Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 20:59:28.872 00:00:11.803 TCP 12.102.0.1:50766 -> 1.101.0.1:3000 11 1507 1 2025-10-09 20:54:49.111 00:06:00.055 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:00:13.845 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:00:13.956 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:00:14.050 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:00:13.948 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:00:13.772 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:00:13.984 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:00:13.822 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:00:30.719 00:00:11.802 TCP 12.102.0.1:48938 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:01:32.558 00:00:11.797 TCP 12.102.0.1:46984 -> 1.101.0.1:3000 11 1507 1 2025-10-09 20:56:49.114 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:02:34.398 00:00:11.802 TCP 12.102.0.1:37374 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:03:36.239 00:00:11.803 TCP 12.102.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:04:38.082 00:00:24.417 TCP 12.102.0.1:47578 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:05:13.865 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:05:13.886 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:05:14.030 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:05:14.153 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:05:14.060 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:05:14.298 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:05:14.027 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:05:52.558 00:00:11.817 TCP 12.102.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:01:49.112 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:06:54.422 00:00:12.147 TCP 12.102.0.1:38634 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:07:56.603 00:00:11.772 TCP 12.102.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:03:49.115 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:08:58.418 00:00:11.809 TCP 12.102.0.1:33754 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:10:14.100 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:10:14.124 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:10:14.215 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:10:14.169 00:00:00.050 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:10:00.262 00:00:11.802 TCP 12.102.0.1:49800 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:10:14.215 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:10:14.149 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:10:13.807 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:11:02.105 00:00:11.807 TCP 12.102.0.1:44052 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:12:03.954 00:00:11.804 TCP 12.102.0.1:52372 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:13:05.802 00:00:11.806 TCP 12.102.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:08:49.114 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:14:07.660 00:00:11.810 TCP 12.102.0.1:39268 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:15:14.036 00:00:00.044 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:15:14.059 00:00:00.043 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:15:14.377 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:15:14.100 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:15:14.082 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:15:14.198 00:00:00.050 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:15:14.051 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:15:09.510 00:00:11.816 TCP 12.102.0.1:33874 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:10:49.116 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:16:11.364 00:00:11.833 TCP 12.102.0.1:40182 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:17:13.237 00:00:11.803 TCP 12.102.0.1:37378 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:18:15.086 00:00:12.327 TCP 12.102.0.1:55082 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:19:17.447 00:00:11.803 TCP 12.102.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:20:14.377 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:20:14.400 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:20:14.881 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:20:14.536 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:20:14.519 00:00:00.013 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:20:14.519 00:00:00.013 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:20:14.508 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:20:19.291 00:00:11.801 TCP 12.102.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:15:49.116 00:06:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:21:21.129 00:00:11.767 TCP 12.102.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:22:22.934 00:00:11.822 TCP 12.102.0.1:59208 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:17:49.118 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:23:24.804 00:00:11.816 TCP 12.102.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:24:26.657 00:00:11.809 TCP 12.102.0.1:58844 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:25:14.361 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:25:14.399 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:25:14.432 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:25:14.398 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:25:14.492 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:25:14.294 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:25:14.339 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:25:28.508 00:00:11.817 TCP 12.102.0.1:42060 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:26:30.363 00:00:11.829 TCP 12.102.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:27:32.232 00:00:11.829 TCP 12.102.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:22:49.117 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:28:34.099 00:00:11.800 TCP 12.102.0.1:58838 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:29:35.939 00:00:11.774 TCP 12.102.0.1:39960 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:24:49.120 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:30:14.615 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:30:14.560 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:30:14.585 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:30:14.605 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:30:14.641 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:30:14.591 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:30:14.593 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:30:37.746 00:00:11.802 TCP 12.102.0.1:40630 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:31:39.586 00:00:11.805 TCP 12.102.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:32:41.427 00:00:11.814 TCP 12.102.0.1:53794 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:33:43.282 00:00:11.803 TCP 12.102.0.1:49568 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:29:49.117 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:34:45.121 00:00:11.814 TCP 12.102.0.1:52898 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:35:14.474 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:35:14.498 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:35:14.515 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:35:14.447 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:35:14.491 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:35:14.739 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:35:14.659 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:35:46.972 00:00:11.807 TCP 12.102.0.1:34216 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:31:49.120 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:36:48.813 00:00:11.806 TCP 12.102.0.1:49708 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:37:50.656 00:00:11.819 TCP 12.102.0.1:56282 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:38:52.512 00:00:11.760 TCP 12.102.0.1:52264 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:39:54.311 00:00:11.756 TCP 12.102.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:40:14.697 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:40:14.720 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:40:14.750 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:40:14.678 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:40:14.741 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:40:14.673 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:40:14.793 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:40:56.106 00:00:11.753 TCP 12.102.0.1:33180 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:36:49.119 00:06:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:41:57.898 00:00:11.799 TCP 12.102.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:42:59.737 00:00:11.816 TCP 12.102.0.1:37218 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:38:49.122 00:06:00.047 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:44:01.590 00:00:11.820 TCP 12.102.0.1:46468 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:45:14.787 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:45:14.811 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:45:14.945 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:45:14.697 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:45:14.925 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:45:14.769 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:45:14.648 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:45:03.453 00:00:12.091 TCP 12.102.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:46:05.588 00:00:11.807 TCP 12.102.0.1:56668 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:47:07.431 00:00:11.814 TCP 12.102.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:48:09.284 00:00:11.804 TCP 12.102.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:43:49.122 00:06:00.050 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:49:11.124 00:00:11.805 TCP 12.102.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:50:14.805 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:50:14.828 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:50:15.041 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:50:14.977 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:50:14.933 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:50:15.024 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:50:14.906 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:50:12.970 00:00:12.236 TCP 12.102.0.1:33308 -> 1.101.0.1:3000 15 1926 1 2025-10-09 21:45:49.127 00:06:00.043 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:51:15.244 00:00:11.801 TCP 12.102.0.1:45552 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:52:17.080 00:00:11.857 TCP 12.102.0.1:52608 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:53:18.982 00:00:11.758 TCP 12.102.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:54:20.778 00:00:11.759 TCP 12.102.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:55:14.982 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-09 21:55:15.006 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-09 21:55:15.213 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 21:55:14.988 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-09 21:55:15.125 00:00:00.051 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-09 21:55:15.135 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-09 21:55:15.010 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-09 21:55:22.574 00:00:12.241 TCP 12.102.0.1:56532 -> 1.101.0.1:3000 15 1926 1 2025-10-09 21:50:49.125 00:06:00.047 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-09 21:56:24.856 00:00:11.800 TCP 12.102.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:57:26.693 00:00:11.813 TCP 12.102.0.1:36070 -> 1.101.0.1:3000 11 1507 1 2025-10-09 21:52:49.129 00:06:00.042 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-09 21:58:28.540 00:00:11.802 TCP 12.102.0.1:48486 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 260, avg pps: 0, avg bpp: 108 Time window: 2025-10-09 20:54:49 - 2025-10-09 21:58:49 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0040s User: 0.0020s Wall: 0.0029s flows/second: 55361.2 Runtime: 0.0029s