Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 23:59:28.151 00:00:11.813 TCP 12.102.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:54:45.696 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:00:30.003 00:00:11.801 TCP 12.102.0.1:40352 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:01:31.847 00:00:11.756 TCP 12.102.0.1:53764 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:01:55.311 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:01:55.412 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:01:55.582 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:01:55.544 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:01:55.361 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:01:55.384 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:01:55.287 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:02:33.655 00:00:11.809 TCP 12.102.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:03:35.508 00:00:11.805 TCP 12.102.0.1:47748 -> 1.101.0.1:3000 11 1507 1 2025-10-02 23:59:45.699 00:06:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-03 00:04:37.355 00:00:11.773 TCP 12.102.0.1:54176 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:05:39.161 00:00:11.806 TCP 12.102.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:01:45.698 00:06:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:06:55.460 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:06:55.411 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:06:55.427 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:06:55.401 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:06:55.509 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:06:41.001 00:00:11.803 TCP 12.102.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:06:55.473 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:06:55.438 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:07:42.839 00:00:12.665 TCP 12.102.0.1:44194 -> 1.101.0.1:3000 17 2241 1 2025-10-03 00:08:45.545 00:00:11.807 TCP 12.102.0.1:50598 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:09:47.393 00:00:11.816 TCP 12.102.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:10:49.243 00:00:11.801 TCP 12.102.0.1:54390 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:06:45.701 00:06:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-03 00:11:55.790 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:11:55.812 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:11:55.592 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:11:55.947 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:11:55.723 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:11:55.952 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:11:55.830 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:11:51.081 00:00:11.823 TCP 12.102.0.1:51774 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:12:52.913 00:00:11.795 TCP 12.102.0.1:50300 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:08:45.699 00:06:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:13:54.738 00:00:11.801 TCP 12.102.0.1:60666 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:14:56.580 00:00:11.805 TCP 12.102.0.1:51808 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:15:58.423 00:00:11.803 TCP 12.102.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:16:55.864 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:16:55.734 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:16:55.860 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:16:56.052 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:16:55.981 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:16:55.740 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:16:55.842 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:17:00.270 00:00:11.803 TCP 12.102.0.1:49598 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:18:02.112 00:00:11.808 TCP 12.102.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:13:45.703 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-03 00:19:03.952 00:00:11.803 TCP 12.102.0.1:41114 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:20:05.795 00:00:11.801 TCP 12.102.0.1:47790 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:15:45.701 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:21:07.633 00:00:11.806 TCP 12.102.0.1:46310 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:21:55.928 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:21:55.951 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:21:56.029 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:21:55.959 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:21:55.774 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:21:55.761 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:21:55.551 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:22:09.476 00:00:11.828 TCP 12.102.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:23:11.339 00:00:11.859 TCP 12.102.0.1:45320 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:24:13.241 00:00:11.805 TCP 12.102.0.1:50470 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:25:15.084 00:00:11.806 TCP 12.102.0.1:33992 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:20:45.708 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-03 00:26:16.930 00:00:11.806 TCP 12.102.0.1:60494 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:26:55.946 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:26:56.071 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:26:55.917 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:26:56.053 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:26:55.853 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:26:56.025 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:26:55.924 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:27:18.773 00:00:11.798 TCP 12.102.0.1:56484 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:22:45.704 00:06:00.183 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:28:20.613 00:00:11.806 TCP 12.102.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:29:22.458 00:00:11.802 TCP 12.102.0.1:41886 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:30:24.299 00:00:11.812 TCP 12.102.0.1:54632 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:31:26.153 00:00:11.822 TCP 12.102.0.1:50980 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:31:55.962 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:31:55.917 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:31:56.104 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:31:56.007 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:31:56.016 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:31:55.994 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:31:55.983 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:32:28.017 00:00:11.764 TCP 12.102.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:27:45.708 00:06:00.178 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-03 00:33:29.820 00:00:11.795 TCP 12.102.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:34:31.653 00:00:11.809 TCP 12.102.0.1:56354 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:29:45.707 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:35:33.509 00:00:11.808 TCP 12.102.0.1:47378 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:36:35.348 00:00:11.813 TCP 12.102.0.1:49224 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:36:56.048 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:36:56.295 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:36:56.107 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:36:56.241 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:36:56.276 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:36:56.059 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:36:56.026 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:37:37.205 00:00:11.774 TCP 12.102.0.1:54318 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:38:39.022 00:00:11.772 TCP 12.102.0.1:41250 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:34:45.711 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-03 00:39:40.836 00:00:11.777 TCP 12.102.0.1:44254 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:40:42.646 00:00:11.779 TCP 12.102.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:36:45.709 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:41:56.247 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:41:44.459 00:00:11.815 TCP 12.102.0.1:46522 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:41:56.271 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:41:56.153 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:41:56.263 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:41:56.100 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:41:56.219 00:00:00.046 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:41:56.275 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:42:46.317 00:00:11.820 TCP 12.102.0.1:53052 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:43:48.180 00:00:11.800 TCP 12.102.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:44:50.022 00:00:11.764 TCP 12.102.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:45:51.823 00:00:11.823 TCP 12.102.0.1:53278 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:41:45.716 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-03 00:46:56.456 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:46:56.479 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:46:56.265 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:46:56.316 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:46:56.478 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:46:56.143 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:46:56.356 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:46:53.686 00:00:11.803 TCP 12.102.0.1:41628 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:47:55.526 00:00:11.806 TCP 12.102.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:43:45.713 00:06:00.179 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:48:57.368 00:00:11.812 TCP 12.102.0.1:49412 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:49:59.225 00:00:11.803 TCP 12.102.0.1:37102 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:51:01.081 00:00:11.800 TCP 12.102.0.1:40676 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:51:56.735 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:51:56.702 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:51:56.817 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:51:56.585 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:51:56.702 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:51:56.687 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:51:56.712 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:52:02.918 00:00:11.824 TCP 12.102.0.1:43834 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:53:04.778 00:00:11.777 TCP 12.102.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:48:45.716 00:06:00.178 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-03 00:54:06.575 00:00:11.830 TCP 12.102.0.1:39588 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:55:08.445 00:00:11.803 TCP 12.102.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:50:45.714 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-03 00:56:10.289 00:00:11.800 TCP 12.102.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:56:56.667 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 00:56:56.688 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 00:56:56.491 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 00:56:56.721 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 00:56:56.737 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 00:56:56.429 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 00:56:56.579 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 00:57:12.125 00:00:11.803 TCP 12.102.0.1:42850 -> 1.101.0.1:3000 11 1507 1 2025-10-03 00:58:13.966 00:00:11.814 TCP 12.102.0.1:55124 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123945, total packets: 1134, avg bps: 259, avg pps: 0, avg bpp: 109 Time window: 2025-10-02 23:54:45 - 2025-10-03 00:58:25 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0031s User: 0.0016s Wall: 0.0028s flows/second: 57525.6 Runtime: 0.0028s