Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 08:59:12.345 00:00:11.800 TCP 12.102.0.1:46018 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:00:14.186 00:00:12.397 TCP 12.102.0.1:43578 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:01:02.033 00:00:00.034 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:01:01.927 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:01:01.834 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:01:02.057 00:00:00.034 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:01:02.293 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:01:02.091 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:01:02.034 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:01:16.622 00:00:11.756 TCP 12.102.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:02:18.416 00:00:11.798 TCP 12.102.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:58:29.551 00:06:00.135 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 09:03:20.253 00:00:11.799 TCP 12.102.0.1:43596 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:04:22.091 00:00:11.760 TCP 12.102.0.1:39548 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:00:29.554 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 09:05:23.894 00:00:11.815 TCP 12.102.0.1:33334 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:06:02.530 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:06:02.554 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:06:02.592 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:06:02.355 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:06:02.538 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:06:02.318 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:06:02.505 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:06:25.751 00:00:11.761 TCP 12.102.0.1:48480 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:07:27.550 00:00:11.801 TCP 12.102.0.1:37848 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:08:29.390 00:00:11.803 TCP 12.102.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:09:31.227 00:00:11.815 TCP 12.102.0.1:45778 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:05:29.561 00:06:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 09:10:33.084 00:00:11.811 TCP 12.102.0.1:41716 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:11:02.134 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:11:02.157 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:11:02.292 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:11:02.412 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:11:02.385 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:11:02.291 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:11:02.168 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:11:34.933 00:00:11.863 TCP 12.102.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:07:29.557 00:06:00.133 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 09:12:36.835 00:00:11.763 TCP 12.102.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:13:38.638 00:00:11.801 TCP 12.102.0.1:59456 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:14:40.477 00:00:11.805 TCP 12.102.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:15:42.312 00:00:11.800 TCP 12.102.0.1:45818 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:16:02.389 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:16:02.400 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:16:02.352 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:16:02.542 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:16:02.526 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:16:02.562 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:16:02.367 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:16:44.152 00:00:11.809 TCP 12.102.0.1:46508 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:12:29.561 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 09:17:46.000 00:00:11.796 TCP 12.102.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:18:47.836 00:00:11.765 TCP 12.102.0.1:33944 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:14:29.561 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 09:19:49.640 00:00:11.799 TCP 12.102.0.1:60090 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:21:02.325 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:21:02.356 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:21:02.378 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:21:02.430 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:21:02.365 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:20:51.479 00:00:11.807 TCP 12.102.0.1:44574 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:21:02.401 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:21:02.303 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:21:53.326 00:00:11.853 TCP 12.102.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:22:55.219 00:00:11.800 TCP 12.102.0.1:44514 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:23:57.083 00:00:11.757 TCP 12.102.0.1:60836 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:19:29.565 00:06:00.137 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 09:24:58.879 00:00:11.795 TCP 12.102.0.1:39220 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:26:02.545 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:26:02.695 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:26:02.504 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:26:02.715 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:26:02.606 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:26:02.726 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:26:02.521 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:26:00.717 00:00:11.803 TCP 12.102.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:21:29.562 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 09:27:02.558 00:00:11.758 TCP 12.102.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:28:04.359 00:00:11.841 TCP 12.102.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:29:06.239 00:00:11.799 TCP 12.102.0.1:32848 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:30:08.076 00:00:11.763 TCP 12.102.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:31:02.594 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:31:02.616 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:31:02.754 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:31:02.675 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:31:02.749 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:31:02.744 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:31:02.342 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:31:09.878 00:00:11.806 TCP 12.102.0.1:52764 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:26:29.566 00:06:00.136 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 09:32:11.720 00:00:11.762 TCP 12.102.0.1:57330 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:33:13.523 00:00:11.843 TCP 12.102.0.1:37928 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:28:29.564 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 09:34:15.372 00:00:11.820 TCP 12.102.0.1:45514 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:35:17.226 00:00:11.769 TCP 12.102.0.1:37106 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:36:02.919 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:36:02.861 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:36:03.042 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:36:03.014 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:36:03.106 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:36:03.021 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:36:02.896 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:36:19.055 00:00:11.756 TCP 12.102.0.1:52470 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:37:20.851 00:00:11.796 TCP 12.102.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:33:29.571 00:06:00.136 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 09:38:22.687 00:00:11.799 TCP 12.102.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:39:24.528 00:00:11.807 TCP 12.102.0.1:58772 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:35:29.569 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 09:40:26.376 00:00:11.812 TCP 12.102.0.1:33286 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:41:02.915 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:41:02.938 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:41:03.122 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:41:03.052 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:41:03.074 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:41:02.881 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:41:03.009 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:41:28.227 00:00:11.805 TCP 12.102.0.1:43168 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:42:30.079 00:00:11.827 TCP 12.102.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:43:31.934 00:00:11.812 TCP 12.102.0.1:51930 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:44:33.787 00:00:11.771 TCP 12.102.0.1:47142 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:40:29.572 00:06:00.136 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 09:45:35.597 00:00:11.805 TCP 12.102.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:46:03.001 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:46:03.024 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:46:03.107 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:46:03.094 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:46:02.990 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:46:03.026 00:00:00.031 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:46:02.895 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:46:37.435 00:00:11.807 TCP 12.102.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:42:29.569 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 09:47:39.288 00:00:11.770 TCP 12.102.0.1:44914 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:48:41.095 00:00:11.812 TCP 12.102.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:49:42.948 00:00:11.807 TCP 12.102.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:50:44.817 00:00:11.826 TCP 12.102.0.1:43288 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:51:03.040 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:51:03.169 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:51:03.010 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:51:03.182 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:51:03.012 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:51:02.954 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:51:03.018 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:51:46.690 00:00:11.831 TCP 12.102.0.1:55818 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:47:29.577 00:06:00.132 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 09:52:48.531 00:00:11.805 TCP 12.102.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:53:50.381 00:00:11.803 TCP 12.102.0.1:38958 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:49:29.575 00:06:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 09:54:52.224 00:00:11.770 TCP 12.102.0.1:35480 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:56:03.219 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 09:55:54.036 00:00:11.801 TCP 12.102.0.1:42530 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:56:03.185 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:56:03.385 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 09:56:03.178 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 09:56:03.289 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 09:56:03.219 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 09:56:03.197 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 09:56:55.876 00:00:11.814 TCP 12.102.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:57:57.725 00:00:11.810 TCP 12.102.0.1:50528 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122350, total packets: 1114, avg bps: 273, avg pps: 0, avg bpp: 109 Time window: 2025-09-10 08:58:29 - 2025-09-10 09:58:09 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0046s User: 0.0008s Wall: 0.0026s flows/second: 61813.3 Runtime: 0.0026s