Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 09:58:45.084 00:00:11.802 TCP 12.102.0.1:59920 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:59:46.923 00:00:11.899 TCP 12.102.0.1:50220 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:56:19.984 00:05:00.435 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 09:56:19.975 00:05:00.445 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:00:48.869 00:00:11.761 TCP 12.102.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:01:50.666 00:00:11.810 TCP 12.102.0.1:59406 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:02:52.518 00:00:11.857 TCP 12.102.0.1:44526 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:03:13.309 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:03:13.648 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:03:13.594 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:03:13.453 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:03:13.675 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:03:13.418 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:03:13.287 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:03:54.418 00:00:11.806 TCP 12.102.0.1:60116 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:04:56.261 00:00:11.801 TCP 12.102.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:05:58.102 00:00:11.801 TCP 12.102.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:02:19.975 00:05:00.449 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:02:19.979 00:05:00.443 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:06:59.941 00:00:11.802 TCP 12.102.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:08:13.900 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:08:14.284 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:08:14.235 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:08:01.781 00:00:11.800 TCP 12.102.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:08:14.185 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:08:14.104 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:08:14.073 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:08:13.878 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:09:03.626 00:00:11.796 TCP 12.102.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:10:05.462 00:00:11.813 TCP 12.102.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:11:07.310 00:00:11.850 TCP 12.102.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:12:09.201 00:00:11.761 TCP 12.102.0.1:53954 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:08:19.976 00:05:00.454 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:08:19.979 00:05:00.449 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:13:13.739 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:13:13.762 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:13:13.904 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:13:13.978 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:13:13.789 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:13:13.927 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:13:13.656 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:13:10.995 00:00:11.815 TCP 12.102.0.1:53700 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:14:12.837 00:00:11.859 TCP 12.102.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:15:14.734 00:00:11.768 TCP 12.102.0.1:59774 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:16:16.542 00:00:11.825 TCP 12.102.0.1:46490 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:17:18.407 00:00:11.777 TCP 12.102.0.1:44634 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:18:13.834 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:18:13.854 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:18:13.885 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:18:13.690 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:18:13.954 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:18:13.834 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:18:13.811 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:14:19.980 00:05:00.444 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:14:19.978 00:05:00.449 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:18:20.221 00:00:11.854 TCP 12.102.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:19:22.115 00:00:12.067 TCP 12.102.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:20:24.228 00:00:11.774 TCP 12.102.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:21:26.072 00:00:11.808 TCP 12.102.0.1:33478 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:22:27.921 00:00:11.823 TCP 12.102.0.1:57042 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:23:13.944 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:23:13.988 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:23:14.135 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:23:13.972 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:23:14.132 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:23:13.848 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:23:13.921 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:23:29.787 00:00:11.804 TCP 12.102.0.1:56688 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:20:19.983 00:05:00.443 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:20:19.979 00:05:00.449 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:24:31.634 00:00:11.808 TCP 12.102.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:25:33.481 00:00:11.814 TCP 12.102.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:26:35.329 00:00:11.806 TCP 12.102.0.1:33774 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:27:37.175 00:00:11.805 TCP 12.102.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:28:13.912 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:28:14.168 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:28:14.020 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:28:14.004 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:28:14.041 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:28:13.987 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:28:13.891 00:00:00.028 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:28:39.026 00:00:11.794 TCP 12.102.0.1:39254 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:29:40.860 00:00:11.799 TCP 12.102.0.1:52380 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:26:19.982 00:05:00.448 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:26:19.984 00:05:00.442 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:30:42.699 00:00:11.823 TCP 12.102.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:31:44.564 00:00:11.780 TCP 12.102.0.1:46248 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:32:46.377 00:00:11.813 TCP 12.102.0.1:34690 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:33:13.952 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:33:14.408 00:00:00.015 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:33:14.157 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:33:14.369 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:33:14.408 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:33:14.214 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:33:13.929 00:00:00.028 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:33:48.224 00:00:11.858 TCP 12.102.0.1:59454 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:34:50.117 00:00:11.811 TCP 12.102.0.1:33760 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:35:51.968 00:00:11.803 TCP 12.102.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:32:19.986 00:05:00.445 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:32:19.989 00:05:00.439 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:36:53.809 00:00:11.778 TCP 12.102.0.1:35176 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:37:55.629 00:00:11.816 TCP 12.102.0.1:58742 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:38:14.139 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:38:14.161 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:38:14.415 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:38:14.296 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:38:14.322 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:38:14.410 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:38:14.308 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:38:57.481 00:00:11.800 TCP 12.102.0.1:52328 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:39:59.319 00:00:11.801 TCP 12.102.0.1:52726 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:41:01.156 00:00:11.809 TCP 12.102.0.1:46014 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:42:03.022 00:00:11.811 TCP 12.102.0.1:54990 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:38:19.989 00:05:00.439 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:38:19.986 00:05:00.445 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:43:14.469 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:43:04.869 00:00:11.871 TCP 12.102.0.1:47944 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:43:14.492 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:43:14.527 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:43:14.337 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:43:14.428 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:43:14.435 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:43:14.470 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:44:06.781 00:00:11.790 TCP 12.102.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:45:08.613 00:00:11.763 TCP 12.102.0.1:53836 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:46:10.417 00:00:11.804 TCP 12.102.0.1:60282 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:47:12.262 00:00:11.763 TCP 12.102.0.1:33984 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:48:14.506 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:48:14.440 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:48:14.409 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:48:14.491 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:48:14.508 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:48:14.540 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:48:14.530 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:44:19.988 00:05:00.447 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:44:19.991 00:05:00.442 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:48:14.074 00:00:11.837 TCP 12.102.0.1:50142 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:49:15.951 00:00:11.798 TCP 12.102.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:50:17.786 00:00:11.759 TCP 12.102.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:51:19.579 00:00:11.816 TCP 12.102.0.1:55542 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:52:21.433 00:00:11.810 TCP 12.102.0.1:51248 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:53:14.958 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:53:14.981 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:53:14.782 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:53:14.837 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:53:14.812 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:53:14.807 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:53:14.780 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:53:23.282 00:00:11.764 TCP 12.102.0.1:56858 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:50:19.991 00:05:00.445 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 10:50:19.993 00:05:00.440 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 10:54:25.087 00:00:11.798 TCP 12.102.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:55:26.925 00:00:11.821 TCP 12.102.0.1:48232 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:56:28.781 00:00:11.804 TCP 12.102.0.1:45188 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:57:30.622 00:00:11.760 TCP 12.102.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:58:14.797 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 10:58:14.982 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:58:15.067 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 10:58:14.697 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 10:58:15.133 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 10:58:14.885 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 10:58:14.774 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 10:58:32.421 00:00:11.802 TCP 12.102.0.1:60822 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 124841, total packets: 1141, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-08-25 09:56:19 - 2025-08-25 10:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0012s Wall: 0.0028s flows/second: 57776.7 Runtime: 0.0028s