Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 14:59:21.430 00:00:11.807 TCP 12.102.0.1:33194 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:55:25.497 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:00:23.274 00:00:11.868 TCP 12.102.0.1:36976 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:56:25.499 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 15:01:25.182 00:00:11.808 TCP 12.102.0.1:56596 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:02:27.040 00:00:11.804 TCP 12.102.0.1:34828 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:03:08.489 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:03:08.512 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:03:08.820 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:03:08.939 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:03:08.986 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:03:08.850 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:03:08.692 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:03:28.883 00:00:11.758 TCP 12.102.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:04:30.680 00:00:11.801 TCP 12.102.0.1:44724 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:05:32.520 00:00:11.802 TCP 12.102.0.1:52110 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:06:34.359 00:00:11.808 TCP 12.102.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:02:25.498 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:07:36.202 00:00:11.769 TCP 12.102.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:08:08.825 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:08:08.948 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:08:08.941 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:08:08.965 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:08:08.889 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:08:08.838 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:08:08.803 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:03:25.501 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 15:08:38.009 00:00:11.823 TCP 12.102.0.1:47812 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:09:39.864 00:00:11.800 TCP 12.102.0.1:44346 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:10:41.707 00:00:11.796 TCP 12.102.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:11:43.543 00:00:11.965 TCP 12.102.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:12:45.540 00:00:11.802 TCP 12.102.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:13:08.887 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:13:08.909 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:13:09.102 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:13:08.983 00:00:00.029 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:13:09.016 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:13:09.055 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:13:08.976 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:13:47.382 00:00:11.812 TCP 12.102.0.1:35032 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:09:25.501 00:06:00.049 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:14:49.232 00:00:11.810 TCP 12.102.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:10:25.503 00:06:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 15:15:51.083 00:00:11.814 TCP 12.102.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:16:52.943 00:00:11.809 TCP 12.102.0.1:50650 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:17:54.787 00:00:11.808 TCP 12.102.0.1:35854 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:18:08.994 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:18:09.076 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:18:09.027 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:18:09.019 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:18:08.978 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:18:09.155 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:18:09.054 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:18:56.635 00:00:11.774 TCP 12.102.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:19:58.474 00:00:11.811 TCP 12.102.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:21:00.323 00:00:11.767 TCP 12.102.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:16:25.507 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:22:02.126 00:00:11.761 TCP 12.102.0.1:37372 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:17:25.547 00:06:00.005 TCP 179.10.12.10:179 -> 179.10.12.12:58070 8 549 1 2025-09-04 15:23:08.989 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:23:09.013 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:23:09.112 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:23:09.163 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:23:09.223 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:23:09.214 00:00:00.044 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:23:09.028 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:23:03.930 00:00:11.780 TCP 12.102.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:24:05.746 00:00:11.797 TCP 12.102.0.1:60882 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:25:07.584 00:00:11.763 TCP 12.102.0.1:41342 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:26:09.384 00:00:11.820 TCP 12.102.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:27:11.239 00:00:11.800 TCP 12.102.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:28:09.137 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:28:09.333 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:28:09.153 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:28:09.250 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:28:09.261 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:28:09.280 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:28:09.114 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:28:13.082 00:00:11.818 TCP 12.102.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:23:25.508 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:24:25.510 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 15:29:14.938 00:00:11.808 TCP 12.102.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:30:16.789 00:00:11.802 TCP 12.102.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:31:18.629 00:00:11.850 TCP 12.102.0.1:48702 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:32:20.528 00:00:11.799 TCP 12.102.0.1:34444 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:33:09.437 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:33:09.459 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:33:09.449 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:33:09.454 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:33:09.255 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:33:09.366 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:33:09.224 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:33:22.367 00:00:11.832 TCP 12.102.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:34:24.235 00:00:11.804 TCP 12.102.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:30:25.511 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:35:26.083 00:00:11.798 TCP 12.102.0.1:48284 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:31:25.513 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 15:36:27.923 00:00:11.781 TCP 12.102.0.1:57152 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:37:29.741 00:00:11.831 TCP 12.102.0.1:52932 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:38:09.373 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:38:09.395 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:38:09.612 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:38:09.656 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:38:09.622 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:38:09.662 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:38:09.322 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:38:31.607 00:00:11.798 TCP 12.102.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:39:33.446 00:00:11.812 TCP 12.102.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:40:35.296 00:00:11.800 TCP 12.102.0.1:42028 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:41:37.134 00:00:11.800 TCP 12.102.0.1:58284 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:37:25.514 00:06:00.050 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:42:38.967 00:00:11.799 TCP 12.102.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:43:09.202 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:43:09.224 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:43:09.594 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:43:09.586 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:43:09.677 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:43:09.738 00:00:00.014 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:43:09.543 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:38:25.516 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 15:43:40.804 00:00:11.771 TCP 12.102.0.1:42274 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:44:42.620 00:00:11.801 TCP 12.102.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:45:44.459 00:00:11.803 TCP 12.102.0.1:56496 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:46:46.296 00:00:11.759 TCP 12.102.0.1:56876 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:47:48.095 00:00:11.803 TCP 12.102.0.1:38882 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:48:09.761 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:48:09.784 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:48:10.014 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:48:09.944 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:48:09.748 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:48:09.503 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:48:09.778 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:48:49.943 00:00:11.767 TCP 12.102.0.1:44642 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:44:25.515 00:06:00.050 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:49:51.744 00:00:11.757 TCP 12.102.0.1:57286 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:45:25.517 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 15:50:53.542 00:00:11.798 TCP 12.102.0.1:51172 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:51:55.377 00:00:11.812 TCP 12.102.0.1:39268 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:53:09.706 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:52:57.225 00:00:12.220 TCP 12.102.0.1:38922 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:53:09.729 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:53:09.813 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:53:09.735 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:53:09.830 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:53:09.789 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:53:09.750 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:53:59.484 00:00:11.920 TCP 12.102.0.1:59400 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:55:01.445 00:00:11.772 TCP 12.102.0.1:56106 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:56:03.257 00:00:11.806 TCP 12.102.0.1:60438 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:51:25.516 00:06:00.063 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 15:57:05.102 00:00:11.767 TCP 12.102.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:52:25.521 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 15:58:10.007 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 15:58:09.893 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 15:58:09.960 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 15:58:09.918 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 15:58:10.056 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 15:58:09.909 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 15:58:09.982 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 15:58:06.904 00:00:11.802 TCP 12.102.0.1:52706 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 123760, total packets: 1136, avg bps: 261, avg pps: 0, avg bpp: 108 Time window: 2025-09-04 14:55:25 - 2025-09-04 15:58:25 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0030s User: 0.0020s Wall: 0.0029s flows/second: 54422.9 Runtime: 0.0030s