Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 14:58:50.144 00:00:11.818 TCP 12.102.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:55:26.171 00:04:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 14:55:26.174 00:04:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 14:59:52.017 00:00:11.809 TCP 12.102.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:00:53.858 00:00:11.851 TCP 12.102.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:01:55.752 00:00:11.802 TCP 12.102.0.1:45156 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:02:57.591 00:00:12.189 TCP 12.102.0.1:33894 -> 1.101.0.1:3000 15 1926 1 2025-09-05 15:03:37.668 00:00:00.031 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:03:37.603 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:03:37.700 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:03:37.595 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:03:37.620 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:03:37.496 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:03:37.645 00:00:00.031 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:03:59.818 00:00:11.799 TCP 12.102.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:00:26.174 00:04:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:00:26.172 00:04:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:05:01.659 00:00:11.823 TCP 12.102.0.1:46822 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:06:03.520 00:00:11.797 TCP 12.102.0.1:60492 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:07:05.358 00:00:11.829 TCP 12.102.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:08:07.228 00:00:11.763 TCP 12.102.0.1:37594 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:08:37.733 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:08:37.756 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:08:37.831 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:08:37.813 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:08:37.853 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:08:37.753 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:08:37.819 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:09:09.038 00:00:11.801 TCP 12.102.0.1:59510 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:05:26.185 00:04:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:05:26.183 00:04:00.142 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:10:10.882 00:00:11.806 TCP 12.102.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:11:12.733 00:00:11.803 TCP 12.102.0.1:47704 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:12:14.572 00:00:11.805 TCP 12.102.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:13:16.418 00:00:11.806 TCP 12.102.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:13:37.938 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:13:37.533 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:13:37.764 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:13:37.876 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:13:37.710 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:13:37.793 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:13:37.687 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:10:26.178 00:04:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:10:26.180 00:04:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:14:18.264 00:00:11.801 TCP 12.102.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:15:20.103 00:00:11.806 TCP 12.102.0.1:38322 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:16:21.943 00:00:11.767 TCP 12.102.0.1:50872 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:17:23.746 00:00:11.801 TCP 12.102.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:18:37.739 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:18:37.761 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:18:25.583 00:00:11.761 TCP 12.102.0.1:41852 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:18:37.854 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:18:37.759 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:18:37.900 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:18:38.198 00:00:00.038 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:18:37.906 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:19:27.378 00:00:11.810 TCP 12.102.0.1:38560 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:15:26.181 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 15:15:26.178 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 15:20:29.222 00:00:11.805 TCP 12.102.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:21:31.077 00:00:11.804 TCP 12.102.0.1:37926 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:22:32.918 00:00:11.842 TCP 12.102.0.1:49080 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:23:38.041 00:00:00.035 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:23:38.066 00:00:00.035 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:23:38.012 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:23:38.032 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:23:38.013 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:23:38.203 00:00:00.044 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:23:37.984 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:23:34.798 00:00:11.800 TCP 12.102.0.1:58194 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:24:36.642 00:00:11.802 TCP 12.102.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:25:38.481 00:00:11.850 TCP 12.102.0.1:42324 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:22:26.186 00:04:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:22:26.185 00:04:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:26:40.372 00:00:11.893 TCP 12.102.0.1:40968 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:27:42.291 00:00:11.756 TCP 12.102.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:28:38.186 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:28:38.209 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:28:38.481 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:28:38.273 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:28:38.237 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:28:38.151 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:28:38.208 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:28:44.085 00:00:11.813 TCP 12.102.0.1:46170 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:29:45.937 00:00:11.808 TCP 12.102.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:30:47.784 00:00:11.800 TCP 12.102.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:27:26.188 00:04:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:27:26.184 00:04:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:31:49.632 00:00:11.803 TCP 12.102.0.1:40930 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:32:51.472 00:00:11.772 TCP 12.102.0.1:39562 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:33:38.127 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:33:38.152 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:33:38.233 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:33:38.209 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:33:38.086 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:33:38.001 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:33:38.104 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:33:53.282 00:00:11.825 TCP 12.102.0.1:58092 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:34:55.149 00:00:11.830 TCP 12.102.0.1:52862 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:35:57.023 00:00:11.821 TCP 12.102.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:32:26.186 00:04:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:32:26.188 00:04:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:36:58.881 00:00:12.431 TCP 12.102.0.1:46488 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:38:01.348 00:00:11.851 TCP 12.102.0.1:33488 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:38:38.394 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:38:38.417 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:38:38.515 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:38:38.237 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:38:38.508 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:38:38.195 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:38:38.372 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:39:03.239 00:00:11.827 TCP 12.102.0.1:44428 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:40:05.103 00:00:11.779 TCP 12.102.0.1:45830 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:41:06.916 00:00:11.833 TCP 12.102.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:37:26.194 00:04:00.139 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:37:26.197 00:04:00.133 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:42:08.791 00:00:11.766 TCP 12.102.0.1:51140 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:43:10.594 00:00:11.773 TCP 12.102.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:43:38.517 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:43:38.540 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:43:38.725 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:43:38.526 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:43:38.625 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:43:38.669 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:43:38.489 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:44:12.419 00:00:11.807 TCP 12.102.0.1:57434 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:45:14.276 00:00:11.804 TCP 12.102.0.1:44090 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:42:26.197 00:04:00.136 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:42:26.194 00:04:00.141 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:46:16.117 00:00:11.801 TCP 12.102.0.1:45802 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:47:17.958 00:00:12.455 TCP 12.102.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:48:20.456 00:00:11.802 TCP 12.102.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:48:38.551 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:48:38.576 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:48:38.508 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:48:38.548 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:48:38.299 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:48:38.289 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:48:38.528 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:49:22.298 00:00:11.801 TCP 12.102.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:50:24.137 00:00:11.828 TCP 12.102.0.1:58486 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:47:26.195 00:04:00.142 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:47:26.198 00:04:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:51:26.009 00:00:11.794 TCP 12.102.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:52:27.842 00:00:11.809 TCP 12.102.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:52:26.198 00:01:00.136 TCP 179.10.12.10:179 -> 179.10.12.12:58070 4 246 1 2025-09-05 15:52:26.196 00:01:00.142 TCP 179.10.12.12:58070 -> 179.10.12.10:179 4 246 1 2025-09-05 15:53:38.597 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:53:29.688 00:00:11.805 TCP 12.102.0.1:57554 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:53:38.620 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:53:38.642 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:53:38.675 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:53:38.532 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:53:38.658 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:53:38.721 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:54:31.530 00:00:11.812 TCP 12.102.0.1:42182 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:55:33.385 00:00:11.808 TCP 12.102.0.1:48724 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:56:35.234 00:00:11.811 TCP 12.102.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:57:37.091 00:00:11.806 TCP 12.102.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:54:26.197 00:04:00.142 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-05 15:54:26.200 00:04:00.136 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-05 15:58:38.856 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 15:58:38.983 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:58:38.815 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 15:58:38.603 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 15:58:38.945 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 15:58:38.673 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 15:58:38.832 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 15:58:38.938 00:00:11.766 TCP 12.102.0.1:44614 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 169, total bytes: 126244, total packets: 1161, avg bps: 265, avg pps: 0, avg bpp: 108 Time window: 2025-09-05 14:55:26 - 2025-09-05 15:58:50 Total flows processed: 169, passed: 169, Blocks skipped: 0, Bytes read: 17640 Sys: 0.0030s User: 0.0020s Wall: 0.0026s flows/second: 66092.1 Runtime: 0.0026s