00:05:00.761 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:06:59.942 00:00:11.805 TCP 12.102.0.1:32948 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:03:07.745 00:05:00.756 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:08:01.790 00:00:11.818 TCP 12.102.0.1:58422 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:09:03.660 00:00:11.770 TCP 12.102.0.1:34740 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:10:05.465 00:00:11.764 TCP 12.102.0.1:37168 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:11:07.266 00:00:11.802 TCP 12.102.0.1:34694 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:11:40.461 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:11:40.760 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:11:40.766 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:11:40.480 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:11:40.827 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:11:40.546 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:11:40.438 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:12:09.116 00:00:11.800 TCP 12.102.0.1:46392 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:09:07.745 00:05:00.761 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:09:07.747 00:05:00.756 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:13:10.961 00:00:11.758 TCP 12.102.0.1:46408 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:14:12.758 00:00:12.232 TCP 12.102.0.1:49534 -> 1.101.0.1:3000 15 1926 1 2025-08-01 10:15:15.037 00:00:11.800 TCP 12.102.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:16:16.874 00:00:11.802 TCP 12.102.0.1:44004 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:16:40.676 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:16:40.585 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:16:40.726 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:16:40.706 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:16:40.716 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:16:40.745 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:16:40.653 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:17:18.721 00:00:11.814 TCP 12.102.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:18:20.570 00:00:11.805 TCP 12.102.0.1:57066 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:15:07.749 00:05:00.756 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:15:07.746 00:05:00.761 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:19:22.422 00:00:11.820 TCP 12.102.0.1:47592 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:20:24.281 00:00:11.757 TCP 12.102.0.1:47844 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:21:40.690 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:21:26.085 00:00:11.801 TCP 12.102.0.1:42154 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:21:40.713 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:21:40.910 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:21:40.930 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:21:40.752 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:21:40.824 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:21:40.813 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:22:27.921 00:00:11.875 TCP 12.102.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:23:29.834 00:00:11.799 TCP 12.102.0.1:55192 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:24:31.675 00:00:11.797 TCP 12.102.0.1:48236 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:21:07.748 00:05:00.762 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:21:07.750 00:05:00.756 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:25:33.515 00:00:11.804 TCP 12.102.0.1:46152 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:26:41.109 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:26:40.899 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:26:41.131 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:26:41.197 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:26:41.126 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:26:41.092 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:26:40.924 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:26:35.359 00:00:11.830 TCP 12.102.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:27:37.233 00:00:11.806 TCP 12.102.0.1:49086 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:28:39.080 00:00:11.767 TCP 12.102.0.1:56974 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:29:40.899 00:00:11.800 TCP 12.102.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:30:42.742 00:00:11.808 TCP 12.102.0.1:52374 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:27:07.749 00:05:00.762 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:27:07.751 00:05:00.757 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:31:40.975 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:31:40.996 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:31:40.825 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:31:41.116 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:31:40.990 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:31:41.084 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:31:41.017 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:31:44.581 00:00:11.808 TCP 12.102.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:32:46.427 00:00:11.794 TCP 12.102.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:33:48.263 00:00:11.799 TCP 12.102.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:34:50.094 00:00:11.756 TCP 12.102.0.1:35372 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:35:51.890 00:00:11.809 TCP 12.102.0.1:60700 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:36:41.162 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:36:41.311 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:36:41.341 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:36:41.041 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:36:41.132 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:36:41.231 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:36:41.139 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:36:53.740 00:00:11.803 TCP 12.102.0.1:34870 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:33:07.750 00:05:00.762 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:33:07.753 00:05:00.756 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:37:55.584 00:00:11.765 TCP 12.102.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:38:57.385 00:00:11.872 TCP 12.102.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:39:59.296 00:00:11.803 TCP 12.102.0.1:58842 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:41:01.133 00:00:11.819 TCP 12.102.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:41:41.107 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:41:41.129 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:41:41.316 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:41:41.141 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:41:41.283 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:41:41.106 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:41:41.264 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:42:02.987 00:00:11.799 TCP 12.102.0.1:33164 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:39:07.750 00:05:00.762 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:39:07.753 00:05:00.757 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:43:04.824 00:00:11.802 TCP 12.102.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:44:06.663 00:00:11.822 TCP 12.102.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:45:08.524 00:00:11.822 TCP 12.102.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:46:10.388 00:00:11.807 TCP 12.102.0.1:51230 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:46:41.325 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:46:41.352 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:46:41.478 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:46:41.397 00:00:00.042 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:46:41.449 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:46:41.691 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:46:41.153 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:47:12.229 00:00:11.807 TCP 12.102.0.1:34042 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:48:14.081 00:00:11.860 TCP 12.102.0.1:43798 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:45:07.751 00:05:00.764 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:45:07.755 00:05:00.759 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:49:15.980 00:00:11.800 TCP 12.102.0.1:36300 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:50:17.835 00:00:11.814 TCP 12.102.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:51:19.685 00:00:11.818 TCP 12.102.0.1:58400 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:51:41.387 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:51:41.409 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:51:41.451 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:51:41.402 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:51:41.454 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:51:41.548 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:51:41.359 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:52:21.557 00:00:11.767 TCP 12.102.0.1:50074 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:53:23.363 00:00:11.786 TCP 12.102.0.1:45116 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:54:25.192 00:00:11.801 TCP 12.102.0.1:36144 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:51:07.754 00:05:00.764 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 10:51:07.757 00:05:00.758 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 10:55:27.034 00:00:11.805 TCP 12.102.0.1:39902 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:56:41.544 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 10:56:28.874 00:00:11.799 TCP 12.102.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:56:41.567 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 10:56:41.575 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 10:56:41.421 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 10:56:41.599 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 10:56:41.744 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 10:56:41.617 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 10:57:30.712 00:00:11.847 TCP 12.102.0.1:58866 -> 1.101.0.1:3000 11 1507 1 2025-08-01 10:58:32.599 00:00:11.805 TCP 12.102.0.1:41932 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 125260, total packets: 1145, avg bps: 271, avg pps: 0, avg bpp: 109 Time window: 2025-08-01 09:57:07 - 2025-08-01 10:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0008s Wall: 0.0017s flows/second: 94377.6 Runtime: 0.0017s