Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 04:58:42.777 00:00:11.797 TCP 12.102.0.1:48514 -> 1.101.0.1:3000 11 1507 1 2025-09-30 04:59:44.612 00:00:11.806 TCP 12.102.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:00:34.886 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:00:34.908 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:00:34.813 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:00:34.904 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:00:34.804 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:00:34.816 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:00:34.890 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:00:46.455 00:00:11.763 TCP 12.102.0.1:48264 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:01:48.263 00:00:12.296 TCP 12.102.0.1:51584 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:02:50.602 00:00:11.822 TCP 12.102.0.1:59050 -> 1.101.0.1:3000 11 1507 1 2025-09-30 04:58:44.173 00:06:00.202 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:03:52.468 00:00:11.812 TCP 12.102.0.1:39024 -> 1.101.0.1:3000 11 1507 1 2025-09-30 04:59:44.177 00:06:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 05:04:54.314 00:00:11.823 TCP 12.102.0.1:35500 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:05:34.764 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:05:34.788 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:05:35.086 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:05:35.055 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:05:34.913 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:05:34.903 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:05:35.028 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:05:56.177 00:00:11.765 TCP 12.102.0.1:33172 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:06:57.981 00:00:11.807 TCP 12.102.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:07:59.823 00:00:11.815 TCP 12.102.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:09:01.679 00:00:11.922 TCP 12.102.0.1:32998 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:10:03.637 00:00:11.832 TCP 12.102.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:10:35.107 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:10:35.130 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:10:35.133 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:10:35.062 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:10:34.778 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:10:34.968 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:10:35.058 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:05:44.177 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:11:05.509 00:00:11.800 TCP 12.102.0.1:36832 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:06:44.180 00:06:00.199 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 05:12:07.349 00:00:11.806 TCP 12.102.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:13:09.199 00:00:11.809 TCP 12.102.0.1:56048 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:14:11.073 00:00:11.916 TCP 12.102.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:15:13.031 00:00:11.809 TCP 12.102.0.1:54900 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:15:35.024 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:15:35.125 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:15:34.962 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:15:34.952 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:15:35.242 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:15:35.089 00:00:00.038 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:15:35.002 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:16:14.883 00:00:11.812 TCP 12.102.0.1:57834 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:17:16.737 00:00:11.789 TCP 12.102.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:12:44.182 00:06:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:18:18.567 00:00:11.802 TCP 12.102.0.1:52196 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:13:44.184 00:06:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 05:19:20.407 00:00:11.800 TCP 12.102.0.1:36088 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:20:35.014 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:20:22.241 00:00:11.765 TCP 12.102.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:20:35.035 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:20:35.348 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:20:35.337 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:20:35.238 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:20:35.171 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:20:35.272 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:21:24.067 00:00:12.264 TCP 12.102.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:22:26.383 00:00:12.251 TCP 12.102.0.1:40944 -> 1.101.0.1:3000 15 1926 1 2025-09-30 05:23:28.681 00:00:11.813 TCP 12.102.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:19:44.183 00:06:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:24:30.530 00:00:11.809 TCP 12.102.0.1:47660 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:25:35.238 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:25:35.262 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:25:35.492 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:25:35.542 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:25:35.499 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:25:35.532 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:25:35.577 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:25:32.374 00:00:11.816 TCP 12.102.0.1:38480 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:20:44.186 00:06:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 05:26:34.230 00:00:11.813 TCP 12.102.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:27:36.090 00:00:12.310 TCP 12.102.0.1:56732 -> 1.101.0.1:3000 15 1926 1 2025-09-30 05:28:38.442 00:00:11.757 TCP 12.102.0.1:44756 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:29:40.238 00:00:11.803 TCP 12.102.0.1:50870 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:30:35.311 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:30:35.424 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:30:35.634 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:30:35.596 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:30:35.420 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:30:35.520 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:30:35.288 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:30:42.086 00:00:11.812 TCP 12.102.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:26:44.185 00:06:00.199 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:31:43.934 00:00:13.902 TCP 12.102.0.1:59294 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:27:44.187 00:06:00.194 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 05:32:47.920 00:00:11.825 TCP 12.102.0.1:49552 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:33:49.783 00:00:11.800 TCP 12.102.0.1:38876 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:34:51.620 00:00:11.804 TCP 12.102.0.1:49894 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:35:35.512 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:35:35.663 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:35:35.588 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:35:35.398 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:35:35.644 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:35:35.460 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:35:35.489 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:35:53.467 00:00:11.805 TCP 12.102.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:36:55.313 00:00:11.805 TCP 12.102.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:37:57.157 00:00:11.861 TCP 12.102.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:33:44.185 00:06:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:38:59.081 00:00:11.820 TCP 12.102.0.1:41816 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:34:44.188 00:06:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 05:40:00.943 00:00:11.771 TCP 12.102.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:40:35.888 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:40:35.915 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:40:36.123 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:40:35.997 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:40:36.004 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:40:35.789 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:40:35.864 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:41:02.755 00:00:11.814 TCP 12.102.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:42:04.606 00:00:11.806 TCP 12.102.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:43:06.452 00:00:11.761 TCP 12.102.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:44:08.258 00:00:11.857 TCP 12.102.0.1:48826 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:45:10.161 00:00:11.818 TCP 12.102.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:45:35.759 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:45:35.782 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:45:35.758 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:45:35.865 00:00:00.036 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:45:35.642 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:45:35.763 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:45:35.624 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:40:44.186 00:06:00.199 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:46:12.033 00:00:11.816 TCP 12.102.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:41:44.190 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 05:47:13.887 00:00:11.816 TCP 12.102.0.1:47522 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:48:15.739 00:00:11.812 TCP 12.102.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:49:17.592 00:00:11.779 TCP 12.102.0.1:59082 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:50:19.409 00:00:11.819 TCP 12.102.0.1:50840 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:50:35.805 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:50:35.824 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:50:35.770 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:50:35.964 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:50:35.900 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:50:35.943 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:50:35.783 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:51:21.261 00:00:11.818 TCP 12.102.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:52:23.121 00:00:11.803 TCP 12.102.0.1:36514 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:47:44.189 00:06:00.198 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:53:24.960 00:00:11.799 TCP 12.102.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:48:44.192 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 05:54:26.802 00:00:11.769 TCP 12.102.0.1:43828 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:55:35.772 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 05:55:35.792 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 05:55:35.905 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 05:55:36.093 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 05:55:35.974 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 05:55:35.769 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:55:35.749 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:55:28.619 00:00:11.759 TCP 12.102.0.1:53484 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:56:30.415 00:00:11.756 TCP 12.102.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:57:32.209 00:00:11.810 TCP 12.102.0.1:38536 -> 1.101.0.1:3000 11 1507 1 2025-09-30 05:58:34.079 00:00:11.813 TCP 12.102.0.1:46366 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124695, total packets: 1133, avg bps: 276, avg pps: 0, avg bpp: 110 Time window: 2025-09-30 04:58:42 - 2025-09-30 05:58:45 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0027s User: 0.0018s Wall: 0.0012s flows/second: 132926.9 Runtime: 0.0012s