Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 22:59:38.155 00:00:11.765 TCP 12.102.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:00:39.960 00:00:11.808 TCP 12.102.0.1:55952 -> 1.101.0.1:3000 11 1507 1 2025-10-02 22:56:45.678 00:06:00.188 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:01:41.793 00:00:11.796 TCP 12.102.0.1:52328 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:01:54.273 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:01:54.468 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:01:54.149 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:01:54.441 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:01:54.389 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:01:54.254 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:01:54.250 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:02:43.655 00:00:11.758 TCP 12.102.0.1:54246 -> 1.101.0.1:3000 11 1507 1 2025-10-02 22:58:45.673 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 23:03:45.453 00:00:11.824 TCP 12.102.0.1:49858 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:04:47.318 00:00:11.801 TCP 12.102.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:05:49.154 00:00:11.809 TCP 12.102.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:06:54.160 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:06:54.182 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:06:54.174 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:06:54.399 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:06:54.300 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:06:54.380 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:06:54.186 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:06:51.004 00:00:11.797 TCP 12.102.0.1:40284 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:07:52.841 00:00:11.797 TCP 12.102.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:03:45.675 00:06:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:08:54.676 00:00:11.804 TCP 12.102.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:09:56.522 00:00:11.811 TCP 12.102.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:05:45.675 00:06:00.196 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 23:10:58.368 00:00:11.831 TCP 12.102.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:11:54.470 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:11:54.491 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:11:54.512 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:11:54.493 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:11:54.579 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:11:54.403 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:11:54.531 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:12:00.236 00:00:12.177 TCP 12.102.0.1:42742 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:13:02.454 00:00:12.138 TCP 12.102.0.1:44004 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:14:04.628 00:00:11.800 TCP 12.102.0.1:58574 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:15:06.472 00:00:11.799 TCP 12.102.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:10:45.678 00:06:00.191 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:16:08.314 00:00:11.803 TCP 12.102.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:16:54.607 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:16:54.419 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:16:54.650 00:00:00.040 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:16:54.581 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:16:54.596 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:16:54.694 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:16:54.396 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:17:10.150 00:00:11.770 TCP 12.102.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:12:45.675 00:06:00.197 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 23:18:11.963 00:00:11.802 TCP 12.102.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:19:13.806 00:00:11.754 TCP 12.102.0.1:37508 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:20:15.599 00:00:11.765 TCP 12.102.0.1:50482 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:21:17.408 00:00:11.805 TCP 12.102.0.1:45236 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:21:54.590 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:21:54.469 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:21:54.724 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:21:54.552 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:21:54.565 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:21:54.409 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:21:54.570 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:22:19.255 00:00:11.808 TCP 12.102.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:17:45.688 00:06:00.184 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:23:21.101 00:00:11.865 TCP 12.102.0.1:37868 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:24:23.022 00:00:11.849 TCP 12.102.0.1:60422 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:19:45.686 00:06:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 23:25:24.914 00:00:11.834 TCP 12.102.0.1:60898 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:26:26.789 00:00:11.828 TCP 12.102.0.1:36404 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:26:54.829 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:26:54.851 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:26:54.924 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:26:54.915 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:26:54.997 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:26:54.890 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:26:54.855 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:27:28.652 00:00:11.819 TCP 12.102.0.1:60254 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:28:30.507 00:00:12.248 TCP 12.102.0.1:45728 -> 1.101.0.1:3000 15 1926 1 2025-10-02 23:29:32.799 00:00:11.802 TCP 12.102.0.1:60154 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:24:45.692 00:06:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:30:34.645 00:00:11.780 TCP 12.102.0.1:55322 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:26:45.689 00:06:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 23:31:36.441 00:00:11.804 TCP 12.102.0.1:59490 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:31:54.631 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:31:54.939 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:31:55.038 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:31:54.916 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:31:55.032 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:31:54.907 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:31:54.609 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:32:38.285 00:00:11.801 TCP 12.102.0.1:52328 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:33:40.122 00:00:11.803 TCP 12.102.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:34:41.964 00:00:11.808 TCP 12.102.0.1:34656 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:35:43.814 00:00:11.804 TCP 12.102.0.1:58886 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:31:45.694 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:36:54.710 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:36:54.807 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:36:55.113 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:36:54.827 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:36:54.968 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:36:54.820 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:36:54.783 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:36:45.662 00:00:11.765 TCP 12.102.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:37:47.462 00:00:12.350 TCP 12.102.0.1:43256 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:33:45.692 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 23:38:49.870 00:00:11.815 TCP 12.102.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:39:51.718 00:00:11.797 TCP 12.102.0.1:49570 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:40:53.553 00:00:11.800 TCP 12.102.0.1:50786 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:41:55.016 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:41:55.079 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:41:54.936 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:41:55.053 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:41:55.082 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:41:54.893 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:41:54.992 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:41:55.386 00:00:11.815 TCP 12.102.0.1:48294 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:42:57.235 00:00:11.801 TCP 12.102.0.1:57228 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:38:45.696 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:43:59.084 00:00:11.800 TCP 12.102.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:45:00.927 00:00:11.780 TCP 12.102.0.1:40336 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:40:45.693 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 23:46:02.746 00:00:11.800 TCP 12.102.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:46:55.297 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:46:55.317 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:46:55.352 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:46:55.308 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:46:55.425 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:46:55.374 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:46:55.274 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:47:04.582 00:00:11.803 TCP 12.102.0.1:42644 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:48:06.420 00:00:11.882 TCP 12.102.0.1:59794 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:49:08.334 00:00:11.796 TCP 12.102.0.1:51670 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:50:10.168 00:00:11.801 TCP 12.102.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:45:45.697 00:06:00.180 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:51:12.010 00:00:13.190 TCP 12.102.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:51:55.121 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:51:55.143 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:51:55.174 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:51:55.267 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:51:55.291 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:51:55.335 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:51:55.206 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:52:15.234 00:00:11.806 TCP 12.102.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:47:45.695 00:06:00.185 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 23:53:17.083 00:00:11.804 TCP 12.102.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:54:18.925 00:00:11.823 TCP 12.102.0.1:34788 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:55:20.791 00:00:11.808 TCP 12.102.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:56:22.635 00:00:11.804 TCP 12.102.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:56:55.225 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 23:56:55.247 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 23:56:55.343 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 23:56:55.452 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 23:56:55.337 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 23:56:55.208 00:00:00.038 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 23:56:55.086 00:00:00.044 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 23:57:24.475 00:00:11.803 TCP 12.102.0.1:55466 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:52:45.697 00:06:00.182 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 23:58:26.313 00:00:11.800 TCP 12.102.0.1:36298 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-10-02 22:56:45 - 2025-10-02 23:58:45 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0029s User: 0.0029s Wall: 0.0020s flows/second: 80223.1 Runtime: 0.0020s