Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 21:58:42.782 00:00:11.858 TCP 12.102.0.1:53528 -> 1.101.0.1:3000 11 1507 1 2025-09-18 21:59:44.676 00:00:11.812 TCP 12.102.0.1:58296 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:00:08.723 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:00:08.633 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:00:08.846 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:00:08.648 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:00:08.852 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:00:08.634 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:00:08.701 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:00:46.529 00:00:11.803 TCP 12.102.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-09-18 21:56:36.085 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-18 22:01:48.368 00:00:11.817 TCP 12.102.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:02:50.222 00:00:11.815 TCP 12.102.0.1:34888 -> 1.101.0.1:3000 11 1507 1 2025-09-18 21:59:36.092 00:04:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-18 22:03:52.077 00:00:11.761 TCP 12.102.0.1:52466 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:04:53.873 00:00:11.766 TCP 12.102.0.1:60024 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:05:08.785 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:05:08.844 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:05:08.972 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:05:08.625 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:05:08.590 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:05:08.858 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:05:08.763 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:05:55.683 00:00:11.799 TCP 12.102.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:06:57.518 00:00:14.560 TCP 12.102.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:08:02.123 00:00:11.805 TCP 12.102.0.1:37940 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:03:36.093 00:06:00.050 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-18 22:04:36.092 00:04:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-18 22:09:03.969 00:00:11.803 TCP 12.102.0.1:38518 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:10:09.176 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:10:08.846 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:10:09.015 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:10:08.835 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:10:08.613 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:10:09.198 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:10:08.823 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:10:05.813 00:00:11.805 TCP 12.102.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:10:36.098 00:00:00.046 TCP 179.10.12.12:58070 -> 179.10.12.10:179 2 123 1 2025-09-18 22:11:07.656 00:00:11.813 TCP 12.102.0.1:46996 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:12:09.505 00:00:11.759 TCP 12.102.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:13:11.306 00:00:11.800 TCP 12.102.0.1:45184 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:14:13.141 00:00:11.817 TCP 12.102.0.1:49150 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:09:36.094 00:06:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-18 22:15:08.911 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:15:08.935 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:15:09.056 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:15:08.911 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:15:08.904 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:15:09.055 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:15:08.746 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:15:14.995 00:00:11.800 TCP 12.102.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:11:36.096 00:04:00.047 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-18 22:16:16.823 00:00:11.852 TCP 12.102.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:17:18.719 00:00:11.763 TCP 12.102.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:18:20.520 00:00:11.802 TCP 12.102.0.1:34938 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:19:22.363 00:00:11.810 TCP 12.102.0.1:56488 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:20:08.952 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:20:09.169 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:20:08.920 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:20:08.878 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:20:09.079 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:20:09.036 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:20:08.929 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:20:24.208 00:00:11.796 TCP 12.102.0.1:43360 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:16:36.098 00:04:00.053 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-18 22:16:36.095 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-18 22:21:26.063 00:00:11.808 TCP 12.102.0.1:38336 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:22:27.905 00:00:11.822 TCP 12.102.0.1:49802 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:23:29.764 00:00:11.803 TCP 12.102.0.1:36314 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:24:31.608 00:00:11.803 TCP 12.102.0.1:37816 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:25:09.124 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:25:09.147 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:25:09.089 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:25:09.276 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:25:09.201 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:25:09.092 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:25:09.154 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:25:33.452 00:00:11.757 TCP 12.102.0.1:41462 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:21:36.098 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-18 22:26:35.248 00:00:11.798 TCP 12.102.0.1:56216 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:27:37.088 00:00:11.800 TCP 12.102.0.1:59604 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:23:36.096 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-18 22:28:38.931 00:00:12.034 TCP 12.102.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:29:41.007 00:00:12.163 TCP 12.102.0.1:44828 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:30:09.340 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:30:09.362 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:30:09.457 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:30:09.317 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:30:09.217 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:30:09.182 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:30:09.262 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:30:36.096 00:00:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 2 123 1 2025-09-18 22:30:43.212 00:00:11.798 TCP 12.102.0.1:57766 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:31:45.072 00:00:11.757 TCP 12.102.0.1:38172 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:32:46.866 00:00:11.798 TCP 12.102.0.1:60348 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:28:36.099 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-18 22:33:48.713 00:00:11.798 TCP 12.102.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:35:09.279 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:34:50.553 00:00:11.801 TCP 12.102.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:35:09.302 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:35:09.178 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:35:09.431 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:35:09.294 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:35:09.413 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:35:09.377 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:31:36.108 00:04:00.048 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-18 22:35:52.394 00:00:11.764 TCP 12.102.0.1:56074 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:36:54.194 00:00:11.799 TCP 12.102.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:35:36.108 00:02:00.047 TCP 179.10.12.12:58070 -> 179.10.12.10:179 6 369 1 2025-09-18 22:37:56.048 00:00:11.757 TCP 12.102.0.1:41730 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:38:57.855 00:00:11.808 TCP 12.102.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:40:09.623 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:39:59.701 00:00:11.815 TCP 12.102.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:40:09.646 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:40:09.749 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:40:09.706 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:40:09.820 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:40:09.757 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:40:09.788 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:36:36.105 00:04:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-18 22:41:01.552 00:00:11.853 TCP 12.102.0.1:39754 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:42:03.445 00:00:11.806 TCP 12.102.0.1:47756 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:38:36.107 00:04:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-18 22:43:05.294 00:00:11.796 TCP 12.102.0.1:47706 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:44:07.130 00:00:11.799 TCP 12.102.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:45:10.020 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:45:10.042 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:45:10.086 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:45:09.870 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:45:10.219 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:45:10.070 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:45:10.056 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:45:08.969 00:00:11.799 TCP 12.102.0.1:51154 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:41:36.106 00:04:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-18 22:46:10.803 00:00:11.804 TCP 12.102.0.1:34362 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:47:12.646 00:00:12.002 TCP 12.102.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:43:36.109 00:04:00.047 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-18 22:48:14.680 00:00:11.767 TCP 12.102.0.1:41528 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:49:16.483 00:00:11.817 TCP 12.102.0.1:34720 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:50:09.812 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:50:09.835 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:50:09.669 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:50:09.618 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:50:09.635 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:50:09.926 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:50:09.763 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:50:18.336 00:00:11.853 TCP 12.102.0.1:54854 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:51:20.229 00:00:11.822 TCP 12.102.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:46:36.107 00:06:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-18 22:48:36.110 00:04:00.047 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-18 22:52:22.085 00:00:11.818 TCP 12.102.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:53:23.942 00:00:11.818 TCP 12.102.0.1:47436 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:54:25.796 00:00:11.857 TCP 12.102.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:55:09.851 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-18 22:55:09.873 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-18 22:55:09.983 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:55:09.963 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-18 22:55:09.806 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-18 22:55:10.006 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-18 22:55:09.829 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-18 22:55:27.691 00:00:11.766 TCP 12.102.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:56:29.494 00:00:11.766 TCP 12.102.0.1:41562 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:53:36.110 00:04:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-18 22:53:36.108 00:04:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-18 22:57:31.298 00:00:11.803 TCP 12.102.0.1:42498 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:58:33.136 00:00:11.831 TCP 12.102.0.1:34332 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 166, total bytes: 124964, total packets: 1143, avg bps: 268, avg pps: 0, avg bpp: 109 Time window: 2025-09-18 21:56:36 - 2025-09-18 22:58:44 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0041s User: 0.0008s Wall: 0.0026s flows/second: 63238.4 Runtime: 0.0026s