Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 13:58:44.030 00:00:11.774 TCP 12.102.0.1:35034 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:59:07.830 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:59:07.854 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:59:07.841 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:59:07.836 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:59:07.942 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:59:07.994 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:59:07.867 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:59:45.851 00:00:11.776 TCP 12.102.0.1:49714 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:00:47.664 00:00:11.768 TCP 12.102.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:01:49.470 00:00:11.814 TCP 12.102.0.1:34406 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:58:47.911 00:05:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:02:51.327 00:00:11.811 TCP 12.102.0.1:55446 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:59:47.912 00:05:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:03:53.179 00:00:11.795 TCP 12.102.0.1:52726 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:04:08.566 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:04:08.589 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:04:08.720 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:04:08.643 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:04:08.685 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:04:08.700 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:04:08.531 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:04:55.017 00:00:11.799 TCP 12.102.0.1:40068 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:05:56.854 00:00:11.798 TCP 12.102.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:06:58.688 00:00:11.806 TCP 12.102.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:08:00.529 00:00:11.800 TCP 12.102.0.1:48650 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:04:47.910 00:05:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:09:07.668 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:09:07.691 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:09:08.060 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:09:07.904 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:09:07.792 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:09:07.699 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:09:07.797 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:09:02.370 00:00:11.782 TCP 12.102.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:05:47.912 00:05:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:10:04.192 00:00:11.799 TCP 12.102.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:11:06.037 00:00:11.802 TCP 12.102.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:12:07.885 00:00:11.809 TCP 12.102.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:13:09.734 00:00:11.811 TCP 12.102.0.1:37310 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:14:08.007 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:14:08.294 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:14:08.275 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:14:08.007 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:14:08.131 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:14:08.163 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:14:07.984 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:14:11.582 00:00:12.301 TCP 12.102.0.1:54328 -> 1.101.0.1:3000 15 1926 1 2025-10-07 14:10:47.912 00:05:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:15:13.922 00:00:11.820 TCP 12.102.0.1:51146 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:11:47.916 00:05:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:16:15.777 00:00:11.811 TCP 12.102.0.1:52544 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:17:17.625 00:00:11.853 TCP 12.102.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:18:19.517 00:00:11.804 TCP 12.102.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:19:07.985 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:19:08.192 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:19:08.117 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:19:08.081 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:19:08.121 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:19:08.057 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:19:07.963 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:19:21.354 00:00:12.260 TCP 12.102.0.1:58654 -> 1.101.0.1:3000 15 1926 1 2025-10-07 14:20:23.650 00:00:11.765 TCP 12.102.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:16:47.914 00:05:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:21:25.455 00:00:11.800 TCP 12.102.0.1:41762 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:17:47.918 00:05:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:22:27.296 00:00:11.796 TCP 12.102.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:23:29.165 00:00:11.800 TCP 12.102.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:24:08.511 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:24:08.235 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:24:08.230 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:24:08.166 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:24:08.224 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:24:08.265 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:24:08.207 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:24:31.001 00:00:11.800 TCP 12.102.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:25:32.840 00:00:12.285 TCP 12.102.0.1:46196 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:22:47.916 00:05:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:26:35.191 00:00:11.811 TCP 12.102.0.1:41236 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:27:37.056 00:00:11.811 TCP 12.102.0.1:51392 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:23:47.919 00:05:00.188 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:28:38.907 00:00:11.847 TCP 12.102.0.1:54244 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:29:08.299 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:29:08.429 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:29:08.483 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:29:08.398 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:29:08.363 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:29:08.209 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:29:08.276 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:29:40.800 00:00:11.774 TCP 12.102.0.1:34780 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:30:42.617 00:00:11.801 TCP 12.102.0.1:49984 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:31:44.466 00:00:11.799 TCP 12.102.0.1:59320 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:28:47.926 00:05:00.185 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:32:46.307 00:00:11.806 TCP 12.102.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:29:47.929 00:05:00.180 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:33:48.151 00:00:11.805 TCP 12.102.0.1:39094 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:34:08.781 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:34:08.760 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:34:08.536 00:00:00.029 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:34:08.798 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:34:08.968 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:34:08.788 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:34:08.759 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:34:49.994 00:00:11.814 TCP 12.102.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:35:51.843 00:00:11.808 TCP 12.102.0.1:32856 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:36:53.686 00:00:11.809 TCP 12.102.0.1:54268 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:37:55.533 00:00:11.808 TCP 12.102.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:34:47.926 00:05:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:39:08.609 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:39:08.632 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:39:08.368 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:39:08.512 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:39:08.406 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:39:08.198 00:00:00.051 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:38:57.374 00:00:11.812 TCP 12.102.0.1:43236 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:39:08.381 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:35:47.929 00:05:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:39:59.229 00:00:11.806 TCP 12.102.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:41:01.082 00:00:11.810 TCP 12.102.0.1:60008 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:42:02.964 00:00:11.807 TCP 12.102.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:43:04.802 00:00:11.763 TCP 12.102.0.1:42042 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:44:08.636 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:44:08.616 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:44:08.590 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:44:08.650 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:44:08.665 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:44:08.673 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:44:08.614 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:44:06.603 00:00:11.855 TCP 12.102.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:40:47.926 00:05:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:45:08.496 00:00:11.803 TCP 12.102.0.1:42662 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:41:47.929 00:05:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:46:10.348 00:00:11.800 TCP 12.102.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:47:12.186 00:00:12.464 TCP 12.102.0.1:35730 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:48:14.683 00:00:11.790 TCP 12.102.0.1:42842 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:49:08.721 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:49:08.743 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:49:08.652 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:49:08.823 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:49:08.738 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:49:08.877 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:49:08.600 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:49:16.504 00:00:12.193 TCP 12.102.0.1:58362 -> 1.101.0.1:3000 15 1926 1 2025-10-07 14:50:18.736 00:00:11.799 TCP 12.102.0.1:59266 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:46:47.928 00:05:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:51:20.569 00:00:11.805 TCP 12.102.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:47:47.930 00:05:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:52:22.409 00:00:11.798 TCP 12.102.0.1:52652 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:53:24.243 00:00:11.804 TCP 12.102.0.1:38136 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:54:08.781 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 14:54:08.805 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 14:54:08.757 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 14:54:08.796 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 14:54:08.897 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 14:54:08.931 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 14:54:08.812 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 14:54:26.090 00:00:11.802 TCP 12.102.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:55:27.928 00:00:11.814 TCP 12.102.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:56:29.780 00:00:11.807 TCP 12.102.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:52:47.928 00:05:00.187 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 14:57:31.621 00:00:11.802 TCP 12.102.0.1:55572 -> 1.101.0.1:3000 11 1507 1 2025-10-07 14:53:47.930 00:05:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 14:58:33.455 00:00:11.839 TCP 12.102.0.1:38860 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 126098, total packets: 1153, avg bps: 279, avg pps: 0, avg bpp: 109 Time window: 2025-10-07 13:58:44 - 2025-10-07 14:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0008s Wall: 0.0016s flows/second: 101000.4 Runtime: 0.0016s