Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 02:59:14.427 00:00:11.805 TCP 12.102.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:54:44.855 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 03:00:16.269 00:00:11.799 TCP 12.102.0.1:51588 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:55:44.857 00:06:00.121 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:01:01.839 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.644 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.918 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.651 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.362 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.813 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.817 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:01:18.105 00:00:11.759 TCP 12.102.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:02:19.899 00:00:11.828 TCP 12.102.0.1:43006 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:03:21.769 00:00:11.757 TCP 12.102.0.1:35786 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:04:23.565 00:00:11.798 TCP 12.102.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:05:25.405 00:00:11.801 TCP 12.102.0.1:46718 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:06:01.416 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:06:01.439 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.394 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.556 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.197 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.426 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.547 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:06:27.240 00:00:11.761 TCP 12.102.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:01:44.856 00:06:00.130 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 03:07:29.058 00:00:11.800 TCP 12.102.0.1:47442 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:02:44.858 00:06:00.125 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:08:30.897 00:00:11.810 TCP 12.102.0.1:38278 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:09:32.746 00:00:11.799 TCP 12.102.0.1:44752 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:10:34.588 00:00:11.805 TCP 12.102.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:11:01.513 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.451 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.324 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.491 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.578 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.459 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.490 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:11:36.430 00:00:11.829 TCP 12.102.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:12:38.295 00:00:11.825 TCP 12.102.0.1:42820 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:08:44.857 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 03:13:40.155 00:00:11.816 TCP 12.102.0.1:40052 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:09:44.858 00:06:00.137 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:14:42.010 00:00:11.885 TCP 12.102.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:15:43.937 00:00:11.815 TCP 12.102.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:16:01.317 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.610 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.438 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.354 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.440 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.203 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.295 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:16:45.796 00:00:11.804 TCP 12.102.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:17:47.639 00:00:11.761 TCP 12.102.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:18:49.440 00:00:11.838 TCP 12.102.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:15:44.859 00:05:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:19:51.329 00:00:11.806 TCP 12.102.0.1:57822 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:21:01.788 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:21:01.811 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.835 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.542 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.711 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.745 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.627 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:20:53.173 00:00:11.781 TCP 12.102.0.1:50374 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:16:44.859 00:06:00.139 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:21:55.017 00:00:11.818 TCP 12.102.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:22:56.871 00:00:11.810 TCP 12.102.0.1:58506 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:23:58.719 00:00:11.774 TCP 12.102.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:25:00.533 00:00:11.814 TCP 12.102.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:21:44.860 00:05:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:26:01.781 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.716 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.854 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.856 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.759 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.849 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.694 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:26:02.386 00:00:11.769 TCP 12.102.0.1:48124 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:27:04.193 00:00:11.815 TCP 12.102.0.1:56526 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:28:06.070 00:00:11.814 TCP 12.102.0.1:60324 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:23:44.862 00:06:00.137 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:29:07.924 00:00:11.788 TCP 12.102.0.1:49718 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:30:09.752 00:00:11.762 TCP 12.102.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:31:01.838 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.862 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.971 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.967 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.748 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.816 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:31:02.016 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:31:11.550 00:00:11.815 TCP 12.102.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:27:44.860 00:05:00.144 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:32:13.405 00:00:11.766 TCP 12.102.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:33:15.208 00:00:11.802 TCP 12.102.0.1:50880 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:34:17.073 00:00:11.802 TCP 12.102.0.1:60038 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:30:44.864 00:05:00.162 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:35:18.914 00:00:11.785 TCP 12.102.0.1:54056 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:36:01.887 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.887 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.942 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.949 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.788 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.866 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:36:01.991 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:36:20.735 00:00:11.819 TCP 12.102.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:37:22.591 00:00:11.800 TCP 12.102.0.1:37504 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:33:44.863 00:05:00.178 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:38:24.427 00:00:11.813 TCP 12.102.0.1:40582 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:39:26.279 00:00:11.801 TCP 12.102.0.1:33594 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:40:28.116 00:00:11.807 TCP 12.102.0.1:55416 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:36:44.867 00:05:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:41:01.952 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.127 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.090 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.083 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:41:01.985 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.147 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.105 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:41:29.961 00:00:11.817 TCP 12.102.0.1:56254 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:42:31.815 00:00:11.864 TCP 12.102.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:39:44.867 00:05:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:43:33.710 00:00:11.800 TCP 12.102.0.1:39756 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:44:35.553 00:00:11.807 TCP 12.102.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:45:37.399 00:00:11.805 TCP 12.102.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:46:01.869 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:46:01.870 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:46:01.953 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:46:01.975 00:00:00.028 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:46:02.091 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:46:02.582 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:46:02.622 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:42:44.870 00:05:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:46:39.243 00:00:11.760 TCP 12.102.0.1:54892 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:47:41.071 00:00:11.849 TCP 12.102.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:48:42.959 00:00:11.757 TCP 12.102.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:45:44.868 00:05:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:49:44.754 00:00:11.801 TCP 12.102.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:50:46.594 00:00:11.767 TCP 12.102.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:51:02.241 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.313 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.244 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.326 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.105 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.249 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.219 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:51:48.401 00:00:11.812 TCP 12.102.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:48:44.873 00:05:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:52:50.252 00:00:12.666 TCP 12.102.0.1:42588 -> 1.101.0.1:3000 17 2241 1 2025-10-01 03:53:52.957 00:00:11.801 TCP 12.102.0.1:60574 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:54:54.795 00:00:11.797 TCP 12.102.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:51:44.870 00:05:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:56:02.442 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:56:02.465 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.296 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.520 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.550 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.338 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.207 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:55:56.636 00:00:11.799 TCP 12.102.0.1:55948 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:56:58.471 00:00:11.804 TCP 12.102.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:58:00.312 00:00:11.800 TCP 12.102.0.1:46452 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:54:44.874 00:05:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 Summary: total flows: 162, total bytes: 125052, total packets: 1152, avg bps: 256, avg pps: 0, avg bpp: 108 Time window: 2025-10-01 02:54:44 - 2025-10-01 03:59:45 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0019s Wall: 0.0024s flows/second: 67616.4 Runtime: 0.0024s