Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 08:58:42.289 00:00:11.806 TCP 12.102.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-10-02 08:59:44.136 00:00:11.801 TCP 12.102.0.1:37508 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:00:45.975 00:00:11.807 TCP 12.102.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:01:37.402 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:01:37.361 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:01:37.409 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:01:37.343 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:01:37.210 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:01:37.297 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:01:37.273 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 08:56:45.423 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:01:47.815 00:00:11.799 TCP 12.102.0.1:58236 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:02:49.656 00:00:12.488 TCP 12.102.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-10-02 08:58:45.420 00:06:00.202 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 09:03:52.181 00:00:11.855 TCP 12.102.0.1:47820 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:04:54.082 00:00:11.775 TCP 12.102.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:05:55.890 00:00:11.764 TCP 12.102.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:06:37.305 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:06:37.328 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:06:37.567 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:06:37.489 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:06:37.519 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:06:37.554 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:06:37.100 00:00:00.038 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:06:57.694 00:00:11.803 TCP 12.102.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:07:59.542 00:00:11.805 TCP 12.102.0.1:52604 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:03:45.428 00:06:00.194 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:09:01.388 00:00:11.957 TCP 12.102.0.1:44522 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:10:03.383 00:00:11.770 TCP 12.102.0.1:42774 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:05:45.425 00:06:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 09:11:05.192 00:00:11.833 TCP 12.102.0.1:40874 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:11:37.272 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:11:37.296 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:11:38.037 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:11:37.984 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:11:37.946 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:11:37.441 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:11:37.520 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:12:07.077 00:00:11.810 TCP 12.102.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:13:08.926 00:00:11.823 TCP 12.102.0.1:51998 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:14:10.784 00:00:11.821 TCP 12.102.0.1:40444 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:15:12.644 00:00:11.802 TCP 12.102.0.1:56594 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:10:45.430 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:16:14.482 00:00:11.803 TCP 12.102.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:16:37.548 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:16:37.668 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:16:37.463 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:16:37.567 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:16:37.771 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:16:37.531 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:16:37.525 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:17:16.318 00:00:11.803 TCP 12.102.0.1:33666 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:12:45.427 00:06:00.201 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 09:18:18.161 00:00:11.805 TCP 12.102.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:19:20.007 00:00:11.762 TCP 12.102.0.1:33532 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:20:21.806 00:00:11.800 TCP 12.102.0.1:47150 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:21:23.644 00:00:11.803 TCP 12.102.0.1:46014 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:21:37.829 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:21:38.115 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:21:37.868 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:21:37.925 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:21:38.118 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:21:37.848 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:21:37.807 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:22:25.483 00:00:11.807 TCP 12.102.0.1:45664 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:17:45.431 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:23:27.330 00:00:11.800 TCP 12.102.0.1:53886 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:24:29.165 00:00:11.803 TCP 12.102.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:19:45.428 00:06:00.201 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 09:25:31.006 00:00:11.798 TCP 12.102.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:26:37.832 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:26:38.025 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:26:37.950 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:26:37.868 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:26:37.966 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:26:37.846 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:26:37.810 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:26:32.845 00:00:11.806 TCP 12.102.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:27:34.690 00:00:11.811 TCP 12.102.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:28:36.542 00:00:11.798 TCP 12.102.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:24:45.431 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:29:38.380 00:00:11.859 TCP 12.102.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:30:40.281 00:00:11.803 TCP 12.102.0.1:48414 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:31:37.816 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:31:37.894 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:31:37.933 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:31:37.834 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:31:37.827 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:31:37.704 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:31:37.793 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:26:45.429 00:06:00.201 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 09:31:42.120 00:00:11.759 TCP 12.102.0.1:41838 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:32:43.926 00:00:11.813 TCP 12.102.0.1:59586 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:33:45.790 00:00:11.767 TCP 12.102.0.1:48724 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:34:47.595 00:00:20.351 TCP 12.102.0.1:60972 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:35:57.982 00:00:11.801 TCP 12.102.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:36:38.073 00:00:00.043 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:36:38.204 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:36:38.234 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:36:38.219 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:36:38.346 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:36:37.981 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:36:38.051 00:00:00.042 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:31:45.432 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:36:59.824 00:00:11.765 TCP 12.102.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:38:01.627 00:00:11.867 TCP 12.102.0.1:37256 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:33:45.430 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 09:39:03.533 00:00:11.803 TCP 12.102.0.1:42826 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:40:05.381 00:00:11.814 TCP 12.102.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:41:07.239 00:00:11.834 TCP 12.102.0.1:54154 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:41:38.309 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:41:38.088 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:41:38.095 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:41:38.222 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:41:38.086 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:41:38.199 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:41:38.286 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:42:09.119 00:00:11.823 TCP 12.102.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:43:10.982 00:00:11.764 TCP 12.102.0.1:41998 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:38:45.434 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:44:12.786 00:00:11.775 TCP 12.102.0.1:45656 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:45:14.601 00:00:11.809 TCP 12.102.0.1:49090 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:40:45.432 00:06:00.202 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 09:46:16.450 00:00:11.811 TCP 12.102.0.1:39320 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:46:38.251 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:46:38.255 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:46:38.095 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:46:38.066 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:46:38.310 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:46:38.084 00:00:00.045 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:46:38.229 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:47:18.298 00:00:11.760 TCP 12.102.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:48:20.095 00:00:11.812 TCP 12.102.0.1:42692 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:49:21.942 00:00:11.768 TCP 12.102.0.1:55720 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:50:23.750 00:00:11.913 TCP 12.102.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:45:45.436 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:51:38.296 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:51:38.319 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:51:38.293 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:51:38.397 00:00:00.017 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:51:38.309 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:51:25.701 00:00:11.810 TCP 12.102.0.1:58880 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:51:38.448 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:51:38.275 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:52:27.556 00:00:11.760 TCP 12.102.0.1:36804 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:47:45.434 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 09:53:29.356 00:00:11.815 TCP 12.102.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:54:31.215 00:00:11.855 TCP 12.102.0.1:33758 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:55:33.111 00:00:11.812 TCP 12.102.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:56:38.321 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 09:56:38.346 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 09:56:38.780 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:56:38.567 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 09:56:38.686 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 09:56:38.690 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 09:56:38.571 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 09:56:34.964 00:00:11.776 TCP 12.102.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:52:45.439 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 09:57:36.773 00:00:11.879 TCP 12.102.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:58:38.700 00:00:11.783 TCP 12.102.0.1:48992 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124718, total packets: 1139, avg bps: 267, avg pps: 0, avg bpp: 109 Time window: 2025-10-02 08:56:45 - 2025-10-02 09:58:50 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0011s User: 0.0034s Wall: 0.0023s flows/second: 70396.4 Runtime: 0.0023s