Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 17:58:49.093 00:00:11.799 TCP 12.102.0.1:51294 -> 1.101.0.1:3000 11 1507 1 2025-10-09 17:54:49.063 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 17:59:50.934 00:00:11.776 TCP 12.102.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:00:10.070 00:00:00.039 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:00:10.185 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:00:10.393 00:00:00.017 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:00:10.493 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:00:10.347 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:00:10.291 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:00:10.048 00:00:00.039 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:00:52.748 00:00:11.762 TCP 12.102.0.1:53424 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:01:54.548 00:00:11.805 TCP 12.102.0.1:42318 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:02:56.392 00:00:11.809 TCP 12.102.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:03:58.238 00:00:11.766 TCP 12.102.0.1:40006 -> 1.101.0.1:3000 11 1507 1 2025-10-09 17:59:49.062 00:06:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 18:05:10.275 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:05:10.297 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:05:10.425 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:05:10.456 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:05:10.415 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:05:10.335 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:05:10.391 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:05:00.062 00:00:12.193 TCP 12.102.0.1:50688 -> 1.101.0.1:3000 15 1926 1 2025-10-09 18:06:02.295 00:00:11.757 TCP 12.102.0.1:38024 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:01:49.064 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 18:07:04.093 00:00:11.812 TCP 12.102.0.1:33708 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:08:05.946 00:00:11.760 TCP 12.102.0.1:54130 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:09:07.743 00:00:11.822 TCP 12.102.0.1:38212 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:10:10.414 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:10:10.553 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:10:10.624 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:10:10.442 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:10:10.742 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:10:10.623 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:10:10.391 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:10:09.603 00:00:11.916 TCP 12.102.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:11:11.555 00:00:11.800 TCP 12.102.0.1:45058 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:06:49.064 00:06:00.060 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 18:12:13.394 00:00:11.760 TCP 12.102.0.1:50528 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:13:15.194 00:00:12.395 TCP 12.102.0.1:47688 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:08:49.067 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 18:14:17.625 00:00:11.771 TCP 12.102.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:15:10.592 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:15:10.614 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:15:10.490 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:15:10.766 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:15:10.364 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:15:10.607 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:15:10.621 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:15:19.455 00:00:11.770 TCP 12.102.0.1:53022 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:16:21.271 00:00:11.811 TCP 12.102.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:17:23.120 00:00:11.774 TCP 12.102.0.1:44190 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:18:24.928 00:00:11.819 TCP 12.102.0.1:38190 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:13:49.064 00:06:00.060 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 18:19:26.808 00:00:11.805 TCP 12.102.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:20:10.744 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:20:10.743 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:20:10.687 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:20:10.846 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:20:10.935 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:20:10.818 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:20:10.722 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:20:28.651 00:00:11.820 TCP 12.102.0.1:38700 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:15:49.068 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 18:21:30.506 00:00:12.308 TCP 12.102.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:22:32.853 00:00:11.802 TCP 12.102.0.1:56042 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:23:34.694 00:00:11.808 TCP 12.102.0.1:55462 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:24:36.538 00:00:11.799 TCP 12.102.0.1:52166 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:25:10.839 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:25:10.861 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:25:10.918 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:25:10.940 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:25:10.834 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:25:10.735 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:25:10.633 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:20:49.069 00:06:00.058 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 18:25:38.380 00:00:11.807 TCP 12.102.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:26:40.226 00:00:11.803 TCP 12.102.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:22:49.071 00:06:00.053 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 18:27:42.084 00:00:11.828 TCP 12.102.0.1:54618 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:28:43.954 00:00:11.804 TCP 12.102.0.1:53548 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:29:45.803 00:00:11.813 TCP 12.102.0.1:40054 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:30:11.138 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:30:11.161 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:30:10.852 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:30:11.124 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:30:11.001 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:30:10.926 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:30:11.068 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:30:47.651 00:00:11.816 TCP 12.102.0.1:53348 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:31:49.507 00:00:11.801 TCP 12.102.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:27:49.072 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 18:32:51.352 00:00:11.818 TCP 12.102.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:33:53.208 00:00:11.773 TCP 12.102.0.1:48566 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:29:49.074 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 18:34:55.028 00:00:11.852 TCP 12.102.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:35:10.993 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:35:11.017 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:35:11.145 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:35:11.146 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:35:11.104 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:35:10.916 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:35:10.973 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:35:56.920 00:00:11.843 TCP 12.102.0.1:33218 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:36:58.810 00:00:11.800 TCP 12.102.0.1:60756 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:38:00.653 00:00:11.821 TCP 12.102.0.1:43964 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:39:02.509 00:00:11.803 TCP 12.102.0.1:45268 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:34:49.072 00:06:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 18:40:11.115 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:40:11.126 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:40:11.247 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:40:10.921 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:40:11.007 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:40:11.081 00:00:00.044 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:40:11.093 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:40:04.353 00:00:11.814 TCP 12.102.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:41:06.203 00:00:11.798 TCP 12.102.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:36:49.075 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 18:42:08.071 00:00:11.763 TCP 12.102.0.1:38238 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:43:09.871 00:00:11.804 TCP 12.102.0.1:55488 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:44:11.715 00:00:11.989 TCP 12.102.0.1:54410 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:45:11.192 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:45:11.214 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:45:11.146 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:45:11.277 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:45:11.316 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:45:11.187 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:45:11.045 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:45:13.741 00:00:11.804 TCP 12.102.0.1:33844 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:46:15.581 00:00:11.806 TCP 12.102.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:41:49.074 00:06:00.060 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 18:47:17.425 00:00:17.884 TCP 12.102.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:48:25.354 00:00:11.810 TCP 12.102.0.1:54878 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:43:49.078 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 18:49:27.223 00:00:11.813 TCP 12.102.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:50:11.403 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:50:11.426 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:50:11.444 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:50:11.593 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:50:11.348 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:50:11.260 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:50:11.320 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:50:29.093 00:00:11.808 TCP 12.102.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:51:30.941 00:00:11.814 TCP 12.102.0.1:39386 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:52:32.795 00:00:11.838 TCP 12.102.0.1:47954 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:53:34.668 00:00:11.815 TCP 12.102.0.1:37988 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:48:49.081 00:06:00.056 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 18:54:36.522 00:00:11.852 TCP 12.102.0.1:49056 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:55:11.475 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 18:55:11.497 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 18:55:11.397 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 18:55:11.481 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 18:55:11.286 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 18:55:11.488 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 18:55:11.469 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 18:55:38.415 00:00:11.806 TCP 12.102.0.1:58940 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:50:49.084 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 18:56:40.264 00:00:11.797 TCP 12.102.0.1:48712 -> 1.101.0.1:3000 11 1507 1 2025-10-09 18:57:42.099 00:00:11.799 TCP 12.102.0.1:41100 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 261, avg pps: 0, avg bpp: 109 Time window: 2025-10-09 17:54:49 - 2025-10-09 18:57:53 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0039s User: 0.0013s Wall: 0.0021s flows/second: 74297.5 Runtime: 0.0022s