Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 19:59:24.896 00:00:12.670 TCP 12.102.0.1:40708 -> 1.101.0.1:3000 17 2241 1 2025-08-09 20:00:27.617 00:00:11.803 TCP 12.102.0.1:52138 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:00:43.406 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:00:43.525 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:00:43.586 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:00:43.489 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:00:43.426 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:00:43.384 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:00:43.384 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 19:57:11.986 00:05:00.577 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 20:01:29.460 00:00:11.804 TCP 12.102.0.1:50948 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:02:31.305 00:00:11.753 TCP 12.102.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-08-09 19:59:11.990 00:05:00.572 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 20:03:33.098 00:00:11.804 TCP 12.102.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:04:34.945 00:00:11.816 TCP 12.102.0.1:37210 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:05:43.510 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:05:43.294 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:05:43.645 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:05:43.543 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:05:43.566 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:05:43.431 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:05:43.487 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:05:36.804 00:00:11.799 TCP 12.102.0.1:58904 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:06:38.645 00:00:11.798 TCP 12.102.0.1:40448 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:03:11.992 00:05:00.574 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 20:07:40.483 00:00:11.809 TCP 12.102.0.1:33104 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:08:42.328 00:00:11.771 TCP 12.102.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:05:11.994 00:05:00.568 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 20:09:44.127 00:00:11.806 TCP 12.102.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:10:44.003 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:10:43.789 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:10:43.876 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:10:43.930 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:10:44.022 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:10:43.808 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:10:43.979 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:10:45.969 00:00:11.808 TCP 12.102.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:11:47.814 00:00:11.799 TCP 12.102.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:12:49.650 00:00:11.811 TCP 12.102.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:09:11.993 00:05:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 20:13:51.500 00:00:11.764 TCP 12.102.0.1:50458 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:14:53.304 00:00:11.831 TCP 12.102.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:11:11.996 00:05:00.568 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 20:15:43.823 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:15:43.889 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:15:43.848 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:15:43.720 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:15:43.914 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:15:43.594 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:15:43.801 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:15:55.170 00:00:11.763 TCP 12.102.0.1:60548 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:16:56.971 00:00:11.797 TCP 12.102.0.1:44806 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:17:58.811 00:00:11.772 TCP 12.102.0.1:35546 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:19:00.621 00:00:12.117 TCP 12.102.0.1:36930 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:15:11.995 00:05:00.571 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 20:20:02.772 00:00:11.764 TCP 12.102.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:20:43.821 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:20:43.640 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:20:43.601 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:20:43.723 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:20:43.640 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:20:43.637 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:20:43.799 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:21:04.574 00:00:11.807 TCP 12.102.0.1:39700 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:17:11.998 00:05:00.567 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 20:22:06.413 00:00:11.794 TCP 12.102.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:23:08.247 00:00:11.803 TCP 12.102.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:24:10.088 00:00:12.671 TCP 12.102.0.1:54650 -> 1.101.0.1:3000 17 2241 1 2025-08-09 20:21:11.996 00:05:00.571 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 20:25:12.798 00:00:11.797 TCP 12.102.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:25:43.969 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:25:44.159 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:25:44.148 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:25:44.126 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:25:44.145 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:25:43.975 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:25:43.945 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:26:14.634 00:00:11.809 TCP 12.102.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:27:16.480 00:00:11.820 TCP 12.102.0.1:44146 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:23:12.001 00:06:00.564 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-09 20:28:18.322 00:00:11.795 TCP 12.102.0.1:46240 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:29:20.159 00:00:11.851 TCP 12.102.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:30:22.073 00:00:11.821 TCP 12.102.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:30:44.073 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:30:44.224 00:00:00.041 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:30:44.153 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:30:44.062 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:30:44.093 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:30:43.862 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:30:44.050 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:27:11.998 00:05:00.571 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 20:31:23.922 00:00:11.821 TCP 12.102.0.1:46464 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:32:25.780 00:00:11.822 TCP 12.102.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:33:27.644 00:00:11.801 TCP 12.102.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:34:29.484 00:00:11.762 TCP 12.102.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:30:12.002 00:06:00.567 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-09 20:35:31.285 00:00:11.806 TCP 12.102.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:35:44.121 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:35:44.332 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:35:44.040 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:35:44.227 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:35:44.423 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:35:44.196 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:35:44.098 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:36:33.131 00:00:13.810 TCP 12.102.0.1:42444 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:37:36.977 00:00:11.797 TCP 12.102.0.1:53790 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:33:12.000 00:06:00.571 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-09 20:38:38.815 00:00:11.758 TCP 12.102.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:39:40.616 00:00:11.825 TCP 12.102.0.1:55212 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:40:43.950 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:40:43.972 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:40:44.474 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:40:44.330 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:40:44.389 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:40:44.199 00:00:00.043 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:40:44.276 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:40:42.475 00:00:11.811 TCP 12.102.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:41:44.321 00:00:11.811 TCP 12.102.0.1:36198 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:37:12.024 00:06:00.546 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-09 20:42:46.168 00:00:11.800 TCP 12.102.0.1:51602 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:43:48.004 00:00:11.853 TCP 12.102.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:44:49.897 00:00:11.759 TCP 12.102.0.1:46978 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:40:12.031 00:06:00.544 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-09 20:45:44.340 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:45:44.355 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:45:44.536 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:45:44.131 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:45:44.467 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:45:44.095 00:00:00.043 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:45:44.318 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:45:51.695 00:00:11.796 TCP 12.102.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:46:53.533 00:00:11.801 TCP 12.102.0.1:55822 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:47:55.371 00:00:11.822 TCP 12.102.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:48:57.241 00:00:11.809 TCP 12.102.0.1:38464 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:44:12.036 00:06:00.537 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-09 20:49:59.097 00:00:11.806 TCP 12.102.0.1:58336 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:50:44.571 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:50:44.643 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:50:44.843 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:50:44.617 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:50:44.677 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:50:44.760 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:50:44.620 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:51:00.945 00:00:11.808 TCP 12.102.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:47:12.034 00:06:00.542 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-09 20:52:02.795 00:00:11.805 TCP 12.102.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:53:04.642 00:00:11.798 TCP 12.102.0.1:44844 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:54:06.486 00:00:11.799 TCP 12.102.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:55:08.323 00:00:11.763 TCP 12.102.0.1:44068 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:55:44.515 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 20:55:44.805 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 20:55:44.647 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 20:55:44.533 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 20:55:44.717 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 20:55:44.707 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 20:55:44.492 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 20:51:12.040 00:06:00.538 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-09 20:56:10.120 00:00:11.810 TCP 12.102.0.1:47200 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:57:11.968 00:00:11.801 TCP 12.102.0.1:35978 -> 1.101.0.1:3000 11 1507 1 2025-08-09 20:58:13.810 00:00:11.759 TCP 12.102.0.1:52686 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124310, total packets: 1134, avg bps: 270, avg pps: 0, avg bpp: 109 Time window: 2025-08-09 19:57:11 - 2025-08-09 20:58:25 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0030s User: 0.0010s Wall: 0.0022s flows/second: 72136.8 Runtime: 0.0022s