Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 13:59:09.085 00:00:11.811 TCP 12.102.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:55:48.958 00:05:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:00:05.531 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:00:05.673 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:00:05.658 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:00:05.479 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:00:05.589 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:00:05.642 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:00:05.507 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:00:10.935 00:00:11.820 TCP 12.102.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:01:12.788 00:00:11.813 TCP 12.102.0.1:39018 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:02:14.636 00:00:11.762 TCP 12.102.0.1:50488 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:03:16.435 00:00:12.009 TCP 12.102.0.1:35914 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:04:18.487 00:00:11.787 TCP 12.102.0.1:37752 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:05:05.593 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:05:06.051 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:05:06.098 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:05:05.562 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:05:05.510 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:05:05.855 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:05:05.569 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:05:20.311 00:00:11.801 TCP 12.102.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:01:48.958 00:05:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:00:48.997 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-09 14:06:22.161 00:00:11.800 TCP 12.102.0.1:36106 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:07:24.001 00:00:11.798 TCP 12.102.0.1:39892 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:08:25.833 00:00:11.774 TCP 12.102.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:09:27.639 00:00:11.801 TCP 12.102.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:10:05.687 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:10:05.710 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:10:05.897 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:10:05.845 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:10:05.684 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:10:05.695 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:10:05.774 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:10:29.481 00:00:11.802 TCP 12.102.0.1:52092 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:11:31.318 00:00:11.806 TCP 12.102.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:07:48.998 00:05:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 6 426 1 2025-10-09 14:07:48.959 00:05:00.043 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:12:33.162 00:00:11.817 TCP 12.102.0.1:60082 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:13:35.027 00:00:11.799 TCP 12.102.0.1:57786 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:14:36.864 00:00:12.349 TCP 12.102.0.1:56922 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:15:05.901 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:15:05.820 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:15:05.726 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:15:05.706 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:15:05.910 00:00:00.032 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:15:05.922 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:15:05.879 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:15:39.251 00:00:11.760 TCP 12.102.0.1:37680 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:16:41.069 00:00:11.813 TCP 12.102.0.1:43210 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:13:48.961 00:05:00.043 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:17:42.924 00:00:11.819 TCP 12.102.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:13:49.000 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-09 14:18:44.810 00:00:11.764 TCP 12.102.0.1:60144 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:19:46.612 00:00:11.851 TCP 12.102.0.1:55402 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:20:05.910 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:20:05.870 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:20:05.992 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:20:05.777 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:20:05.790 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:20:05.760 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:20:05.886 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:20:48.503 00:00:13.656 TCP 12.102.0.1:47846 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:21:52.195 00:00:11.801 TCP 12.102.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:22:54.058 00:00:11.799 TCP 12.102.0.1:42066 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:19:48.962 00:05:00.069 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:23:55.896 00:00:11.802 TCP 12.102.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:25:06.055 00:00:00.033 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:25:06.037 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:25:05.920 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:25:05.933 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:25:05.906 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:25:06.147 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:25:06.032 00:00:00.033 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:24:57.733 00:00:11.801 TCP 12.102.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:20:49.002 00:06:00.030 TCP 179.10.12.12:58070 -> 179.10.12.10:179 13 809 1 2025-10-09 14:25:59.569 00:00:11.802 TCP 12.102.0.1:45160 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:27:01.410 00:00:11.775 TCP 12.102.0.1:37334 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:28:03.211 00:00:11.814 TCP 12.102.0.1:47544 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:29:05.084 00:00:11.798 TCP 12.102.0.1:55858 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:25:48.964 00:05:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:30:06.243 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:30:06.125 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:30:06.134 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:30:06.281 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:30:06.279 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:30:06.001 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:30:06.220 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:30:06.925 00:00:11.822 TCP 12.102.0.1:46472 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:31:08.782 00:00:11.806 TCP 12.102.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:27:48.967 00:05:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-09 14:32:10.629 00:00:11.814 TCP 12.102.0.1:47098 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:33:12.485 00:00:11.801 TCP 12.102.0.1:36984 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:34:14.326 00:00:11.806 TCP 12.102.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:35:06.171 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:35:06.423 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:35:06.373 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:35:06.336 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:35:06.270 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:35:06.245 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:35:06.148 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:35:16.168 00:00:11.834 TCP 12.102.0.1:49764 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:31:48.966 00:05:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:36:18.041 00:00:11.799 TCP 12.102.0.1:47834 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:37:19.881 00:00:11.757 TCP 12.102.0.1:58262 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:33:48.968 00:05:00.070 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-09 14:38:21.675 00:00:11.769 TCP 12.102.0.1:48522 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:39:23.478 00:00:11.812 TCP 12.102.0.1:34228 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:40:06.316 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:40:06.340 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:40:06.500 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:40:06.480 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:40:06.521 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:40:06.599 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:40:06.527 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:40:25.330 00:00:11.802 TCP 12.102.0.1:36854 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:41:27.168 00:00:11.766 TCP 12.102.0.1:48262 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:37:48.967 00:05:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:42:28.969 00:00:11.801 TCP 12.102.0.1:52632 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:43:30.809 00:00:11.807 TCP 12.102.0.1:43226 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:39:48.969 00:05:00.070 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-09 14:44:32.651 00:00:11.823 TCP 12.102.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:45:06.526 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:45:06.550 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:45:06.651 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:45:06.367 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:45:06.650 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:45:06.560 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:45:06.441 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:45:34.513 00:00:11.808 TCP 12.102.0.1:60978 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:46:36.359 00:00:11.779 TCP 12.102.0.1:46014 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:43:48.967 00:05:00.075 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:47:38.179 00:00:11.804 TCP 12.102.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:48:40.029 00:00:11.808 TCP 12.102.0.1:60890 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:45:48.970 00:05:00.070 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-09 14:49:41.876 00:00:11.809 TCP 12.102.0.1:51022 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:50:06.347 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:50:06.370 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:50:06.409 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:50:06.661 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:50:06.489 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:50:06.591 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:50:06.471 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:50:43.724 00:00:11.799 TCP 12.102.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:51:45.572 00:00:11.804 TCP 12.102.0.1:54194 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:52:47.412 00:00:11.813 TCP 12.102.0.1:42890 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:49:48.969 00:05:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-09 14:53:49.280 00:00:11.814 TCP 12.102.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:55:06.517 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 14:55:06.818 00:00:00.019 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:55:06.557 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 14:54:51.132 00:00:11.834 TCP 12.102.0.1:49898 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:55:06.420 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 14:55:06.777 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 14:55:06.421 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 14:55:06.495 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 14:51:48.971 00:05:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-09 14:55:53.005 00:00:11.777 TCP 12.102.0.1:39550 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:56:54.826 00:00:11.767 TCP 12.102.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:57:56.639 00:00:11.771 TCP 12.102.0.1:43718 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 121873, total packets: 1103, avg bps: 260, avg pps: 0, avg bpp: 110 Time window: 2025-10-09 13:55:48 - 2025-10-09 14:58:08 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0044s User: 0.0017s Wall: 0.0024s flows/second: 68189.7 Runtime: 0.0024s