Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 11:58:56.512 00:00:11.781 TCP 12.102.0.1:58902 -> 1.101.0.1:3000 11 1507 1 2025-09-28 11:59:45.525 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 11:59:45.540 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 11:59:45.550 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 11:59:45.568 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 11:59:45.548 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 11:59:45.455 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 11:59:45.502 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 11:59:58.308 00:00:11.800 TCP 12.102.0.1:60412 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:01:00.150 00:00:11.811 TCP 12.102.0.1:37504 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:02:02.000 00:00:11.795 TCP 12.102.0.1:54964 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:03:03.836 00:00:11.755 TCP 12.102.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-09-28 11:59:42.993 00:05:00.070 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-28 12:04:05.637 00:00:11.797 TCP 12.102.0.1:46408 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:04:45.447 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:00:42.987 00:05:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-28 12:04:45.469 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:04:45.477 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:04:45.725 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:04:45.496 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:04:45.672 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:04:45.473 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:05:07.473 00:00:11.798 TCP 12.102.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:06:09.310 00:00:11.799 TCP 12.102.0.1:43264 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:07:11.150 00:00:11.807 TCP 12.102.0.1:36450 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:08:12.994 00:00:11.814 TCP 12.102.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:09:14.846 00:00:11.811 TCP 12.102.0.1:47916 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:09:45.526 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:09:45.549 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:05:42.992 00:05:00.074 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-28 12:09:45.571 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:09:45.679 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:09:45.575 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:09:45.675 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:09:45.622 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:10:16.694 00:00:11.807 TCP 12.102.0.1:40448 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:06:42.989 00:05:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-28 12:11:18.536 00:00:12.006 TCP 12.102.0.1:52842 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:12:20.585 00:00:11.801 TCP 12.102.0.1:44078 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:13:22.431 00:00:12.429 TCP 12.102.0.1:51214 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:14:24.904 00:00:11.798 TCP 12.102.0.1:43954 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:14:45.768 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:14:45.791 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:14:45.783 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:14:45.779 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:14:45.688 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:14:45.765 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:14:45.545 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:15:26.742 00:00:11.799 TCP 12.102.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:11:42.996 00:05:00.072 TCP 179.10.12.12:58070 -> 179.10.12.10:179 11 686 1 2025-09-28 12:16:28.579 00:00:11.808 TCP 12.102.0.1:44998 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:12:42.993 00:05:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-28 12:17:30.418 00:00:11.808 TCP 12.102.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:18:32.268 00:00:11.802 TCP 12.102.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:19:45.947 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:19:34.126 00:00:11.793 TCP 12.102.0.1:56432 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:19:45.972 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:19:45.894 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:19:46.159 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:19:45.976 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:19:46.100 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:19:45.877 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:20:35.961 00:00:11.766 TCP 12.102.0.1:37800 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:21:37.771 00:00:11.769 TCP 12.102.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:17:43.068 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 12:22:39.582 00:00:11.814 TCP 12.102.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:18:43.029 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 12:23:41.433 00:00:11.768 TCP 12.102.0.1:41496 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:24:45.976 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:24:46.000 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:24:46.107 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:24:46.114 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:24:46.018 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:24:46.188 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:24:46.062 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:24:43.242 00:00:11.815 TCP 12.102.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:25:45.097 00:00:11.815 TCP 12.102.0.1:40846 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:26:46.948 00:00:11.807 TCP 12.102.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:27:48.795 00:00:11.851 TCP 12.102.0.1:55714 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:28:50.686 00:00:11.799 TCP 12.102.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:29:46.156 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:29:46.180 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:24:43.073 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 12:29:46.019 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:29:45.968 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:29:45.935 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:29:46.121 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:29:46.055 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:29:52.527 00:00:11.772 TCP 12.102.0.1:34552 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:25:43.033 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 12:30:54.328 00:00:11.799 TCP 12.102.0.1:42414 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:31:56.161 00:00:11.806 TCP 12.102.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:32:58.005 00:00:11.802 TCP 12.102.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:33:59.850 00:00:11.798 TCP 12.102.0.1:37152 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:34:46.155 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:34:46.177 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:34:46.145 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:34:46.174 00:00:00.041 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:34:46.221 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:34:45.952 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:34:46.136 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:35:01.691 00:00:11.814 TCP 12.102.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:36:03.538 00:00:11.800 TCP 12.102.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:31:43.076 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 12:37:05.387 00:00:11.761 TCP 12.102.0.1:60110 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:32:43.036 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 12:38:07.185 00:00:11.843 TCP 12.102.0.1:56794 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:39:09.080 00:00:11.804 TCP 12.102.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:39:46.358 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:39:46.381 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:39:46.473 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:39:46.638 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:39:46.489 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:39:46.364 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:39:46.565 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:40:10.921 00:00:11.779 TCP 12.102.0.1:37398 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:41:12.741 00:00:12.242 TCP 12.102.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:42:15.034 00:00:11.812 TCP 12.102.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:43:16.886 00:00:11.799 TCP 12.102.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:38:43.078 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 12:44:18.731 00:00:11.806 TCP 12.102.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:44:46.337 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:44:46.300 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:44:46.513 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:44:46.365 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:44:46.165 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:44:46.356 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:44:46.315 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:39:43.038 00:06:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 12:45:20.566 00:00:11.812 TCP 12.102.0.1:56390 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:46:22.423 00:00:11.801 TCP 12.102.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:47:24.268 00:00:12.245 TCP 12.102.0.1:60260 -> 1.101.0.1:3000 15 1926 1 2025-09-28 12:48:26.549 00:00:11.758 TCP 12.102.0.1:36006 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:49:28.355 00:00:11.784 TCP 12.102.0.1:48882 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:49:46.418 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:49:46.441 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:49:46.352 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:49:46.509 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:49:46.542 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:49:46.633 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:49:46.244 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:50:30.181 00:00:11.800 TCP 12.102.0.1:59100 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:45:43.080 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 12:51:32.028 00:00:11.801 TCP 12.102.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:46:43.038 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 12:52:33.873 00:00:11.800 TCP 12.102.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:53:35.711 00:00:11.805 TCP 12.102.0.1:51484 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:54:46.628 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:54:46.652 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:54:46.601 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:54:46.737 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:54:46.616 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:54:46.704 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:54:46.582 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:54:37.562 00:00:11.801 TCP 12.102.0.1:50990 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:55:39.403 00:00:11.809 TCP 12.102.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:56:41.250 00:00:11.807 TCP 12.102.0.1:49866 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:52:43.080 00:06:00.011 TCP 179.10.12.12:58070 -> 179.10.12.10:179 8 549 1 2025-09-28 12:57:43.100 00:00:12.196 TCP 12.102.0.1:51134 -> 1.101.0.1:3000 15 1926 1 2025-09-28 12:53:43.039 00:06:00.049 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 160, total bytes: 121988, total packets: 1096, avg bps: 267, avg pps: 0, avg bpp: 111 Time window: 2025-09-28 11:58:56 - 2025-09-28 12:59:43 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0015s Wall: 0.0020s flows/second: 78279.3 Runtime: 0.0021s