Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 01:59:20.631 00:00:11.806 TCP 12.102.0.1:32800 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:00:22.472 00:00:11.783 TCP 12.102.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:55:33.205 00:06:00.126 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:01:24.297 00:00:12.167 TCP 12.102.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:57:33.209 00:06:00.120 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 02:02:26.496 00:00:11.804 TCP 12.102.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:03:18.026 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:03:18.048 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:03:18.095 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:03:18.193 00:00:00.035 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:03:18.102 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:03:18.014 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:03:18.071 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:03:28.343 00:00:11.802 TCP 12.102.0.1:43356 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:04:30.183 00:00:11.828 TCP 12.102.0.1:44200 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:05:32.068 00:00:11.800 TCP 12.102.0.1:38904 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:06:33.907 00:00:11.788 TCP 12.102.0.1:40496 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:02:33.207 00:06:00.127 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:07:35.743 00:00:11.800 TCP 12.102.0.1:35214 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:08:18.133 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:08:17.973 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:08:18.160 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:08:18.060 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:08:18.260 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:08:17.936 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:08:18.110 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:08:37.584 00:00:11.793 TCP 12.102.0.1:52410 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:04:33.211 00:06:00.122 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 02:09:39.419 00:00:11.805 TCP 12.102.0.1:57918 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:10:41.261 00:00:11.799 TCP 12.102.0.1:38698 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:11:43.100 00:00:11.812 TCP 12.102.0.1:42078 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:12:44.956 00:00:11.755 TCP 12.102.0.1:60392 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:13:18.382 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:13:18.405 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:13:18.011 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:13:18.302 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:13:18.113 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:13:18.398 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:13:17.988 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:13:46.751 00:00:11.758 TCP 12.102.0.1:57156 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:09:33.208 00:06:00.127 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:14:48.546 00:00:11.798 TCP 12.102.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:15:50.382 00:00:11.809 TCP 12.102.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:11:33.214 00:06:00.120 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 02:16:52.228 00:00:11.811 TCP 12.102.0.1:57490 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:17:54.086 00:00:11.816 TCP 12.102.0.1:59104 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:18:18.367 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:18:18.391 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:18:18.530 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:18:18.471 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:18:18.025 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:18:18.302 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:18:18.351 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:18:55.943 00:00:11.805 TCP 12.102.0.1:34318 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:19:57.783 00:00:11.801 TCP 12.102.0.1:48402 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:20:59.624 00:00:11.818 TCP 12.102.0.1:58784 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:16:33.210 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:22:01.476 00:00:11.803 TCP 12.102.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:23:03.316 00:00:11.803 TCP 12.102.0.1:38010 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:23:18.404 00:00:00.035 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:23:18.266 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:23:18.377 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:23:18.461 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:23:18.598 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:23:18.539 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:23:18.381 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:18:33.212 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 02:24:05.155 00:00:11.811 TCP 12.102.0.1:56856 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:25:07.010 00:00:11.809 TCP 12.102.0.1:58218 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:26:08.852 00:00:11.807 TCP 12.102.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:27:10.693 00:00:11.779 TCP 12.102.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:28:18.583 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:28:18.399 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:28:18.475 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:28:18.677 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:28:18.702 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:28:18.582 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:28:18.561 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:28:12.506 00:00:11.800 TCP 12.102.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:23:33.211 00:06:00.129 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:29:14.348 00:00:11.802 TCP 12.102.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:30:16.183 00:00:11.801 TCP 12.102.0.1:44982 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:25:33.216 00:06:00.125 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 02:31:18.027 00:00:12.241 TCP 12.102.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:32:20.307 00:00:11.757 TCP 12.102.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:33:18.478 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:33:18.501 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:33:18.481 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:33:18.737 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:33:18.393 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:33:18.627 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:33:18.494 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:33:22.101 00:00:11.818 TCP 12.102.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:34:23.955 00:00:11.798 TCP 12.102.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:30:33.213 00:06:00.135 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:35:25.793 00:00:11.802 TCP 12.102.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:36:27.634 00:00:11.797 TCP 12.102.0.1:36148 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:32:33.217 00:06:00.130 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 02:37:29.473 00:00:11.804 TCP 12.102.0.1:49024 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:38:18.674 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:38:18.697 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:38:18.837 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:38:18.875 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:38:18.846 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:38:18.937 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:38:18.758 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:38:31.319 00:00:11.799 TCP 12.102.0.1:59292 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:39:33.164 00:00:11.805 TCP 12.102.0.1:54196 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:40:35.012 00:00:11.767 TCP 12.102.0.1:59688 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:41:36.816 00:00:11.806 TCP 12.102.0.1:40068 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:37:33.217 00:06:00.136 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:42:38.656 00:00:11.758 TCP 12.102.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:43:18.891 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:43:18.913 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:43:19.091 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:43:18.740 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:43:18.932 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:43:19.040 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:43:18.836 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:43:40.454 00:00:11.799 TCP 12.102.0.1:37846 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:39:33.221 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 02:44:42.292 00:00:11.798 TCP 12.102.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:45:44.127 00:00:11.803 TCP 12.102.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:46:45.970 00:00:11.800 TCP 12.102.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:47:47.808 00:00:11.798 TCP 12.102.0.1:38590 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:48:18.904 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:48:18.927 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:48:18.967 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:48:18.859 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:48:19.017 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:48:18.746 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:48:18.882 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:48:49.648 00:00:11.916 TCP 12.102.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:44:33.219 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:49:51.600 00:00:11.858 TCP 12.102.0.1:57578 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:50:53.505 00:00:11.796 TCP 12.102.0.1:52940 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:46:33.221 00:06:00.130 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 02:51:55.340 00:00:11.803 TCP 12.102.0.1:42918 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:52:57.185 00:00:12.277 TCP 12.102.0.1:40608 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:53:19.564 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:53:19.500 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:53:19.540 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:53:19.607 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:53:19.601 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:53:19.606 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:53:19.542 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:53:59.500 00:00:11.792 TCP 12.102.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:55:01.334 00:00:11.816 TCP 12.102.0.1:41738 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:56:03.186 00:00:11.801 TCP 12.102.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:51:33.219 00:06:00.135 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 02:57:05.033 00:00:11.821 TCP 12.102.0.1:51188 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:58:06.878 00:00:11.759 TCP 12.102.0.1:35370 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:58:19.188 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 02:58:19.277 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:58:19.394 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 02:58:19.127 00:00:00.040 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 02:58:19.169 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 02:58:19.205 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 02:58:19.166 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 02:53:33.223 00:06:00.130 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 258, avg pps: 0, avg bpp: 108 Time window: 2025-09-15 01:55:33 - 2025-09-15 02:59:33 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0042s User: 0.0008s Wall: 0.0024s flows/second: 67088.7 Runtime: 0.0024s