Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 01:59:08.077 00:00:11.802 TCP 12.102.0.1:46460 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:54:24.566 00:06:00.163 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 01:54:24.570 00:06:00.158 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:00:09.918 00:00:11.839 TCP 12.102.0.1:57866 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:01:11.792 00:00:11.864 TCP 12.102.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:02:24.271 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:02:24.293 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:02:13.698 00:00:11.767 TCP 12.102.0.1:45866 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:02:24.572 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:02:24.378 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:02:24.324 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:02:24.108 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:02:24.448 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:03:15.504 00:00:11.810 TCP 12.102.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:04:17.362 00:00:11.831 TCP 12.102.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:05:19.236 00:00:11.813 TCP 12.102.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:01:24.572 00:06:00.157 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:01:24.569 00:06:00.162 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 02:06:21.088 00:00:11.815 TCP 12.102.0.1:44076 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:07:24.332 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:07:24.097 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:07:24.428 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:07:24.408 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:07:24.516 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:07:24.396 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:07:24.310 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:07:22.930 00:00:11.818 TCP 12.102.0.1:60346 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:08:24.786 00:00:11.799 TCP 12.102.0.1:44384 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:09:26.629 00:00:11.761 TCP 12.102.0.1:46494 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:10:28.430 00:00:11.759 TCP 12.102.0.1:58324 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:11:30.227 00:00:11.801 TCP 12.102.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:12:24.387 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:12:24.409 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:12:24.294 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:12:24.310 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:12:24.393 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:12:24.558 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:12:24.353 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:12:32.082 00:00:11.793 TCP 12.102.0.1:48480 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:08:24.573 00:06:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 02:08:24.576 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:13:33.915 00:00:11.824 TCP 12.102.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:14:35.777 00:00:11.837 TCP 12.102.0.1:39634 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:15:37.653 00:00:11.814 TCP 12.102.0.1:45840 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:16:39.501 00:00:11.803 TCP 12.102.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:17:24.254 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:17:24.236 00:00:00.043 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:17:24.613 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:17:24.251 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:17:24.576 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:17:24.450 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:17:24.231 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:17:41.340 00:00:11.766 TCP 12.102.0.1:44088 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:18:43.146 00:00:11.803 TCP 12.102.0.1:51148 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:19:44.989 00:00:11.806 TCP 12.102.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:15:24.578 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:15:24.577 00:06:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 02:20:46.837 00:00:11.810 TCP 12.102.0.1:58956 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:21:48.680 00:00:11.802 TCP 12.102.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:22:24.545 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:22:24.568 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:22:24.729 00:00:00.015 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:22:24.808 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:22:24.534 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:22:24.779 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:22:24.308 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:22:50.520 00:00:12.235 TCP 12.102.0.1:44000 -> 1.101.0.1:3000 15 1926 1 2025-09-03 02:23:52.797 00:00:11.775 TCP 12.102.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:24:54.604 00:00:11.824 TCP 12.102.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:25:56.490 00:00:11.802 TCP 12.102.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:26:58.338 00:00:11.822 TCP 12.102.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:27:24.784 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:22:24.581 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 02:27:24.555 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:27:24.739 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:27:24.796 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:27:24.840 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:27:24.711 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:27:24.761 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:22:24.584 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:28:00.197 00:00:12.239 TCP 12.102.0.1:49280 -> 1.101.0.1:3000 15 1926 1 2025-09-03 02:29:02.476 00:00:11.778 TCP 12.102.0.1:46892 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:30:04.292 00:00:11.799 TCP 12.102.0.1:41660 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:31:06.127 00:00:15.010 TCP 12.102.0.1:47142 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:32:24.699 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:32:11.179 00:00:11.800 TCP 12.102.0.1:42974 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:32:24.974 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:32:24.722 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:32:24.804 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:32:24.703 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:32:24.689 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:32:24.676 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:33:13.032 00:00:12.129 TCP 12.102.0.1:36138 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:29:24.585 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:29:24.583 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 02:34:15.208 00:00:11.818 TCP 12.102.0.1:52630 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:35:17.078 00:00:11.814 TCP 12.102.0.1:50552 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:36:18.926 00:00:11.822 TCP 12.102.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:37:24.932 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:37:24.955 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:37:24.804 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:37:24.971 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:37:24.945 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:37:25.080 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:37:24.916 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:37:20.781 00:00:11.805 TCP 12.102.0.1:39412 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:38:22.640 00:00:11.803 TCP 12.102.0.1:38740 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:39:24.482 00:00:11.805 TCP 12.102.0.1:47072 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:40:26.325 00:00:11.801 TCP 12.102.0.1:36084 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:36:24.584 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 02:36:24.586 00:06:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:41:28.165 00:00:11.816 TCP 12.102.0.1:44478 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:42:24.922 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:42:24.954 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:42:24.685 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:42:25.010 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:42:24.963 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:42:24.930 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:42:24.899 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:42:30.030 00:00:11.801 TCP 12.102.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:43:31.870 00:00:11.802 TCP 12.102.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:44:33.710 00:00:12.193 TCP 12.102.0.1:50548 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:45:35.944 00:00:11.762 TCP 12.102.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:46:37.746 00:00:11.801 TCP 12.102.0.1:37586 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:47:25.148 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:47:25.145 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:47:25.088 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:47:25.104 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:47:25.155 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:47:25.027 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:47:25.125 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:47:39.587 00:00:11.827 TCP 12.102.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:43:24.588 00:06:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:43:24.584 00:06:00.158 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 02:48:41.453 00:00:11.800 TCP 12.102.0.1:53112 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:49:43.296 00:00:11.804 TCP 12.102.0.1:44298 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:50:45.138 00:00:11.830 TCP 12.102.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:51:47.006 00:00:11.806 TCP 12.102.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:52:25.228 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:52:25.251 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:52:25.878 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:52:25.572 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:52:25.641 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:52:25.748 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:52:25.227 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:52:48.848 00:00:12.198 TCP 12.102.0.1:43736 -> 1.101.0.1:3000 15 1926 1 2025-09-03 02:53:51.089 00:00:11.811 TCP 12.102.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:54:52.937 00:00:11.765 TCP 12.102.0.1:59576 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:50:24.590 00:06:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 02:50:24.588 00:06:00.156 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 02:55:54.743 00:00:11.760 TCP 12.102.0.1:41776 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:56:56.568 00:00:11.761 TCP 12.102.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:57:25.429 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 02:57:25.349 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:57:25.570 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 02:57:25.471 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 02:57:25.486 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 02:57:25.361 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 02:57:25.408 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 02:57:58.367 00:00:11.826 TCP 12.102.0.1:43908 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125329, total packets: 1154, avg bps: 262, avg pps: 0, avg bpp: 108 Time window: 2025-09-03 01:54:24 - 2025-09-03 02:58:10 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0043s User: 0.0009s Wall: 0.0036s flows/second: 44369.5 Runtime: 0.0036s