Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 01:59:35.314 00:00:12.660 TCP 12.102.0.1:46180 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:00:38.010 00:00:11.798 TCP 12.102.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:56:08.119 00:06:00.690 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:01:39.846 00:00:11.799 TCP 12.102.0.1:60226 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:01:59.594 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:01:59.617 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:01:59.765 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:01:59.703 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:01:59.771 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:01:59.692 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:01:59.631 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 01:57:08.122 00:06:00.685 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:02:41.689 00:00:11.805 TCP 12.102.0.1:41950 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:03:43.530 00:00:11.761 TCP 12.102.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:04:45.332 00:00:11.809 TCP 12.102.0.1:51246 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:05:47.177 00:00:12.044 TCP 12.102.0.1:52044 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:06:59.617 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:06:49.263 00:00:11.808 TCP 12.102.0.1:50182 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:06:59.640 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:06:59.868 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:06:59.902 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:06:59.809 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:06:59.616 00:00:00.012 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:06:59.606 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:07:51.114 00:00:11.765 TCP 12.102.0.1:57274 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:03:08.121 00:06:00.692 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:08:52.928 00:00:11.832 TCP 12.102.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:04:08.125 00:06:00.686 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:09:54.800 00:00:11.802 TCP 12.102.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:10:56.641 00:00:11.825 TCP 12.102.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:12:00.038 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:12:00.076 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:12:00.079 00:00:00.018 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:12:00.151 00:00:00.033 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:12:00.293 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:12:00.097 00:00:00.040 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:12:00.016 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:11:58.504 00:00:11.803 TCP 12.102.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:13:00.347 00:00:11.756 TCP 12.102.0.1:33490 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:14:02.139 00:00:11.801 TCP 12.102.0.1:36520 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:10:08.121 00:06:00.694 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:15:03.978 00:00:11.800 TCP 12.102.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:11:08.125 00:06:00.688 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:16:05.826 00:00:11.797 TCP 12.102.0.1:40238 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:16:59.805 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:17:00.081 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:16:59.867 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:16:59.972 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:17:00.067 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:16:59.811 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:16:59.784 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:17:07.659 00:00:11.859 TCP 12.102.0.1:51694 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:18:09.557 00:00:11.770 TCP 12.102.0.1:52190 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:19:11.369 00:00:12.211 TCP 12.102.0.1:57744 -> 1.101.0.1:3000 15 1926 1 2025-08-02 02:20:13.618 00:00:11.803 TCP 12.102.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:21:15.456 00:00:11.803 TCP 12.102.0.1:37038 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:22:00.114 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:22:00.213 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:22:00.422 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:22:00.225 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:22:00.424 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:22:00.299 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:22:00.084 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:17:08.123 00:06:00.693 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:22:17.301 00:00:11.758 TCP 12.102.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:18:08.125 00:06:00.689 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:23:19.100 00:00:11.771 TCP 12.102.0.1:55164 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:24:20.918 00:00:11.819 TCP 12.102.0.1:35282 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:25:22.775 00:00:11.771 TCP 12.102.0.1:58536 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:26:24.583 00:00:11.801 TCP 12.102.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:27:01.478 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:27:01.501 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:27:01.638 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:27:01.662 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:27:01.440 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:27:01.685 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:27:01.597 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:27:26.454 00:00:11.801 TCP 12.102.0.1:38204 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:28:28.288 00:00:11.799 TCP 12.102.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:24:08.124 00:06:00.698 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:29:30.128 00:00:11.807 TCP 12.102.0.1:39734 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:25:08.130 00:06:00.690 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:30:31.976 00:00:11.803 TCP 12.102.0.1:56172 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:31:33.820 00:00:11.803 TCP 12.102.0.1:32882 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:32:00.471 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:32:00.493 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:32:00.384 00:00:00.005 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:32:00.527 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:32:00.340 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:32:00.063 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:32:00.340 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:32:35.659 00:00:11.806 TCP 12.102.0.1:55424 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:33:37.508 00:00:11.772 TCP 12.102.0.1:48160 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:34:39.320 00:00:11.813 TCP 12.102.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:35:41.169 00:00:11.809 TCP 12.102.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:31:08.127 00:06:00.695 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:36:43.017 00:00:11.802 TCP 12.102.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:37:00.289 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:37:00.494 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:37:00.532 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:37:00.497 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:37:00.453 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:37:00.312 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:37:00.319 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:32:08.129 00:06:00.691 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:37:44.853 00:00:11.829 TCP 12.102.0.1:35514 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:38:46.721 00:00:11.757 TCP 12.102.0.1:40468 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:39:48.518 00:00:11.810 TCP 12.102.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:40:50.372 00:00:11.777 TCP 12.102.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:42:00.394 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:42:00.586 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:42:00.674 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:42:00.661 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:42:00.418 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:42:00.503 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:42:00.371 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:41:52.186 00:00:11.811 TCP 12.102.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:42:54.066 00:00:11.805 TCP 12.102.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:38:08.129 00:06:00.697 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:39:08.131 00:06:00.692 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:43:55.908 00:00:11.834 TCP 12.102.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:44:57.788 00:00:11.843 TCP 12.102.0.1:56440 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:45:59.671 00:00:11.809 TCP 12.102.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:47:00.301 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:47:00.748 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:47:00.730 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:47:00.739 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:47:00.740 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:47:00.405 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:47:00.278 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:47:01.523 00:00:11.813 TCP 12.102.0.1:36232 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:48:03.386 00:00:11.883 TCP 12.102.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:49:05.298 00:00:12.193 TCP 12.102.0.1:45368 -> 1.101.0.1:3000 15 1926 1 2025-08-02 02:45:08.129 00:06:00.697 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:50:07.530 00:00:11.795 TCP 12.102.0.1:60528 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:46:08.133 00:06:00.691 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:51:09.364 00:00:11.822 TCP 12.102.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:52:00.606 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:52:00.803 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:52:00.658 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:52:00.620 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:52:00.788 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:52:00.666 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:52:00.586 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:52:11.226 00:00:11.802 TCP 12.102.0.1:36616 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:53:13.085 00:00:11.804 TCP 12.102.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:54:14.934 00:00:11.814 TCP 12.102.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:55:16.784 00:00:11.806 TCP 12.102.0.1:48062 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:56:18.628 00:00:11.802 TCP 12.102.0.1:57936 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:57:00.795 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 02:57:00.817 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 02:57:00.941 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:57:00.938 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 02:57:00.764 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 02:57:00.842 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 02:57:00.631 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 02:52:08.131 00:06:00.699 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-02 02:57:20.467 00:00:11.806 TCP 12.102.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:53:08.136 00:06:00.693 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-02 02:58:22.311 00:00:11.798 TCP 12.102.0.1:34486 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 264, avg pps: 0, avg bpp: 108 Time window: 2025-08-02 01:56:08 - 2025-08-02 02:59:08 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0009s Wall: 0.0025s flows/second: 64385.4 Runtime: 0.0025s