Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 06:59:27.540 00:00:11.756 TCP 12.102.0.1:42992 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:00:29.338 00:00:12.481 TCP 12.102.0.1:50148 -> 1.101.0.1:3000 11 1507 1 2025-09-15 06:56:33.343 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:01:31.854 00:00:11.808 TCP 12.102.0.1:39428 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:02:33.704 00:00:11.800 TCP 12.102.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:03:24.628 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:03:24.650 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:03:24.524 00:00:00.075 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:03:24.819 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:03:24.688 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:03:24.865 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:03:24.878 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 06:58:33.348 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 07:03:35.540 00:00:11.774 TCP 12.102.0.1:39074 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:04:37.355 00:00:11.770 TCP 12.102.0.1:34538 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:05:39.170 00:00:11.799 TCP 12.102.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:06:41.008 00:00:11.795 TCP 12.102.0.1:51860 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:07:42.848 00:00:11.800 TCP 12.102.0.1:39664 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:08:24.090 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:08:24.113 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:08:24.280 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:08:24.128 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:08:24.227 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:08:24.309 00:00:00.033 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:08:24.271 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:03:33.345 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:08:44.687 00:00:11.776 TCP 12.102.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:09:46.500 00:00:11.808 TCP 12.102.0.1:35512 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:05:33.349 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 07:10:48.351 00:00:11.757 TCP 12.102.0.1:52590 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:11:50.144 00:00:11.801 TCP 12.102.0.1:48564 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:12:51.982 00:00:11.799 TCP 12.102.0.1:43528 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:13:24.304 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:13:24.395 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:13:24.443 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:13:24.285 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:13:24.379 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:13:24.307 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:13:24.281 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:13:53.821 00:00:12.222 TCP 12.102.0.1:51738 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:14:56.081 00:00:12.665 TCP 12.102.0.1:58932 -> 1.101.0.1:3000 17 2241 1 2025-09-15 07:10:33.349 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:15:58.786 00:00:11.800 TCP 12.102.0.1:41730 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:17:00.623 00:00:11.768 TCP 12.102.0.1:44618 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:12:33.352 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 07:18:02.432 00:00:11.760 TCP 12.102.0.1:40840 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:18:24.258 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:18:24.281 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:18:24.465 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:18:24.317 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:18:24.298 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:18:24.383 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:18:24.343 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:19:04.231 00:00:11.755 TCP 12.102.0.1:60622 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:20:06.035 00:00:11.756 TCP 12.102.0.1:53716 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:21:07.827 00:00:11.802 TCP 12.102.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:22:09.666 00:00:11.809 TCP 12.102.0.1:46384 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:17:33.350 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:23:11.511 00:00:11.803 TCP 12.102.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:23:24.288 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:23:24.526 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:23:24.506 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:23:24.554 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:23:24.543 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:23:24.531 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:23:24.265 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:24:13.353 00:00:11.798 TCP 12.102.0.1:50590 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:19:33.352 00:06:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 07:25:15.189 00:00:11.797 TCP 12.102.0.1:57812 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:26:17.030 00:00:11.803 TCP 12.102.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:27:18.870 00:00:11.796 TCP 12.102.0.1:60970 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:28:24.428 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:28:24.452 00:00:00.036 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:28:24.648 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:28:24.672 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:28:24.558 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:28:24.653 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:28:24.521 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:28:20.702 00:00:11.810 TCP 12.102.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:29:22.550 00:00:11.800 TCP 12.102.0.1:32908 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:24:33.351 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:30:24.386 00:00:11.808 TCP 12.102.0.1:33312 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:26:33.357 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 07:31:26.240 00:00:11.806 TCP 12.102.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:32:28.087 00:00:11.798 TCP 12.102.0.1:58718 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:33:24.785 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:33:24.808 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:33:24.851 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:33:24.863 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:33:24.888 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:33:24.674 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:33:25.000 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:33:29.924 00:00:11.867 TCP 12.102.0.1:49248 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:34:31.828 00:00:12.232 TCP 12.102.0.1:45284 -> 1.101.0.1:3000 15 1926 1 2025-09-15 07:35:34.103 00:00:11.795 TCP 12.102.0.1:38272 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:31:33.355 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:36:35.943 00:00:11.763 TCP 12.102.0.1:36040 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:37:37.743 00:00:11.803 TCP 12.102.0.1:43800 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:38:24.703 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:38:24.717 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:38:24.847 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:38:24.874 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:38:24.901 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:38:24.692 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:38:24.681 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:33:33.358 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 07:38:39.584 00:00:11.807 TCP 12.102.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:39:41.431 00:00:11.803 TCP 12.102.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:40:43.274 00:00:11.765 TCP 12.102.0.1:51402 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:41:45.084 00:00:11.803 TCP 12.102.0.1:47250 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:42:46.929 00:00:11.814 TCP 12.102.0.1:59968 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:43:24.827 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:43:24.865 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:43:24.851 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:43:25.088 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:43:24.723 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:43:24.872 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:43:25.089 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:38:33.355 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:43:48.778 00:00:11.816 TCP 12.102.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:44:50.636 00:00:11.804 TCP 12.102.0.1:42378 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:40:33.358 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 07:45:52.494 00:00:11.807 TCP 12.102.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:46:54.344 00:00:11.809 TCP 12.102.0.1:51418 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:47:56.193 00:00:11.799 TCP 12.102.0.1:45624 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:48:25.171 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:48:25.194 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:48:25.380 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:48:25.388 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:48:25.281 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:48:25.162 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:48:25.276 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:48:58.029 00:00:11.764 TCP 12.102.0.1:38696 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:49:59.829 00:00:11.811 TCP 12.102.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:45:33.362 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:51:01.670 00:00:11.806 TCP 12.102.0.1:40818 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:52:03.516 00:00:11.805 TCP 12.102.0.1:57004 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:47:33.365 00:06:00.073 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 07:53:05.360 00:00:11.813 TCP 12.102.0.1:51092 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:53:24.970 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:53:24.993 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:53:25.040 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:53:25.137 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:53:24.954 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:53:24.931 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:53:25.003 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 07:54:07.206 00:00:11.800 TCP 12.102.0.1:47200 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:55:09.069 00:00:11.792 TCP 12.102.0.1:40992 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:56:10.902 00:00:11.785 TCP 12.102.0.1:60416 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:57:12.726 00:00:11.847 TCP 12.102.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:52:33.364 00:06:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 07:58:25.213 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 07:58:25.236 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 07:58:24.990 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:58:25.248 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 07:58:25.218 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 07:58:14.612 00:00:11.805 TCP 12.102.0.1:39474 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:58:25.099 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 07:58:25.334 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 159, total bytes: 124364, total packets: 1138, avg bps: 267, avg pps: 0, avg bpp: 109 Time window: 2025-09-15 06:56:33 - 2025-09-15 07:58:33 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0036s User: 0.0012s Wall: 0.0031s flows/second: 51825.8 Runtime: 0.0031s