Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 17:58:50.561 00:00:11.802 TCP 12.102.0.1:44150 -> 1.101.0.1:3000 11 1507 1 2025-09-23 17:59:52.405 00:00:11.764 TCP 12.102.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:00:54.207 00:00:11.797 TCP 12.102.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-09-23 17:56:39.563 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:01:56.067 00:00:11.763 TCP 12.102.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:02:28.218 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:02:28.414 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:02:28.400 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:02:28.237 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:02:28.112 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:02:28.341 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:02:28.195 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:02:57.867 00:00:11.769 TCP 12.102.0.1:53878 -> 1.101.0.1:3000 11 1507 1 2025-09-23 17:58:39.566 00:06:00.102 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 18:03:59.675 00:00:11.811 TCP 12.102.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:05:01.523 00:00:11.801 TCP 12.102.0.1:41584 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:06:03.359 00:00:11.869 TCP 12.102.0.1:60366 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:07:05.268 00:00:11.801 TCP 12.102.0.1:35912 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:07:28.535 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:07:28.514 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:07:28.664 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:07:28.490 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:07:28.636 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:07:28.365 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:07:28.512 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:08:07.108 00:00:11.804 TCP 12.102.0.1:35994 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:03:39.563 00:06:00.108 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:09:08.947 00:00:11.801 TCP 12.102.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:10:10.786 00:00:11.761 TCP 12.102.0.1:58958 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:05:39.566 00:06:00.103 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 18:11:12.588 00:00:11.761 TCP 12.102.0.1:32938 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:12:14.389 00:00:11.815 TCP 12.102.0.1:51024 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:12:28.414 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:12:28.467 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:12:28.476 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:12:28.446 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:12:28.543 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:12:28.422 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:12:28.391 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:13:16.241 00:00:11.818 TCP 12.102.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:14:18.098 00:00:11.774 TCP 12.102.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:15:19.911 00:00:11.820 TCP 12.102.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:10:39.563 00:06:00.120 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:16:21.768 00:00:11.806 TCP 12.102.0.1:45906 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:17:28.545 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:17:28.567 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:17:28.693 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:17:28.756 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:17:28.612 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:17:28.699 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:17:28.487 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:17:23.611 00:00:11.800 TCP 12.102.0.1:36112 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:12:39.568 00:06:00.115 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 18:18:25.451 00:00:11.801 TCP 12.102.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:19:27.290 00:00:11.807 TCP 12.102.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:20:29.134 00:00:11.797 TCP 12.102.0.1:35098 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:21:30.969 00:00:11.757 TCP 12.102.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:22:28.589 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:22:28.591 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:22:28.642 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:22:28.691 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:22:28.894 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:22:28.598 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:22:28.569 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:17:39.572 00:06:00.113 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:22:32.764 00:00:11.849 TCP 12.102.0.1:59764 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:23:34.655 00:00:11.808 TCP 12.102.0.1:55638 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:19:39.575 00:06:00.108 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 18:24:36.513 00:00:11.810 TCP 12.102.0.1:38528 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:25:38.360 00:00:11.839 TCP 12.102.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:26:40.238 00:00:12.660 TCP 12.102.0.1:50010 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:27:28.696 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:27:28.718 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:27:28.727 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:27:28.921 00:00:00.019 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:27:28.841 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:27:28.865 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:27:28.607 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:27:42.933 00:00:11.815 TCP 12.102.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:28:44.784 00:00:11.805 TCP 12.102.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:24:39.573 00:06:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:29:46.628 00:00:11.803 TCP 12.102.0.1:43146 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:30:48.482 00:00:11.806 TCP 12.102.0.1:55020 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:26:39.575 00:06:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 18:31:50.326 00:00:11.805 TCP 12.102.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:32:28.995 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:32:29.173 00:00:00.041 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:32:28.981 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:32:28.943 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:32:28.955 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:32:28.939 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:32:28.916 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:32:52.181 00:00:11.769 TCP 12.102.0.1:53548 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:33:53.991 00:00:11.763 TCP 12.102.0.1:51124 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:34:55.793 00:00:11.770 TCP 12.102.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:35:57.601 00:00:11.808 TCP 12.102.0.1:51484 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:31:39.574 00:06:00.117 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:36:59.446 00:00:11.801 TCP 12.102.0.1:55398 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:37:28.780 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:37:29.187 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:37:29.174 00:00:00.063 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:37:29.025 00:00:00.008 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:37:29.211 00:00:00.048 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:37:29.081 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:37:28.757 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:38:01.286 00:00:11.775 TCP 12.102.0.1:50684 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:33:39.577 00:06:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 18:39:03.098 00:00:11.806 TCP 12.102.0.1:36216 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:40:04.942 00:00:11.770 TCP 12.102.0.1:38912 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:41:06.748 00:00:11.803 TCP 12.102.0.1:55436 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:42:08.597 00:00:11.810 TCP 12.102.0.1:41724 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:42:29.297 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:42:29.422 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:42:29.414 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:42:29.387 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:42:29.042 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:42:29.088 00:00:00.044 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:42:29.275 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:43:10.445 00:00:11.815 TCP 12.102.0.1:39470 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:38:39.577 00:06:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:44:12.299 00:00:11.795 TCP 12.102.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:45:14.131 00:00:11.772 TCP 12.102.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:40:39.580 00:06:00.111 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 18:46:15.946 00:00:11.810 TCP 12.102.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:47:17.795 00:00:11.808 TCP 12.102.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:47:29.161 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:47:29.159 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:47:29.092 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:47:29.135 00:00:00.035 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:47:29.343 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:47:29.162 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:47:29.138 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:48:19.637 00:00:11.802 TCP 12.102.0.1:47034 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:49:21.482 00:00:11.804 TCP 12.102.0.1:59330 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:50:23.327 00:00:11.768 TCP 12.102.0.1:58892 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:45:39.577 00:06:00.121 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:51:25.134 00:00:11.800 TCP 12.102.0.1:45872 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:52:29.237 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:52:29.261 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:52:29.437 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:52:29.238 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:52:29.196 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:52:29.320 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:52:29.313 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:47:39.580 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 18:52:26.977 00:00:11.797 TCP 12.102.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:53:28.816 00:00:11.798 TCP 12.102.0.1:46840 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:54:30.656 00:00:11.763 TCP 12.102.0.1:46942 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:55:32.458 00:00:11.805 TCP 12.102.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:56:34.305 00:00:11.805 TCP 12.102.0.1:42840 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:57:29.260 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 18:57:29.282 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 18:57:29.499 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:57:29.323 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 18:57:29.414 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 18:57:29.206 00:00:00.048 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 18:57:29.433 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 18:52:39.590 00:06:00.117 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 18:57:36.157 00:00:11.811 TCP 12.102.0.1:37260 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:58:38.005 00:00:11.809 TCP 12.102.0.1:45438 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124718, total packets: 1139, avg bps: 267, avg pps: 0, avg bpp: 109 Time window: 2025-09-23 17:56:39 - 2025-09-23 18:58:49 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0056s User: 0.0000s Wall: 0.0030s flows/second: 53959.0 Runtime: 0.0030s