Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 15:59:12.040 00:00:11.753 TCP 12.102.0.1:43512 -> 1.101.0.1:3000 11 1507 1 2025-10-01 15:54:45.145 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:00:13.834 00:00:11.770 TCP 12.102.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:01:16.931 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:01:16.920 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:01:16.783 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:01:16.909 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:01:17.144 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:01:17.135 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:01:17.092 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:01:15.655 00:00:11.809 TCP 12.102.0.1:42058 -> 1.101.0.1:3000 11 1507 1 2025-10-01 15:56:45.142 00:06:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:02:17.498 00:00:14.290 TCP 12.102.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:03:21.830 00:00:11.762 TCP 12.102.0.1:58544 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:04:23.635 00:00:11.767 TCP 12.102.0.1:55428 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:05:25.442 00:00:11.827 TCP 12.102.0.1:45626 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:06:17.105 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:06:17.128 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:06:17.233 00:00:00.032 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:06:17.051 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:06:17.091 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:06:17.022 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:06:16.994 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:06:27.301 00:00:11.761 TCP 12.102.0.1:54852 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:01:45.146 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:07:29.103 00:00:11.802 TCP 12.102.0.1:50202 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:08:30.952 00:00:12.243 TCP 12.102.0.1:41620 -> 1.101.0.1:3000 15 1926 1 2025-10-01 16:03:45.144 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:09:33.239 00:00:11.807 TCP 12.102.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:10:35.091 00:00:11.800 TCP 12.102.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:11:17.346 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:11:17.368 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:11:17.201 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:11:17.315 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:11:17.513 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:11:17.491 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:11:17.373 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:11:36.934 00:00:11.817 TCP 12.102.0.1:59788 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:12:38.786 00:00:11.850 TCP 12.102.0.1:41034 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:08:45.147 00:06:00.131 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:13:40.679 00:00:11.800 TCP 12.102.0.1:46382 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:14:42.517 00:00:11.799 TCP 12.102.0.1:44658 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:10:45.147 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:15:44.357 00:00:11.760 TCP 12.102.0.1:52010 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:16:17.189 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:16:17.213 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:16:17.083 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:16:17.292 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:16:17.318 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:16:17.179 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:16:17.158 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:16:46.155 00:00:11.766 TCP 12.102.0.1:50574 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:17:47.960 00:00:11.800 TCP 12.102.0.1:35894 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:18:49.797 00:00:11.801 TCP 12.102.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:19:51.633 00:00:11.765 TCP 12.102.0.1:42904 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:15:45.150 00:06:00.132 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:20:53.437 00:00:11.807 TCP 12.102.0.1:48666 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:21:17.188 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:21:17.371 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:21:17.246 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:21:17.290 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:21:17.393 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:21:17.252 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:21:17.166 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:21:55.278 00:00:12.814 TCP 12.102.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:17:45.149 00:06:00.135 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:22:58.147 00:00:11.808 TCP 12.102.0.1:45042 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:24:00.008 00:00:11.817 TCP 12.102.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:25:01.864 00:00:11.798 TCP 12.102.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:26:17.185 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:26:17.208 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:26:17.447 00:00:00.019 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:26:17.347 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:26:17.322 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:26:17.528 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:26:17.568 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:26:03.698 00:00:19.012 TCP 12.102.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:27:12.768 00:00:12.132 TCP 12.102.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:22:45.152 00:06:00.132 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:28:14.956 00:00:11.806 TCP 12.102.0.1:46990 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:29:16.797 00:00:11.806 TCP 12.102.0.1:59182 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:24:45.151 00:06:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:30:18.655 00:00:11.837 TCP 12.102.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:31:17.514 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:31:17.455 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:31:17.566 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:31:17.539 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:31:17.639 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:31:17.656 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:31:17.491 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:31:20.530 00:00:11.762 TCP 12.102.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:32:22.328 00:00:11.801 TCP 12.102.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:33:24.168 00:00:11.806 TCP 12.102.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:34:26.024 00:00:11.806 TCP 12.102.0.1:41582 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:29:45.153 00:06:00.133 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:35:27.867 00:00:11.802 TCP 12.102.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:36:17.539 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:36:17.482 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:36:17.667 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:36:17.627 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:36:17.641 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:36:17.765 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:36:17.518 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:36:29.728 00:00:11.801 TCP 12.102.0.1:56660 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:31:45.150 00:06:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:37:31.569 00:00:11.806 TCP 12.102.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:38:33.409 00:00:11.764 TCP 12.102.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:39:35.215 00:00:11.812 TCP 12.102.0.1:42222 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:40:37.077 00:00:11.803 TCP 12.102.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:41:17.512 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:41:17.788 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:41:17.817 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:41:17.789 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:41:17.831 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:41:17.707 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:41:17.490 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:36:45.156 00:06:00.130 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:41:38.916 00:00:11.840 TCP 12.102.0.1:40822 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:42:40.779 00:00:12.254 TCP 12.102.0.1:40156 -> 1.101.0.1:3000 15 1926 1 2025-10-01 16:38:45.153 00:06:00.136 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:43:43.081 00:00:11.797 TCP 12.102.0.1:46838 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:44:44.912 00:00:11.792 TCP 12.102.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:45:46.739 00:00:11.759 TCP 12.102.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:46:17.765 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:46:17.705 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:46:17.825 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:46:17.603 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:46:17.838 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:46:17.775 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:46:17.743 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:46:48.537 00:00:11.767 TCP 12.102.0.1:44652 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:47:50.342 00:00:12.536 TCP 12.102.0.1:44694 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:43:45.156 00:06:00.131 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:48:52.915 00:00:11.822 TCP 12.102.0.1:47222 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:49:54.779 00:00:11.801 TCP 12.102.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:45:45.154 00:06:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:50:56.622 00:00:11.762 TCP 12.102.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:51:17.956 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:51:18.168 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:51:18.023 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:51:17.970 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:51:18.117 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:51:17.964 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:51:17.933 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:51:58.423 00:00:11.765 TCP 12.102.0.1:55752 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:53:00.221 00:00:11.799 TCP 12.102.0.1:54854 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:54:02.083 00:00:11.806 TCP 12.102.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:55:03.925 00:00:11.881 TCP 12.102.0.1:33582 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:50:45.159 00:06:00.132 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 16:56:05.852 00:00:11.810 TCP 12.102.0.1:39170 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:56:17.817 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 16:56:18.128 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:56:18.127 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 16:56:17.934 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 16:56:18.031 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 16:56:17.813 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 16:56:17.794 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 16:57:07.702 00:00:11.818 TCP 12.102.0.1:48992 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:52:45.156 00:06:00.138 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 16:58:09.556 00:00:11.801 TCP 12.102.0.1:37614 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 260, avg pps: 0, avg bpp: 108 Time window: 2025-10-01 15:54:45 - 2025-10-01 16:58:45 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0023s User: 0.0034s Wall: 0.0028s flows/second: 57060.5 Runtime: 0.0028s