Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 22:59:10.666 00:00:11.834 TCP 12.102.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:00:12.536 00:00:11.806 TCP 12.102.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:01:14.387 00:00:11.816 TCP 12.102.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:01:56.178 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:01:56.084 00:00:00.037 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:01:56.472 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:01:55.919 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:01:56.158 00:00:00.041 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:01:56.340 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:01:56.155 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 22:58:07.995 00:05:00.749 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 22:58:07.993 00:05:00.754 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 23:02:16.244 00:00:11.767 TCP 12.102.0.1:58394 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:03:18.068 00:00:12.200 TCP 12.102.0.1:44932 -> 1.101.0.1:3000 15 1926 1 2025-08-01 23:04:20.310 00:00:11.763 TCP 12.102.0.1:37284 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:05:22.111 00:00:11.807 TCP 12.102.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:06:23.952 00:00:11.801 TCP 12.102.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:06:56.042 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:06:56.156 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:06:56.080 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:06:56.143 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:06:56.285 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:06:56.255 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:06:56.020 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:07:25.798 00:00:11.799 TCP 12.102.0.1:33308 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:04:07.994 00:05:00.754 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 23:04:07.996 00:05:00.749 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 23:08:27.637 00:00:11.806 TCP 12.102.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:09:29.481 00:00:11.768 TCP 12.102.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:10:31.281 00:00:11.799 TCP 12.102.0.1:36908 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:11:33.119 00:00:11.801 TCP 12.102.0.1:57774 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:11:56.214 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:11:56.236 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:11:56.287 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:11:56.207 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:11:56.057 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:11:56.321 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:11:56.182 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:12:34.956 00:00:11.801 TCP 12.102.0.1:45030 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:13:36.798 00:00:11.801 TCP 12.102.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:10:07.994 00:05:00.754 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 23:10:07.997 00:05:00.750 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-01 23:14:38.637 00:00:11.827 TCP 12.102.0.1:43146 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:15:40.502 00:00:11.805 TCP 12.102.0.1:45806 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:16:42.344 00:00:11.802 TCP 12.102.0.1:54136 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:16:56.392 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:16:56.221 00:00:00.047 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:16:56.502 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:16:56.423 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:16:56.419 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:16:56.306 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:16:56.368 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:17:44.184 00:00:11.763 TCP 12.102.0.1:56150 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:18:45.985 00:00:11.802 TCP 12.102.0.1:57838 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:19:47.828 00:00:11.810 TCP 12.102.0.1:56990 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:16:07.997 00:05:00.762 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-01 23:20:49.669 00:00:11.770 TCP 12.102.0.1:56016 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:16:08.001 00:06:00.756 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-01 23:21:57.274 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:21:57.444 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:21:57.250 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:21:56.995 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:21:57.256 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:21:57.066 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:21:57.251 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:21:51.479 00:00:11.797 TCP 12.102.0.1:43262 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:22:53.316 00:00:11.816 TCP 12.102.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:23:55.172 00:00:12.237 TCP 12.102.0.1:40552 -> 1.101.0.1:3000 15 1926 1 2025-08-01 23:24:57.449 00:00:11.818 TCP 12.102.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:25:59.310 00:00:11.810 TCP 12.102.0.1:41584 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:26:56.650 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:26:56.569 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:26:56.713 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:26:56.682 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:26:56.710 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:26:56.731 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:26:56.629 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:22:08.000 00:06:00.760 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-01 23:27:01.157 00:00:11.803 TCP 12.102.0.1:48630 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:23:08.003 00:06:00.754 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-01 23:28:03.008 00:00:11.799 TCP 12.102.0.1:45618 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:29:04.846 00:00:11.803 TCP 12.102.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:30:06.685 00:00:11.803 TCP 12.102.0.1:58122 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:31:08.529 00:00:11.799 TCP 12.102.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:31:56.850 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:31:56.872 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:31:56.812 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:31:56.888 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:31:56.567 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:31:56.884 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:31:56.880 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:32:10.369 00:00:11.817 TCP 12.102.0.1:59660 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:33:12.221 00:00:11.800 TCP 12.102.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:29:08.000 00:06:00.763 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-01 23:34:14.073 00:00:11.804 TCP 12.102.0.1:36064 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:30:08.003 00:06:00.758 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-01 23:35:15.920 00:00:11.821 TCP 12.102.0.1:45556 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:36:17.781 00:00:11.761 TCP 12.102.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:36:56.725 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:36:56.781 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:36:56.784 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:36:56.585 00:00:00.028 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:36:56.841 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:36:56.554 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:36:56.702 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:37:19.581 00:00:11.812 TCP 12.102.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:38:21.428 00:00:12.236 TCP 12.102.0.1:46988 -> 1.101.0.1:3000 15 1926 1 2025-08-01 23:39:23.699 00:00:11.837 TCP 12.102.0.1:42034 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:40:25.572 00:00:11.797 TCP 12.102.0.1:43830 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:36:08.003 00:06:00.762 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-01 23:41:27.408 00:00:11.801 TCP 12.102.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:41:56.754 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:41:56.777 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:41:56.969 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:41:56.799 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:41:56.871 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:41:56.915 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:41:57.021 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:37:08.005 00:06:00.758 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-01 23:42:29.249 00:00:11.822 TCP 12.102.0.1:48708 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:43:31.101 00:00:11.798 TCP 12.102.0.1:46630 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:44:32.940 00:00:11.819 TCP 12.102.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:45:34.798 00:00:11.841 TCP 12.102.0.1:47074 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:46:36.649 00:00:11.772 TCP 12.102.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:46:56.800 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:46:57.225 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:46:57.248 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:46:57.016 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:46:57.221 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:46:57.376 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:46:57.248 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:47:38.463 00:00:11.806 TCP 12.102.0.1:43040 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:43:08.019 00:06:00.747 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-01 23:48:40.310 00:00:11.798 TCP 12.102.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:44:08.024 00:06:00.739 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-01 23:49:42.143 00:00:11.813 TCP 12.102.0.1:34980 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:50:44.000 00:00:11.806 TCP 12.102.0.1:48892 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:51:56.823 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:51:56.846 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:51:56.851 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:51:45.845 00:00:11.825 TCP 12.102.0.1:42318 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:51:57.134 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:51:56.990 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:51:57.099 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:51:57.029 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:52:47.687 00:00:11.809 TCP 12.102.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:53:49.533 00:00:11.802 TCP 12.102.0.1:37014 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:54:51.372 00:00:11.822 TCP 12.102.0.1:52250 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:50:08.034 00:06:00.736 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-01 23:55:53.229 00:00:11.800 TCP 12.102.0.1:41844 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:51:08.040 00:06:00.729 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-01 23:56:57.281 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-01 23:56:57.303 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-01 23:56:57.193 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 23:56:57.323 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-01 23:56:57.338 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-01 23:56:57.203 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-01 23:56:57.252 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-01 23:56:55.079 00:00:11.758 TCP 12.102.0.1:37102 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:57:56.877 00:00:11.797 TCP 12.102.0.1:58844 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124468, total packets: 1140, avg bps: 276, avg pps: 0, avg bpp: 109 Time window: 2025-08-01 22:58:07 - 2025-08-01 23:58:08 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0038s User: 0.0009s Wall: 0.0022s flows/second: 72393.6 Runtime: 0.0022s