Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 12:58:45.339 00:00:11.766 TCP 12.102.0.1:49430 -> 1.101.0.1:3000 11 1507 1 2025-09-28 12:59:46.729 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:59:46.783 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 12:59:46.896 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 12:59:46.856 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 12:59:46.707 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 12:59:47.120 00:00:00.036 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 12:59:47.163 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 12:59:47.142 00:00:11.800 TCP 12.102.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:00:48.985 00:00:11.801 TCP 12.102.0.1:42766 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:01:50.824 00:00:11.808 TCP 12.102.0.1:57956 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:02:52.678 00:00:11.802 TCP 12.102.0.1:50276 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:03:54.517 00:00:11.796 TCP 12.102.0.1:48954 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:04:46.622 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:04:46.645 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 12:59:43.047 00:06:00.042 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-28 13:04:46.856 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:04:46.684 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:04:46.550 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:04:46.755 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:04:46.801 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:04:56.347 00:00:11.763 TCP 12.102.0.1:34506 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:00:43.044 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 13:05:58.148 00:00:11.771 TCP 12.102.0.1:50394 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:06:59.951 00:00:11.802 TCP 12.102.0.1:49670 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:08:01.792 00:00:11.770 TCP 12.102.0.1:50990 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:09:03.601 00:00:11.805 TCP 12.102.0.1:46956 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:09:47.091 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:09:46.898 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:09:46.955 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:09:47.114 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:09:47.168 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:09:46.993 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:09:46.993 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:10:05.444 00:00:11.806 TCP 12.102.0.1:39772 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:11:07.288 00:00:11.801 TCP 12.102.0.1:38758 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:06:43.048 00:06:00.042 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 653 1 2025-09-28 13:12:09.138 00:00:11.812 TCP 12.102.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:07:43.045 00:06:00.047 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 13:13:10.986 00:00:11.799 TCP 12.102.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:14:12.825 00:00:11.867 TCP 12.102.0.1:41968 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:14:46.723 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:14:46.841 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:14:46.887 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:14:46.927 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:14:46.827 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:14:46.700 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:14:47.084 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:15:14.728 00:00:12.360 TCP 12.102.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:16:17.123 00:00:11.803 TCP 12.102.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:17:18.965 00:00:11.995 TCP 12.102.0.1:47618 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:18:20.997 00:00:11.754 TCP 12.102.0.1:36952 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:13:43.089 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 9 601 1 2025-09-28 13:19:22.788 00:00:11.802 TCP 12.102.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:14:43.048 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 13:19:47.073 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:19:47.091 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:19:47.143 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:19:47.199 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:19:47.293 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:19:47.083 00:00:00.046 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:19:47.050 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:20:24.626 00:00:11.760 TCP 12.102.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:21:26.420 00:00:11.788 TCP 12.102.0.1:33768 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:22:28.240 00:00:11.798 TCP 12.102.0.1:40642 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:23:30.079 00:00:11.803 TCP 12.102.0.1:37440 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:24:46.992 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:24:31.920 00:00:11.822 TCP 12.102.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:24:47.017 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:24:47.357 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:24:47.267 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:24:47.372 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:24:47.274 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:24:47.017 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:25:33.778 00:00:11.800 TCP 12.102.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:20:43.053 00:06:00.040 TCP 179.10.12.12:58070 -> 179.10.12.10:179 8 549 1 2025-09-28 13:21:43.051 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 13:26:35.617 00:00:12.551 TCP 12.102.0.1:40638 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:27:38.209 00:00:11.763 TCP 12.102.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:28:40.012 00:00:11.818 TCP 12.102.0.1:45198 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:29:47.167 00:00:00.018 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:29:47.465 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:29:47.377 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:29:47.333 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:29:47.124 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:29:47.233 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:29:47.140 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:29:41.866 00:00:11.806 TCP 12.102.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:30:43.721 00:00:11.810 TCP 12.102.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:31:45.559 00:00:11.805 TCP 12.102.0.1:51466 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:27:43.094 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 13:32:47.410 00:00:11.767 TCP 12.102.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:28:43.053 00:06:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 13:33:49.217 00:00:11.803 TCP 12.102.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:34:47.412 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:34:47.387 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:34:47.495 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:34:47.452 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:34:47.475 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:34:47.362 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:34:47.391 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:34:51.075 00:00:11.850 TCP 12.102.0.1:50000 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:35:52.967 00:00:11.799 TCP 12.102.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:36:54.811 00:00:11.804 TCP 12.102.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:37:56.654 00:00:11.819 TCP 12.102.0.1:56548 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:38:58.506 00:00:11.802 TCP 12.102.0.1:52430 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:34:43.095 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 13:39:47.367 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:39:47.634 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:39:47.619 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:39:47.475 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:39:47.484 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:39:47.368 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:39:47.346 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:40:00.349 00:00:11.801 TCP 12.102.0.1:32964 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:35:43.057 00:06:00.041 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 13:41:02.189 00:00:11.801 TCP 12.102.0.1:59502 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:42:04.041 00:00:11.814 TCP 12.102.0.1:42600 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:43:05.892 00:00:11.760 TCP 12.102.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:44:07.693 00:00:11.804 TCP 12.102.0.1:47348 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:44:47.987 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:44:48.010 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:44:47.685 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:44:47.887 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:44:47.662 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:44:47.770 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:44:47.634 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:45:09.533 00:00:11.760 TCP 12.102.0.1:59226 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:46:11.334 00:00:11.869 TCP 12.102.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:41:43.096 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 13:47:13.241 00:00:11.787 TCP 12.102.0.1:46880 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:42:43.063 00:06:00.039 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 13:48:15.082 00:00:11.801 TCP 12.102.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:49:16.923 00:00:11.881 TCP 12.102.0.1:51832 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:49:47.795 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:49:47.702 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:49:47.718 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:49:47.771 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:49:47.580 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:49:47.719 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:49:47.556 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:50:18.853 00:00:11.816 TCP 12.102.0.1:54878 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:51:20.710 00:00:11.811 TCP 12.102.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:52:22.559 00:00:11.812 TCP 12.102.0.1:42350 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:53:24.411 00:00:11.799 TCP 12.102.0.1:57248 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:48:43.098 00:06:00.007 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-28 13:54:26.249 00:00:11.806 TCP 12.102.0.1:57820 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:49:43.068 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-28 13:54:48.000 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-28 13:54:47.654 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:54:48.216 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-28 13:54:48.095 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-28 13:54:48.039 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-28 13:54:47.815 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-28 13:54:47.978 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-28 13:55:28.108 00:00:11.801 TCP 12.102.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:56:29.947 00:00:11.863 TCP 12.102.0.1:54638 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:57:31.851 00:00:11.806 TCP 12.102.0.1:34724 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:58:33.689 00:00:11.802 TCP 12.102.0.1:43000 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 121621, total packets: 1082, avg bps: 270, avg pps: 0, avg bpp: 112 Time window: 2025-09-28 12:58:45 - 2025-09-28 13:58:45 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0037s User: 0.0018s Wall: 0.0027s flows/second: 59043.3 Runtime: 0.0027s