Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 08:59:10.999 00:00:11.798 TCP 12.102.0.1:59626 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:00:12.840 00:00:11.769 TCP 12.102.0.1:48618 -> 1.101.0.1:3000 11 1507 1 2025-09-15 08:55:33.410 00:06:00.063 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:01:14.647 00:00:11.829 TCP 12.102.0.1:33496 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:02:16.512 00:00:11.771 TCP 12.102.0.1:52854 -> 1.101.0.1:3000 11 1507 1 2025-09-15 08:57:33.414 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 09:03:26.885 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:03:27.133 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:03:27.156 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:03:27.233 00:00:00.047 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:03:27.285 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:03:27.084 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:03:27.205 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:03:18.322 00:00:11.761 TCP 12.102.0.1:36792 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:04:20.121 00:00:11.921 TCP 12.102.0.1:38352 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:05:22.081 00:00:11.850 TCP 12.102.0.1:39820 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:06:23.972 00:00:11.760 TCP 12.102.0.1:58340 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:02:33.412 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:07:25.774 00:00:11.764 TCP 12.102.0.1:56118 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:08:26.722 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:08:26.746 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:08:26.674 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:08:26.906 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:08:26.569 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:08:26.819 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:08:26.637 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:08:27.577 00:00:11.809 TCP 12.102.0.1:39398 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:04:33.415 00:06:00.059 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 09:09:29.418 00:00:11.803 TCP 12.102.0.1:34244 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:10:31.262 00:00:11.796 TCP 12.102.0.1:47250 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:11:33.098 00:00:12.014 TCP 12.102.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:12:35.153 00:00:11.818 TCP 12.102.0.1:43456 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:13:26.708 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:13:26.732 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:13:26.870 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:13:26.732 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:13:26.627 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:13:26.797 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:13:26.683 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:13:37.010 00:00:11.842 TCP 12.102.0.1:45402 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:09:33.417 00:06:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:14:38.900 00:00:11.806 TCP 12.102.0.1:41724 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:15:40.747 00:00:11.821 TCP 12.102.0.1:46916 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:11:33.423 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 09:16:42.609 00:00:11.809 TCP 12.102.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:17:44.461 00:00:11.800 TCP 12.102.0.1:32918 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:18:26.921 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:18:26.724 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:18:26.914 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:18:26.725 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:18:26.607 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:18:26.598 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:18:26.899 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:18:46.311 00:00:11.761 TCP 12.102.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:19:48.113 00:00:11.812 TCP 12.102.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:20:49.963 00:00:11.806 TCP 12.102.0.1:52424 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:16:33.422 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:21:51.806 00:00:11.801 TCP 12.102.0.1:36300 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:22:53.656 00:00:11.817 TCP 12.102.0.1:35098 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:23:26.929 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:23:26.957 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:23:26.951 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:23:27.025 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:23:27.240 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:23:27.131 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:23:27.001 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:18:33.425 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 09:23:55.515 00:00:11.808 TCP 12.102.0.1:36092 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:24:57.364 00:00:11.827 TCP 12.102.0.1:57552 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:25:59.233 00:00:11.800 TCP 12.102.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:27:01.083 00:00:11.808 TCP 12.102.0.1:32990 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:28:02.931 00:00:12.703 TCP 12.102.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:28:26.722 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:28:26.854 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:28:26.779 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:28:26.777 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:28:26.769 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:28:26.719 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:28:26.701 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:23:33.423 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:29:05.672 00:00:12.129 TCP 12.102.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:30:07.841 00:00:11.811 TCP 12.102.0.1:60730 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:25:33.425 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 09:31:09.692 00:00:11.803 TCP 12.102.0.1:45414 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:32:11.534 00:00:11.803 TCP 12.102.0.1:53016 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:33:26.921 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:33:26.958 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:33:13.372 00:00:11.815 TCP 12.102.0.1:60020 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:33:26.945 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:33:27.110 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:33:27.070 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:33:27.062 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:33:27.023 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:34:15.226 00:00:11.761 TCP 12.102.0.1:58326 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:35:17.029 00:00:11.830 TCP 12.102.0.1:57732 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:30:33.432 00:06:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:36:18.895 00:00:11.799 TCP 12.102.0.1:32894 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:37:20.735 00:00:11.802 TCP 12.102.0.1:38068 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:32:33.435 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 09:38:27.222 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:38:27.244 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:38:27.090 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:38:27.078 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:38:27.051 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:38:27.289 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:38:27.161 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:38:22.568 00:00:11.817 TCP 12.102.0.1:43206 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:39:24.422 00:00:11.801 TCP 12.102.0.1:48514 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:40:26.257 00:00:11.804 TCP 12.102.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:41:28.097 00:00:11.810 TCP 12.102.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:37:33.435 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:42:29.936 00:00:11.811 TCP 12.102.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:43:27.321 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:43:27.343 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:43:27.412 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:43:27.265 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:43:27.096 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:43:27.102 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:43:27.354 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:43:31.787 00:00:11.798 TCP 12.102.0.1:59602 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:39:33.438 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 09:44:33.622 00:00:11.766 TCP 12.102.0.1:35914 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:45:35.422 00:00:12.052 TCP 12.102.0.1:49458 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:46:37.514 00:00:11.804 TCP 12.102.0.1:54244 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:47:39.355 00:00:12.812 TCP 12.102.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:48:27.459 00:00:00.018 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:48:27.294 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:48:27.408 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:48:27.466 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:48:27.488 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:48:27.280 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:48:27.438 00:00:00.018 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:48:42.204 00:00:11.825 TCP 12.102.0.1:41436 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:44:33.436 00:06:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:49:44.080 00:00:11.774 TCP 12.102.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:50:45.894 00:00:11.802 TCP 12.102.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:46:33.440 00:06:00.074 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 09:51:47.732 00:00:11.761 TCP 12.102.0.1:35394 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:52:49.534 00:00:11.832 TCP 12.102.0.1:59152 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:53:27.654 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:53:27.677 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:53:27.808 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:53:27.820 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:53:27.844 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:53:27.820 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:53:27.760 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:53:51.374 00:00:11.813 TCP 12.102.0.1:43572 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:54:53.228 00:00:11.802 TCP 12.102.0.1:46144 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:55:55.073 00:00:11.811 TCP 12.102.0.1:36398 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:51:33.439 00:06:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 09:56:56.930 00:00:11.831 TCP 12.102.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:57:58.800 00:00:11.807 TCP 12.102.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-09-15 09:58:27.522 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 09:58:27.544 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 09:58:27.713 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 09:58:27.411 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 09:58:27.459 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 09:58:27.731 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 09:58:27.694 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 09:53:33.442 00:06:00.074 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 258, avg pps: 0, avg bpp: 108 Time window: 2025-09-15 08:55:33 - 2025-09-15 09:59:33 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0052s User: 0.0000s Wall: 0.0030s flows/second: 53820.6 Runtime: 0.0030s