Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 23:59:06.510 00:00:11.770 TCP 12.102.0.1:55606 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:00:08.327 00:00:11.805 TCP 12.102.0.1:50594 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:01:10.171 00:00:11.770 TCP 12.102.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:02:11.984 00:00:11.800 TCP 12.102.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:02:50.536 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:02:50.560 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:02:50.833 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:02:50.701 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:02:50.677 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:02:50.766 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:02:50.457 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:03:13.824 00:00:11.807 TCP 12.102.0.1:44410 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:59:25.096 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 00:04:15.670 00:00:11.808 TCP 12.102.0.1:53208 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:00:25.099 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 00:05:17.520 00:00:11.801 TCP 12.102.0.1:45516 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:06:19.363 00:00:11.817 TCP 12.102.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:07:21.223 00:00:11.808 TCP 12.102.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:07:50.797 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:07:50.931 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:07:50.961 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:07:50.783 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:07:50.625 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:07:50.888 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:07:50.774 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:08:23.089 00:00:12.676 TCP 12.102.0.1:53588 -> 1.101.0.1:3000 17 2241 1 2025-09-04 00:09:25.804 00:00:11.811 TCP 12.102.0.1:50966 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:10:27.657 00:00:11.863 TCP 12.102.0.1:57172 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:06:25.100 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 00:11:29.559 00:00:11.824 TCP 12.102.0.1:50376 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:07:25.103 00:06:00.070 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 00:12:50.893 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:12:31.416 00:00:11.805 TCP 12.102.0.1:60796 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:12:50.917 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:12:50.990 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:12:50.850 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:12:50.970 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:12:51.006 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:12:50.869 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:13:33.258 00:00:11.855 TCP 12.102.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:14:35.186 00:00:11.801 TCP 12.102.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:15:37.040 00:00:11.801 TCP 12.102.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:16:38.875 00:00:11.800 TCP 12.102.0.1:56780 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:17:51.284 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:17:51.320 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:17:51.365 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:17:51.295 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:17:51.385 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:17:51.189 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:17:51.261 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:17:40.715 00:00:11.765 TCP 12.102.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:13:25.103 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 00:18:42.518 00:00:11.802 TCP 12.102.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:14:25.105 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 00:19:44.359 00:00:11.832 TCP 12.102.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:20:46.230 00:00:11.811 TCP 12.102.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:21:48.080 00:00:11.763 TCP 12.102.0.1:42962 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:22:51.255 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:22:51.114 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:22:51.309 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:22:51.210 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:22:51.394 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:22:51.272 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:22:51.232 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:22:49.882 00:00:12.209 TCP 12.102.0.1:52632 -> 1.101.0.1:3000 15 1926 1 2025-09-04 00:23:52.130 00:00:11.761 TCP 12.102.0.1:39650 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:24:53.928 00:00:11.829 TCP 12.102.0.1:55158 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:20:25.104 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 00:25:55.803 00:00:11.756 TCP 12.102.0.1:36356 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:21:25.108 00:06:00.071 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 00:26:57.600 00:00:11.810 TCP 12.102.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:27:51.210 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:27:51.232 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:27:51.428 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:27:51.408 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:27:51.034 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:27:51.370 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:27:51.412 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:27:59.450 00:00:11.811 TCP 12.102.0.1:40492 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:29:01.299 00:00:11.763 TCP 12.102.0.1:39006 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:30:03.100 00:00:11.761 TCP 12.102.0.1:55768 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:31:04.899 00:00:11.800 TCP 12.102.0.1:54636 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:32:06.737 00:00:11.803 TCP 12.102.0.1:57596 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:27:25.106 00:06:00.088 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 00:32:51.041 00:00:00.040 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:32:51.064 00:00:00.040 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:32:51.173 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:32:51.407 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:32:51.223 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:32:51.329 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:32:51.420 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:33:08.580 00:00:11.819 TCP 12.102.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:28:25.108 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 00:34:10.432 00:00:11.801 TCP 12.102.0.1:43844 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:35:12.270 00:00:11.804 TCP 12.102.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:36:14.116 00:00:11.801 TCP 12.102.0.1:39104 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:37:15.956 00:00:11.814 TCP 12.102.0.1:47218 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:37:51.268 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:37:51.291 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:37:51.501 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:37:51.421 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:37:51.389 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:37:51.202 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:37:51.276 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:38:17.814 00:00:11.806 TCP 12.102.0.1:59502 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:34:25.109 00:06:00.088 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 00:39:19.664 00:00:11.808 TCP 12.102.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:35:25.112 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 00:40:21.512 00:00:11.799 TCP 12.102.0.1:49162 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:41:23.353 00:00:11.833 TCP 12.102.0.1:47688 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:42:25.227 00:00:11.810 TCP 12.102.0.1:45382 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:42:51.468 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:42:51.532 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:42:51.612 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:42:51.299 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:42:51.547 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:42:51.391 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:42:51.445 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:43:27.082 00:00:11.808 TCP 12.102.0.1:46958 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:44:28.932 00:00:11.812 TCP 12.102.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:45:30.782 00:00:11.855 TCP 12.102.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:41:25.113 00:06:00.087 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 00:46:32.674 00:00:11.805 TCP 12.102.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:42:25.116 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 00:47:34.524 00:00:11.770 TCP 12.102.0.1:42054 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:47:51.531 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:47:51.755 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:47:51.809 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:47:51.463 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:47:51.551 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:47:51.531 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:47:51.509 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:48:36.342 00:00:11.812 TCP 12.102.0.1:41452 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:49:38.190 00:00:11.815 TCP 12.102.0.1:44944 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:50:40.068 00:00:11.762 TCP 12.102.0.1:44486 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:51:41.869 00:00:11.800 TCP 12.102.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:52:51.467 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:52:51.490 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:52:51.764 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:52:51.711 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:52:51.607 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:52:51.495 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:52:51.585 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:52:43.708 00:00:11.810 TCP 12.102.0.1:42268 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:48:25.117 00:06:00.088 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 00:53:45.549 00:00:11.812 TCP 12.102.0.1:54078 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:49:25.117 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 00:54:47.392 00:00:11.805 TCP 12.102.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:55:49.234 00:00:11.768 TCP 12.102.0.1:43494 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:56:51.066 00:00:11.803 TCP 12.102.0.1:43022 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:57:51.907 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 00:57:51.884 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 00:57:52.092 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:57:52.153 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 00:57:52.115 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 00:57:52.173 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 00:57:51.982 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 00:57:52.903 00:00:11.798 TCP 12.102.0.1:33352 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123503, total packets: 1124, avg bps: 279, avg pps: 0, avg bpp: 109 Time window: 2025-09-03 23:59:06 - 2025-09-04 00:58:04 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0029s User: 0.0019s Wall: 0.0025s flows/second: 62749.7 Runtime: 0.0025s