Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 05:54:44.193 00:06:00.210 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 05:59:35.928 00:00:11.787 TCP 12.102.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:00:36.184 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:00:36.206 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.161 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.288 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.306 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.042 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.159 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 05:55:44.195 00:06:00.205 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:00:37.759 00:00:11.801 TCP 12.102.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:01:39.598 00:00:11.803 TCP 12.102.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:02:41.439 00:00:11.757 TCP 12.102.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:03:43.236 00:00:11.762 TCP 12.102.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:04:45.062 00:00:11.800 TCP 12.102.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:05:35.826 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:05:36.350 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:05:36.095 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:05:35.941 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:05:36.060 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:05:36.135 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:05:35.804 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:05:46.902 00:00:11.795 TCP 12.102.0.1:45402 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:01:44.202 00:06:00.204 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:06:48.733 00:00:11.798 TCP 12.102.0.1:43416 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:02:44.206 00:06:00.199 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:07:50.570 00:00:11.767 TCP 12.102.0.1:40894 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:08:52.377 00:00:11.802 TCP 12.102.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:09:54.217 00:00:11.797 TCP 12.102.0.1:42964 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:10:35.866 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:10:36.292 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:10:35.994 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:10:36.237 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:10:35.997 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:10:36.168 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:10:35.844 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:10:56.073 00:00:11.807 TCP 12.102.0.1:48456 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:11:57.937 00:00:11.768 TCP 12.102.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:12:59.753 00:00:11.804 TCP 12.102.0.1:54254 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:08:44.203 00:06:00.204 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:14:01.601 00:00:11.859 TCP 12.102.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:09:44.207 00:06:00.199 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:15:03.500 00:00:11.802 TCP 12.102.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:15:36.479 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:15:36.502 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.475 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.620 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.459 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.622 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.442 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:16:05.343 00:00:11.818 TCP 12.102.0.1:38892 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:17:07.191 00:00:11.801 TCP 12.102.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:18:09.060 00:00:11.802 TCP 12.102.0.1:58160 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:19:10.901 00:00:11.808 TCP 12.102.0.1:57724 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:20:12.743 00:00:11.807 TCP 12.102.0.1:47226 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:20:36.182 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:20:36.204 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.444 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.522 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.342 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.521 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.400 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:15:44.205 00:06:00.217 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:21:14.590 00:00:11.763 TCP 12.102.0.1:60864 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:16:44.211 00:06:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:22:16.390 00:00:11.913 TCP 12.102.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:23:18.345 00:00:11.804 TCP 12.102.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:24:20.191 00:00:11.804 TCP 12.102.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:25:36.426 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:25:22.043 00:00:11.800 TCP 12.102.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:25:36.450 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.497 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.437 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.547 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.574 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.456 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:26:23.883 00:00:11.800 TCP 12.102.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:27:25.737 00:00:11.795 TCP 12.102.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:22:44.210 00:06:00.215 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:28:27.571 00:00:12.137 TCP 12.102.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:23:44.211 00:06:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:29:29.750 00:00:11.764 TCP 12.102.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:30:36.459 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:30:36.482 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.701 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.546 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.719 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.776 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.380 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:30:31.547 00:00:11.801 TCP 12.102.0.1:48140 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:31:33.384 00:00:11.768 TCP 12.102.0.1:45254 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:32:35.187 00:00:11.800 TCP 12.102.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:33:37.040 00:00:11.797 TCP 12.102.0.1:58902 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:29:44.211 00:06:00.213 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:34:38.881 00:00:11.805 TCP 12.102.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:35:36.956 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:35:36.567 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:35:36.820 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:35:36.927 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:35:36.979 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:35:37.336 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:35:37.053 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:30:44.214 00:06:00.208 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:35:40.725 00:00:11.799 TCP 12.102.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:36:42.562 00:01:13.645 TCP 12.102.0.1:34888 -> 1.101.0.1:3000 22 3014 1 2025-09-30 06:38:46.246 00:00:11.799 TCP 12.102.0.1:35874 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:39:48.082 00:00:11.858 TCP 12.102.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:40:36.823 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:40:36.846 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.732 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.744 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.721 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.896 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.835 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:40:49.970 00:00:11.806 TCP 12.102.0.1:57656 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:36:44.223 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:41:51.814 00:00:11.806 TCP 12.102.0.1:48126 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:37:44.228 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:42:53.653 00:00:12.267 TCP 12.102.0.1:42876 -> 1.101.0.1:3000 15 1926 1 2025-09-30 06:43:55.962 00:00:11.807 TCP 12.102.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:44:57.810 00:00:11.798 TCP 12.102.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:45:36.970 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:45:36.885 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:45:36.948 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:45:37.158 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:45:37.016 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:45:37.061 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:45:37.083 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:45:59.647 00:00:11.765 TCP 12.102.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:47:01.451 00:00:11.808 TCP 12.102.0.1:55478 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:48:03.293 00:00:11.806 TCP 12.102.0.1:57074 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:43:44.227 00:06:00.201 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:49:05.135 00:00:11.786 TCP 12.102.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:44:44.232 00:06:00.194 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:50:06.958 00:00:11.798 TCP 12.102.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:50:36.970 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:50:37.014 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:50:37.035 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:50:37.183 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:50:37.021 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:50:37.005 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:50:36.988 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:51:08.801 00:00:11.806 TCP 12.102.0.1:41618 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:52:10.653 00:00:11.768 TCP 12.102.0.1:52576 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:53:12.459 00:00:11.797 TCP 12.102.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:54:14.294 00:00:11.766 TCP 12.102.0.1:43980 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:55:16.100 00:00:11.762 TCP 12.102.0.1:60838 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:55:37.202 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:55:37.225 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.356 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.569 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.506 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.442 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.319 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:50:44.233 00:06:00.210 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:56:17.903 00:00:11.759 TCP 12.102.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:51:44.233 00:06:00.208 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:57:19.701 00:00:11.766 TCP 12.102.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:58:21.508 00:00:11.802 TCP 12.102.0.1:47662 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124491, total packets: 1146, avg bps: 260, avg pps: 0, avg bpp: 108 Time window: 2025-09-30 05:54:44 - 2025-09-30 06:58:33 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0046s User: 0.0000s Wall: 0.0017s flows/second: 95667.0 Runtime: 0.0017s