Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 23:59:04.037 00:00:11.800 TCP 12.102.0.1:54572 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:00:05.879 00:00:11.755 TCP 12.102.0.1:56778 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:01:07.675 00:00:11.802 TCP 12.102.0.1:37088 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:01:49.206 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:01:49.230 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:01:49.158 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:01:49.129 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:01:49.280 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:01:49.402 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:01:49.075 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:02:09.515 00:00:11.764 TCP 12.102.0.1:39244 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:58:30.848 00:05:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-11 23:58:30.850 00:05:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:03:11.313 00:00:11.803 TCP 12.102.0.1:48468 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:04:13.155 00:00:11.807 TCP 12.102.0.1:37938 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:05:15.004 00:00:11.800 TCP 12.102.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:06:16.846 00:00:11.801 TCP 12.102.0.1:59216 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:06:49.117 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:06:49.139 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:06:49.048 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:06:49.123 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:06:49.217 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:06:49.180 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:06:48.988 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:07:18.686 00:00:11.800 TCP 12.102.0.1:46932 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:04:30.850 00:05:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:08:20.525 00:00:12.244 TCP 12.102.0.1:34202 -> 1.101.0.1:3000 15 1926 1 2025-09-12 00:04:30.853 00:05:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:09:22.811 00:00:11.801 TCP 12.102.0.1:38580 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:10:24.651 00:00:11.820 TCP 12.102.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:11:26.512 00:00:11.797 TCP 12.102.0.1:39184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:11:49.424 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:11:49.448 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:11:49.308 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:11:49.538 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:11:49.398 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:11:49.399 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:11:49.363 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:12:28.346 00:00:11.758 TCP 12.102.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:13:30.143 00:00:11.806 TCP 12.102.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:10:30.855 00:05:00.199 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:10:30.853 00:05:00.204 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:14:31.987 00:00:11.802 TCP 12.102.0.1:39962 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:15:33.828 00:00:11.800 TCP 12.102.0.1:52842 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:16:49.434 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:16:49.505 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:16:49.345 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:16:35.668 00:00:11.804 TCP 12.102.0.1:59368 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:16:49.253 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:16:49.194 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:16:49.215 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:16:49.411 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:17:37.511 00:00:11.830 TCP 12.102.0.1:56234 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:18:39.385 00:00:11.816 TCP 12.102.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:19:41.245 00:00:11.815 TCP 12.102.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:16:30.854 00:05:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:16:30.856 00:05:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:20:43.104 00:00:11.814 TCP 12.102.0.1:44766 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:21:49.224 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:21:49.246 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:21:49.415 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:21:49.478 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:21:49.261 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:21:49.260 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:21:49.317 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:21:44.958 00:00:11.803 TCP 12.102.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:22:46.799 00:00:11.805 TCP 12.102.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:23:48.651 00:00:12.253 TCP 12.102.0.1:53882 -> 1.101.0.1:3000 15 1926 1 2025-09-12 00:24:50.943 00:00:11.765 TCP 12.102.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:25:52.746 00:00:11.859 TCP 12.102.0.1:36406 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:22:30.855 00:05:00.211 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:22:30.858 00:05:00.206 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:26:49.525 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:26:49.547 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:26:49.544 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:26:49.572 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:26:49.454 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:26:49.563 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:26:49.558 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:26:54.642 00:00:11.829 TCP 12.102.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:27:56.510 00:00:11.880 TCP 12.102.0.1:58874 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:28:58.432 00:00:11.815 TCP 12.102.0.1:38338 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:30:00.285 00:00:11.802 TCP 12.102.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:31:02.123 00:00:11.801 TCP 12.102.0.1:36352 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:31:49.628 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:31:49.582 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:31:49.594 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:31:49.557 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:31:49.671 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:31:49.762 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:31:49.606 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:32:03.964 00:00:11.763 TCP 12.102.0.1:36956 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:28:30.857 00:05:00.210 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:28:30.859 00:05:00.205 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:33:05.761 00:00:11.854 TCP 12.102.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:34:07.654 00:00:11.806 TCP 12.102.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:35:09.500 00:00:11.815 TCP 12.102.0.1:60364 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:36:11.340 00:00:11.863 TCP 12.102.0.1:44044 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:36:49.737 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:36:49.759 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:36:49.648 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:36:49.579 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:36:49.783 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:36:49.834 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:36:49.437 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:37:13.244 00:00:11.800 TCP 12.102.0.1:45140 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:34:30.858 00:05:00.218 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:38:15.085 00:00:11.809 TCP 12.102.0.1:59456 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:34:30.860 00:05:00.212 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:39:16.932 00:00:11.841 TCP 12.102.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:40:18.810 00:00:11.795 TCP 12.102.0.1:59092 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:41:20.644 00:00:11.797 TCP 12.102.0.1:40812 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:41:49.816 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:41:49.862 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:41:49.949 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:41:49.861 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:41:50.010 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:41:49.819 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:41:49.793 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:42:22.477 00:00:11.800 TCP 12.102.0.1:50872 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:43:24.316 00:00:11.798 TCP 12.102.0.1:55462 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:40:30.865 00:05:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:40:30.863 00:05:00.215 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:44:26.152 00:00:11.812 TCP 12.102.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:45:28.004 00:00:11.795 TCP 12.102.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:46:29.834 00:00:11.801 TCP 12.102.0.1:43346 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:46:49.822 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:46:49.845 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:46:49.790 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:46:50.021 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:46:50.017 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:46:50.150 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:46:50.050 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:47:31.671 00:00:11.805 TCP 12.102.0.1:59394 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:48:33.516 00:00:12.262 TCP 12.102.0.1:58264 -> 1.101.0.1:3000 15 1926 1 2025-09-12 00:49:35.818 00:00:11.798 TCP 12.102.0.1:34646 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:46:30.866 00:05:00.212 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:46:30.861 00:05:00.217 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:50:37.655 00:00:11.814 TCP 12.102.0.1:42226 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:51:49.948 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:51:39.507 00:00:11.806 TCP 12.102.0.1:51596 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:51:49.973 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:51:49.915 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:51:50.284 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:51:50.014 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:51:49.836 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:51:50.086 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:52:41.343 00:00:11.852 TCP 12.102.0.1:60440 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:53:43.238 00:00:11.802 TCP 12.102.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:54:45.081 00:00:11.805 TCP 12.102.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:55:46.923 00:00:11.816 TCP 12.102.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:52:30.862 00:05:00.217 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 00:52:30.866 00:05:00.212 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:56:49.854 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 00:56:49.926 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:56:50.026 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 00:56:50.080 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 00:56:49.980 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 00:56:50.141 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 00:56:49.830 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 00:56:48.779 00:00:11.805 TCP 12.102.0.1:55542 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:57:50.618 00:00:11.801 TCP 12.102.0.1:57754 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124591, total packets: 1142, avg bps: 279, avg pps: 0, avg bpp: 109 Time window: 2025-09-11 23:58:30 - 2025-09-12 00:58:02 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0040s User: 0.0010s Wall: 0.0026s flows/second: 61900.1 Runtime: 0.0026s