Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 08:58:47.950 00:00:11.806 TCP 12.102.0.1:33406 -> 1.101.0.1:3000 11 1507 1 2025-08-15 08:55:14.971 00:05:00.187 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 08:59:49.789 00:00:11.812 TCP 12.102.0.1:49398 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:00:51.636 00:00:11.799 TCP 12.102.0.1:38932 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:01:53.476 00:00:11.803 TCP 12.102.0.1:41990 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:02:55.314 00:00:11.758 TCP 12.102.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-08-15 08:59:14.974 00:05:00.182 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:03:23.805 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:03:23.828 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:03:23.812 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:03:23.909 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:03:23.862 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:03:24.051 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:03:23.937 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:03:57.112 00:00:11.800 TCP 12.102.0.1:49882 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:04:58.953 00:00:11.800 TCP 12.102.0.1:34280 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:01:14.971 00:05:00.187 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:06:00.792 00:00:11.773 TCP 12.102.0.1:36912 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:07:02.600 00:00:11.761 TCP 12.102.0.1:44372 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:08:04.399 00:00:11.801 TCP 12.102.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:08:23.652 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:08:23.676 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:08:23.655 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:08:23.758 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:08:23.639 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:08:23.756 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:08:23.534 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:05:14.975 00:05:00.184 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:09:06.245 00:00:11.803 TCP 12.102.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:10:08.087 00:00:11.804 TCP 12.102.0.1:54618 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:07:14.973 00:05:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:11:09.930 00:00:11.830 TCP 12.102.0.1:60388 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:12:11.790 00:00:11.853 TCP 12.102.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:13:23.679 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:13:13.685 00:00:11.802 TCP 12.102.0.1:45038 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:13:23.703 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:13:23.649 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:13:23.906 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:13:23.665 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:13:23.665 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:13:23.710 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:14:15.530 00:00:11.809 TCP 12.102.0.1:40582 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:11:14.978 00:05:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:15:17.380 00:00:11.862 TCP 12.102.0.1:53056 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:16:19.289 00:00:11.813 TCP 12.102.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:13:14.976 00:05:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:17:21.138 00:00:11.805 TCP 12.102.0.1:37578 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:18:24.128 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:18:24.150 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:18:24.194 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:18:23.915 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:18:23.877 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:18:24.120 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:18:24.159 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:18:22.984 00:00:11.806 TCP 12.102.0.1:33786 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:19:24.826 00:00:11.811 TCP 12.102.0.1:50882 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:20:26.684 00:00:11.775 TCP 12.102.0.1:49878 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:17:14.979 00:05:00.180 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:21:28.489 00:00:11.772 TCP 12.102.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:22:30.305 00:00:11.808 TCP 12.102.0.1:51446 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:19:14.979 00:05:00.185 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:23:23.953 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:23:23.977 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:23:23.956 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:23:23.914 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:23:23.898 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:23:23.821 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:23:23.881 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:23:32.155 00:00:11.803 TCP 12.102.0.1:55898 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:24:33.996 00:00:11.798 TCP 12.102.0.1:35214 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:25:35.833 00:00:11.802 TCP 12.102.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:26:37.674 00:00:11.817 TCP 12.102.0.1:38136 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:23:14.982 00:05:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:27:39.534 00:00:11.807 TCP 12.102.0.1:55010 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:28:23.900 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:28:23.923 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:28:24.065 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:28:23.858 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:28:24.058 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:28:23.965 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:28:23.835 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:28:41.379 00:00:11.829 TCP 12.102.0.1:57800 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:25:14.979 00:05:00.185 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:29:43.241 00:00:11.800 TCP 12.102.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:30:45.087 00:00:11.755 TCP 12.102.0.1:59450 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:31:46.879 00:00:11.757 TCP 12.102.0.1:44894 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:32:48.677 00:00:11.802 TCP 12.102.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:29:14.982 00:05:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:33:23.886 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:33:24.193 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:33:24.173 00:00:00.036 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:33:24.181 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:33:24.109 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:33:23.865 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:33:23.863 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:33:50.517 00:00:11.802 TCP 12.102.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:34:52.354 00:00:11.757 TCP 12.102.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:31:14.979 00:05:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:35:54.151 00:00:11.811 TCP 12.102.0.1:40398 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:36:56.005 00:00:11.801 TCP 12.102.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:37:57.844 00:00:11.801 TCP 12.102.0.1:33788 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:38:24.176 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:38:24.199 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:38:24.181 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:38:24.259 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:38:24.242 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:38:24.145 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:38:24.098 00:00:00.039 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:38:59.687 00:00:11.799 TCP 12.102.0.1:48872 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:35:14.984 00:05:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:40:01.519 00:00:11.801 TCP 12.102.0.1:51572 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:37:14.982 00:05:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:41:03.358 00:00:11.819 TCP 12.102.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:42:05.217 00:00:11.758 TCP 12.102.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:43:07.025 00:00:12.073 TCP 12.102.0.1:57890 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:43:24.352 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:43:24.375 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:43:24.327 00:00:00.019 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:43:24.358 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:43:24.473 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:43:24.344 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:43:24.064 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:44:09.138 00:00:11.814 TCP 12.102.0.1:35536 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:41:14.985 00:05:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:45:10.986 00:00:12.193 TCP 12.102.0.1:36670 -> 1.101.0.1:3000 15 1926 1 2025-08-15 09:46:13.215 00:00:11.804 TCP 12.102.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:43:14.984 00:05:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:47:15.082 00:00:11.832 TCP 12.102.0.1:58928 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:48:24.525 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:48:24.410 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:48:24.432 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:48:24.443 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:48:24.494 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:48:24.534 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:48:24.502 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:48:16.948 00:00:11.801 TCP 12.102.0.1:56060 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:49:18.784 00:00:11.826 TCP 12.102.0.1:36772 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:50:20.635 00:00:11.811 TCP 12.102.0.1:54490 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:47:14.988 00:05:00.182 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:51:22.485 00:00:11.810 TCP 12.102.0.1:41024 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:52:24.325 00:00:11.768 TCP 12.102.0.1:53664 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:49:14.984 00:05:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 09:53:24.482 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:53:24.504 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:53:24.665 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:53:24.715 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:53:24.636 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:53:24.531 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:53:24.302 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:53:26.129 00:00:11.989 TCP 12.102.0.1:52880 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:54:28.157 00:00:11.808 TCP 12.102.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:55:30.006 00:00:11.797 TCP 12.102.0.1:51616 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:56:31.841 00:00:11.757 TCP 12.102.0.1:55436 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:53:14.989 00:05:00.182 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 09:57:33.638 00:00:11.798 TCP 12.102.0.1:42964 -> 1.101.0.1:3000 11 1507 1 2025-08-15 09:58:24.686 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 09:58:24.828 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 09:58:24.634 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 09:58:24.797 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 09:58:24.709 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 09:58:24.845 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 09:58:24.769 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 09:58:35.479 00:00:11.804 TCP 12.102.0.1:52662 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 125260, total packets: 1145, avg bps: 262, avg pps: 0, avg bpp: 109 Time window: 2025-08-15 08:55:14 - 2025-08-15 09:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0025s User: 0.0025s Wall: 0.0030s flows/second: 54588.9 Runtime: 0.0030s