Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 01:59:26.008 00:00:11.799 TCP 12.102.0.1:37964 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:00:27.841 00:00:11.815 TCP 12.102.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:01:00.128 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:01:00.395 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:01:00.240 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:00:59.987 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:00:59.863 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:01:00.089 00:00:00.034 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:01:00.107 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:01:29.699 00:00:11.828 TCP 12.102.0.1:42950 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:02:31.561 00:00:12.242 TCP 12.102.0.1:51222 -> 1.101.0.1:3000 15 1926 1 2025-10-01 02:03:33.841 00:00:11.804 TCP 12.102.0.1:46360 -> 1.101.0.1:3000 11 1507 1 2025-10-01 01:58:44.831 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 01:59:44.834 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 02:04:35.680 00:00:11.803 TCP 12.102.0.1:58558 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:05:37.524 00:00:11.799 TCP 12.102.0.1:55818 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:06:00.254 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:06:00.276 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:06:00.135 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:06:00.027 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:06:00.167 00:00:00.028 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:05:59.895 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:06:00.263 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:06:39.358 00:00:11.768 TCP 12.102.0.1:52804 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:07:41.169 00:00:11.805 TCP 12.102.0.1:52724 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:08:43.007 00:00:11.796 TCP 12.102.0.1:34444 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:09:44.846 00:00:11.803 TCP 12.102.0.1:60286 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:05:44.833 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 02:11:00.108 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:11:00.130 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:11:00.209 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:11:00.390 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:11:00.354 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:10:46.689 00:00:11.862 TCP 12.102.0.1:59964 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:11:00.351 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:11:00.277 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:06:44.835 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 02:11:48.586 00:00:11.805 TCP 12.102.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:12:50.428 00:00:11.763 TCP 12.102.0.1:54188 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:13:52.227 00:00:11.757 TCP 12.102.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:14:54.027 00:00:11.800 TCP 12.102.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:16:00.287 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:16:00.310 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:16:00.381 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:16:00.469 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:16:00.392 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:16:00.437 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:16:00.303 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:15:55.866 00:00:11.861 TCP 12.102.0.1:52158 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:16:57.761 00:00:11.803 TCP 12.102.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:12:44.834 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 02:17:59.607 00:00:11.804 TCP 12.102.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:13:44.837 00:06:00.130 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 02:19:01.448 00:00:11.757 TCP 12.102.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:20:03.243 00:00:11.804 TCP 12.102.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:21:00.219 00:00:00.018 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:21:00.621 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:21:00.377 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:21:00.585 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:21:00.544 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:21:00.494 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:21:00.198 00:00:00.017 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:21:05.090 00:00:11.799 TCP 12.102.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:22:06.927 00:00:11.815 TCP 12.102.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:23:08.783 00:00:11.800 TCP 12.102.0.1:47150 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:24:10.620 00:00:11.759 TCP 12.102.0.1:46872 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:19:44.837 00:06:00.133 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 02:25:12.417 00:00:11.765 TCP 12.102.0.1:58616 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:20:44.840 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 02:26:00.567 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:26:00.584 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:26:00.752 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:26:00.580 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:26:00.691 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:26:00.388 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:26:00.545 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:26:14.216 00:00:11.802 TCP 12.102.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:27:16.079 00:00:11.800 TCP 12.102.0.1:56152 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:28:17.918 00:00:11.792 TCP 12.102.0.1:49930 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:29:19.742 00:00:11.814 TCP 12.102.0.1:38506 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:30:21.594 00:00:11.862 TCP 12.102.0.1:42404 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:31:00.710 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:31:00.650 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:31:00.798 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:31:00.548 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:31:00.836 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:31:00.629 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:31:00.687 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:31:23.498 00:00:11.806 TCP 12.102.0.1:36070 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:26:44.837 00:06:00.133 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 02:32:25.342 00:00:11.800 TCP 12.102.0.1:50790 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:27:44.840 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 02:33:27.182 00:00:11.799 TCP 12.102.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:34:29.025 00:00:11.804 TCP 12.102.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:35:30.863 00:00:11.810 TCP 12.102.0.1:42758 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:36:00.504 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:36:00.528 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:36:00.827 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:36:00.762 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:36:00.732 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:36:00.827 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:36:00.833 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:36:32.718 00:00:11.802 TCP 12.102.0.1:41784 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:37:34.556 00:00:12.336 TCP 12.102.0.1:41030 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:33:44.843 00:06:00.129 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 02:38:36.924 00:00:11.820 TCP 12.102.0.1:54302 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:34:44.845 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 02:39:38.781 00:00:11.795 TCP 12.102.0.1:57488 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:40:40.616 00:00:11.803 TCP 12.102.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:41:01.065 00:00:00.028 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:41:00.942 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:41:01.499 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:41:01.509 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:41:01.206 00:00:00.044 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:41:00.924 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:41:01.042 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:41:42.457 00:00:11.764 TCP 12.102.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:42:44.261 00:00:11.800 TCP 12.102.0.1:55552 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:43:46.100 00:00:11.801 TCP 12.102.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:44:47.940 00:00:11.811 TCP 12.102.0.1:41198 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:40:44.848 00:06:00.126 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 02:46:00.939 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:45:49.793 00:00:11.797 TCP 12.102.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:46:00.962 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:46:01.037 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:46:01.080 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:46:00.845 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:46:00.947 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:46:00.829 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:41:44.851 00:06:00.121 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 02:46:51.639 00:00:11.805 TCP 12.102.0.1:44572 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:47:53.483 00:00:11.800 TCP 12.102.0.1:36168 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:48:55.317 00:00:11.802 TCP 12.102.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:49:57.157 00:00:11.768 TCP 12.102.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:51:01.022 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:51:01.044 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:51:01.093 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:51:00.783 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:51:01.096 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:51:01.097 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:51:01.096 00:00:00.036 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:50:58.967 00:00:12.043 TCP 12.102.0.1:56866 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:52:01.066 00:00:11.796 TCP 12.102.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:47:44.848 00:06:00.126 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 02:53:02.903 00:00:12.259 TCP 12.102.0.1:51650 -> 1.101.0.1:3000 15 1926 1 2025-10-01 02:48:44.851 00:06:00.121 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 02:54:05.175 00:00:11.866 TCP 12.102.0.1:36152 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:55:07.082 00:00:11.804 TCP 12.102.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:56:01.279 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 02:56:01.065 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 02:56:01.039 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 02:56:01.009 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 02:56:00.926 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 02:56:01.086 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 02:56:01.017 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 02:56:08.927 00:00:11.820 TCP 12.102.0.1:53338 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:57:10.784 00:00:11.761 TCP 12.102.0.1:52680 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:58:12.581 00:00:11.809 TCP 12.102.0.1:40640 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 275, avg pps: 0, avg bpp: 109 Time window: 2025-10-01 01:58:44 - 2025-10-01 02:58:24 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0044s User: 0.0009s Wall: 0.0022s flows/second: 71166.2 Runtime: 0.0022s