Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 19:59:24.378 00:00:11.811 TCP 12.102.0.1:42648 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:00:26.229 00:00:11.808 TCP 12.102.0.1:52018 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:56:25.599 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:01:28.073 00:00:11.849 TCP 12.102.0.1:36224 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:57:25.602 00:06:00.099 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:02:29.962 00:00:11.816 TCP 12.102.0.1:58196 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:03:14.762 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:03:14.784 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:03:14.883 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:03:14.961 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:03:14.714 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:03:14.966 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:03:14.847 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:03:31.810 00:00:11.810 TCP 12.102.0.1:41154 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:04:33.660 00:00:11.807 TCP 12.102.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:05:35.505 00:00:11.802 TCP 12.102.0.1:55748 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:06:37.348 00:00:11.766 TCP 12.102.0.1:43782 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:07:39.151 00:00:11.810 TCP 12.102.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:08:14.855 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:08:14.940 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:08:15.074 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:08:14.726 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:08:15.058 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:08:15.084 00:00:00.041 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:08:14.832 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:03:25.600 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:08:41.003 00:00:12.244 TCP 12.102.0.1:53738 -> 1.101.0.1:3000 15 1926 1 2025-09-04 20:04:25.603 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:09:43.281 00:00:11.761 TCP 12.102.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:10:45.081 00:00:11.757 TCP 12.102.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:11:46.876 00:00:11.765 TCP 12.102.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:12:48.678 00:00:11.804 TCP 12.102.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:13:14.916 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:13:14.939 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:13:15.011 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:13:14.851 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:13:14.914 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:13:15.083 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:13:14.894 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:13:50.527 00:00:11.798 TCP 12.102.0.1:47528 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:14:52.365 00:00:11.788 TCP 12.102.0.1:57030 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:10:25.602 00:06:00.102 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:15:54.191 00:00:11.801 TCP 12.102.0.1:53380 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:11:25.605 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:16:56.038 00:00:11.761 TCP 12.102.0.1:48524 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:17:57.836 00:00:12.194 TCP 12.102.0.1:35670 -> 1.101.0.1:3000 15 1926 1 2025-09-04 20:18:15.258 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:18:15.123 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:18:14.953 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:18:15.227 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:18:15.381 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:18:15.365 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:18:15.234 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:19:00.086 00:00:11.807 TCP 12.102.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:20:01.932 00:00:11.817 TCP 12.102.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:21:03.782 00:00:11.816 TCP 12.102.0.1:41166 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:22:05.645 00:00:11.823 TCP 12.102.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:17:25.604 00:06:00.102 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:23:15.272 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:23:15.293 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:23:15.456 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:23:15.435 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:23:15.344 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:23:15.122 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:23:15.089 00:00:00.055 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:23:07.507 00:00:12.235 TCP 12.102.0.1:60218 -> 1.101.0.1:3000 15 1926 1 2025-09-04 20:18:25.607 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:24:09.782 00:00:11.802 TCP 12.102.0.1:35334 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:25:11.620 00:00:11.806 TCP 12.102.0.1:43530 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:26:13.461 00:00:11.804 TCP 12.102.0.1:45482 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:27:15.301 00:00:11.764 TCP 12.102.0.1:39552 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:28:15.166 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:28:15.189 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:28:15.404 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:28:15.419 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:28:15.317 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:28:15.312 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:28:15.354 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:28:17.104 00:00:11.797 TCP 12.102.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:24:25.605 00:06:00.102 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:29:18.939 00:00:11.810 TCP 12.102.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:25:25.608 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:30:20.789 00:00:11.800 TCP 12.102.0.1:38044 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:31:22.627 00:00:11.810 TCP 12.102.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:32:24.474 00:00:11.802 TCP 12.102.0.1:56830 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:33:15.354 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:33:15.415 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:33:15.438 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:33:15.457 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:33:15.304 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:33:15.424 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:33:15.332 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:33:26.312 00:00:11.760 TCP 12.102.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:34:28.110 00:00:11.807 TCP 12.102.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:35:29.956 00:00:11.804 TCP 12.102.0.1:53052 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:31:25.609 00:06:00.100 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:36:31.796 00:00:11.800 TCP 12.102.0.1:58978 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:32:25.612 00:06:00.094 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:37:33.634 00:00:11.815 TCP 12.102.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:38:15.511 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:38:15.535 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:38:15.560 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:38:15.561 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:38:15.458 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:38:15.626 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:38:15.492 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:38:35.488 00:00:11.857 TCP 12.102.0.1:53454 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:39:37.385 00:00:11.811 TCP 12.102.0.1:43356 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:40:39.239 00:00:11.811 TCP 12.102.0.1:46760 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:41:41.093 00:00:11.768 TCP 12.102.0.1:58510 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:42:42.906 00:00:11.827 TCP 12.102.0.1:52142 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:43:15.561 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:43:15.584 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:43:15.780 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:43:15.614 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:43:15.381 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:43:15.725 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:43:15.259 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:38:25.613 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:43:44.768 00:00:12.229 TCP 12.102.0.1:44284 -> 1.101.0.1:3000 15 1926 1 2025-09-04 20:39:25.614 00:06:00.095 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:44:47.047 00:00:11.802 TCP 12.102.0.1:44184 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:45:48.887 00:00:11.810 TCP 12.102.0.1:43550 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:46:50.728 00:00:11.801 TCP 12.102.0.1:38652 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:47:52.568 00:00:11.803 TCP 12.102.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:48:15.493 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:48:15.517 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:48:15.626 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:48:15.727 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:48:15.349 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:48:15.650 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:48:15.520 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:48:54.413 00:00:11.801 TCP 12.102.0.1:42274 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:49:56.253 00:00:11.800 TCP 12.102.0.1:49702 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:45:25.613 00:06:00.121 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:50:58.093 00:00:11.765 TCP 12.102.0.1:36294 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:46:25.616 00:06:00.099 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:51:59.895 00:00:11.806 TCP 12.102.0.1:39892 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:53:15.740 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:53:01.744 00:00:11.756 TCP 12.102.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:53:15.950 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:53:15.970 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:53:15.849 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:53:16.024 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:53:15.898 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:53:15.717 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:54:03.538 00:00:11.813 TCP 12.102.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:55:05.388 00:00:12.119 TCP 12.102.0.1:57464 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:56:07.552 00:00:11.814 TCP 12.102.0.1:48892 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:57:09.403 00:00:11.855 TCP 12.102.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:52:25.614 00:06:00.105 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 20:58:15.924 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 20:58:15.948 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 20:58:15.655 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 20:58:16.302 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 20:58:16.098 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 20:58:16.343 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 20:58:16.152 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 20:53:25.617 00:06:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 20:58:11.301 00:00:11.808 TCP 12.102.0.1:41000 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125748, total packets: 1158, avg bps: 266, avg pps: 0, avg bpp: 108 Time window: 2025-09-04 19:56:25 - 2025-09-04 20:59:25 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0023s User: 0.0023s Wall: 0.0029s flows/second: 54662.3 Runtime: 0.0029s