Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 03:59:19.288 00:00:11.798 TCP 12.102.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:00:21.124 00:00:11.802 TCP 12.102.0.1:50220 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:01:22.968 00:00:11.757 TCP 12.102.0.1:34712 -> 1.101.0.1:3000 11 1507 1 2025-09-04 03:57:25.209 00:06:00.086 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 04:02:24.764 00:00:11.803 TCP 12.102.0.1:46002 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:02:55.470 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:02:55.493 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:02:55.549 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:02:55.483 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:02:55.609 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:02:55.652 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:02:55.420 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 03:58:25.212 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 04:03:26.610 00:00:11.801 TCP 12.102.0.1:56440 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:04:28.447 00:00:11.760 TCP 12.102.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:05:30.245 00:00:11.801 TCP 12.102.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:06:32.083 00:00:11.757 TCP 12.102.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:07:33.877 00:00:11.809 TCP 12.102.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:07:55.539 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:07:55.539 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:07:55.804 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:07:55.553 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:07:55.754 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:07:55.688 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:07:55.513 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:08:35.720 00:00:11.762 TCP 12.102.0.1:51620 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:04:25.214 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 04:09:37.525 00:00:11.798 TCP 12.102.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:05:25.219 00:06:00.075 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 04:10:39.364 00:00:11.829 TCP 12.102.0.1:55332 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:11:41.228 00:00:11.828 TCP 12.102.0.1:44994 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:12:55.607 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:12:55.857 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:12:55.650 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:12:55.770 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:12:55.811 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:12:43.078 00:00:11.807 TCP 12.102.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:12:55.747 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:12:55.584 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:13:44.917 00:00:11.782 TCP 12.102.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:14:46.741 00:00:11.805 TCP 12.102.0.1:55352 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:15:48.589 00:00:11.816 TCP 12.102.0.1:33518 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:11:25.219 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 04:16:50.443 00:00:11.810 TCP 12.102.0.1:43454 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:12:25.222 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 04:17:55.947 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:17:55.969 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:17:56.072 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:17:55.748 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:17:55.976 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:17:56.055 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:17:55.948 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:17:52.295 00:00:11.803 TCP 12.102.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:18:54.132 00:00:11.812 TCP 12.102.0.1:52186 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:19:55.985 00:00:12.053 TCP 12.102.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:20:58.083 00:00:11.803 TCP 12.102.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:21:59.920 00:00:11.823 TCP 12.102.0.1:48330 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:22:55.648 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:22:55.783 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:22:55.907 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:22:55.970 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:22:55.893 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:22:55.871 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:22:55.626 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:23:01.778 00:00:11.804 TCP 12.102.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:18:25.222 00:06:00.086 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 04:24:03.620 00:00:11.802 TCP 12.102.0.1:54070 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:19:25.224 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 04:25:05.462 00:00:11.822 TCP 12.102.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:26:07.306 00:00:11.802 TCP 12.102.0.1:56896 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:27:09.140 00:00:11.807 TCP 12.102.0.1:43132 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:27:55.847 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:27:55.870 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:27:56.052 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:27:56.173 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:27:55.986 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:27:55.986 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:27:55.948 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:28:10.991 00:00:11.799 TCP 12.102.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:29:12.831 00:00:12.317 TCP 12.102.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:30:15.192 00:00:11.801 TCP 12.102.0.1:53772 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:25:25.225 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 04:26:25.232 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 04:31:17.034 00:00:11.802 TCP 12.102.0.1:37352 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:32:18.880 00:00:11.809 TCP 12.102.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:32:56.161 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:32:56.101 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:32:56.245 00:00:00.032 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:32:56.307 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:32:56.111 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:32:56.229 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:32:56.139 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:33:20.724 00:00:12.237 TCP 12.102.0.1:56362 -> 1.101.0.1:3000 15 1926 1 2025-09-04 04:34:22.994 00:00:11.794 TCP 12.102.0.1:57342 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:35:24.828 00:00:11.812 TCP 12.102.0.1:59942 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:36:26.665 00:00:11.805 TCP 12.102.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:32:25.231 00:06:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 04:37:28.507 00:00:11.924 TCP 12.102.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:37:56.100 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:37:56.123 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:37:56.147 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:37:56.253 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:37:56.353 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:37:56.394 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:37:56.279 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:33:25.236 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 04:38:30.463 00:00:11.801 TCP 12.102.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:39:32.296 00:00:11.829 TCP 12.102.0.1:41382 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:40:34.171 00:00:11.759 TCP 12.102.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:41:35.964 00:00:11.806 TCP 12.102.0.1:37330 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:42:37.808 00:00:11.800 TCP 12.102.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:42:56.106 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:42:56.130 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:42:56.198 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:42:56.284 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:42:56.347 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:42:56.261 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:42:56.343 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:43:39.647 00:00:11.818 TCP 12.102.0.1:38780 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:39:25.236 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 04:44:41.504 00:00:11.797 TCP 12.102.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:40:25.237 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 04:45:43.337 00:00:11.806 TCP 12.102.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:46:45.177 00:00:11.801 TCP 12.102.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:47:56.610 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:47:56.634 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:47:56.574 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:47:56.459 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:47:56.452 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:47:56.359 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:47:56.334 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:47:47.026 00:00:11.798 TCP 12.102.0.1:42524 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:48:48.862 00:00:11.762 TCP 12.102.0.1:36622 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:49:50.668 00:00:12.150 TCP 12.102.0.1:58004 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:50:52.856 00:00:11.766 TCP 12.102.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:46:25.236 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 04:51:54.663 00:00:11.779 TCP 12.102.0.1:45280 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:47:25.240 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 04:52:56.386 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:52:56.520 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:52:56.300 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:52:56.569 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:52:56.660 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:52:56.481 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:52:56.363 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:52:56.493 00:00:11.803 TCP 12.102.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:53:58.339 00:00:11.809 TCP 12.102.0.1:35496 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:55:00.189 00:00:11.771 TCP 12.102.0.1:44346 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:56:02.000 00:00:11.801 TCP 12.102.0.1:35666 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:57:03.843 00:00:11.805 TCP 12.102.0.1:48910 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:57:56.663 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 04:57:56.687 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 04:57:56.602 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 04:57:56.670 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 04:57:56.650 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 04:57:56.813 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 04:57:56.561 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 04:58:05.682 00:00:11.802 TCP 12.102.0.1:56126 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:53:25.240 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-09-04 03:57:25 - 2025-09-04 04:59:25 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0036s User: 0.0018s Wall: 0.0023s flows/second: 69194.3 Runtime: 0.0023s