Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 13:59:24.740 00:00:11.773 TCP 12.102.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-10-13 13:54:50.830 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:00:26.548 00:00:11.818 TCP 12.102.0.1:59048 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:01:28.406 00:00:11.804 TCP 12.102.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:02:01.136 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:02:01.159 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:02:00.848 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:02:01.086 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:02:00.932 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:02:01.063 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:02:00.694 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:02:30.243 00:00:11.803 TCP 12.102.0.1:49004 -> 1.101.0.1:3000 11 1507 1 2025-10-13 13:57:50.870 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-13 14:03:32.094 00:00:11.806 TCP 12.102.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:04:33.939 00:00:11.815 TCP 12.102.0.1:39682 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:05:35.798 00:00:11.800 TCP 12.102.0.1:33406 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:06:37.641 00:00:11.806 TCP 12.102.0.1:41634 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:01:50.833 00:06:00.041 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:07:00.791 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:07:00.815 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:07:01.229 00:00:00.049 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:07:01.260 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:07:01.022 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:07:01.137 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:07:01.326 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:07:39.487 00:00:11.800 TCP 12.102.0.1:41790 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:08:41.326 00:00:11.804 TCP 12.102.0.1:55060 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:04:50.870 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-13 14:09:43.167 00:00:11.804 TCP 12.102.0.1:43128 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:10:45.010 00:00:12.498 TCP 12.102.0.1:36302 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:11:47.547 00:00:11.802 TCP 12.102.0.1:47650 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:12:01.217 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:12:01.470 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:12:01.281 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:12:01.304 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:12:01.061 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:12:01.010 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:12:01.193 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:12:49.391 00:00:11.765 TCP 12.102.0.1:60094 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:08:50.835 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:13:51.191 00:00:11.803 TCP 12.102.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:14:53.056 00:00:11.806 TCP 12.102.0.1:58584 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:15:54.898 00:00:11.759 TCP 12.102.0.1:50922 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:11:50.873 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-13 14:17:01.511 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:17:01.765 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:17:01.332 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:17:01.802 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:17:01.595 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:17:01.328 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:17:01.490 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:16:56.692 00:00:11.802 TCP 12.102.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:17:58.532 00:00:11.802 TCP 12.102.0.1:44514 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:19:00.377 00:00:11.841 TCP 12.102.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:20:02.255 00:00:11.801 TCP 12.102.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:15:50.836 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:21:04.093 00:00:11.815 TCP 12.102.0.1:55980 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:22:01.688 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:22:01.710 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:22:01.557 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:22:01.767 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:22:01.552 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:22:01.565 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:22:01.633 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:22:05.951 00:00:11.807 TCP 12.102.0.1:60224 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:23:07.793 00:00:11.755 TCP 12.102.0.1:53108 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:18:50.874 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-13 14:24:09.590 00:00:12.147 TCP 12.102.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:25:11.783 00:00:11.804 TCP 12.102.0.1:44178 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:26:13.626 00:00:11.808 TCP 12.102.0.1:57734 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:27:01.576 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:27:01.702 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:27:01.677 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:27:01.492 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:27:01.411 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:27:01.813 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:27:01.469 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:27:15.478 00:00:11.814 TCP 12.102.0.1:39848 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:22:50.838 00:06:00.041 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:28:17.328 00:00:11.796 TCP 12.102.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:29:19.167 00:00:11.798 TCP 12.102.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:30:21.005 00:00:11.798 TCP 12.102.0.1:49082 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:25:50.876 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-13 14:31:22.843 00:00:11.763 TCP 12.102.0.1:40786 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:32:01.589 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:32:01.748 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:32:01.717 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:32:01.685 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:32:01.839 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:32:01.769 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:32:01.568 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:32:24.648 00:00:11.809 TCP 12.102.0.1:60926 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:33:26.491 00:00:11.780 TCP 12.102.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:34:28.312 00:00:11.810 TCP 12.102.0.1:49040 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:29:50.840 00:06:00.040 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:35:30.159 00:00:11.805 TCP 12.102.0.1:47854 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:36:32.008 00:00:12.192 TCP 12.102.0.1:41570 -> 1.101.0.1:3000 15 1926 1 2025-10-13 14:37:01.724 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:37:01.748 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:37:01.795 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:37:01.891 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:37:01.697 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:37:01.800 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:37:01.667 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:37:34.238 00:00:11.798 TCP 12.102.0.1:39494 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:32:50.877 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-13 14:38:36.080 00:00:11.798 TCP 12.102.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:39:37.916 00:00:11.777 TCP 12.102.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:40:39.733 00:00:11.795 TCP 12.102.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:36:50.842 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:41:41.569 00:00:12.240 TCP 12.102.0.1:58240 -> 1.101.0.1:3000 15 1926 1 2025-10-13 14:42:01.694 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:42:01.854 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:42:01.940 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:42:01.905 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:42:02.002 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:42:02.025 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:42:02.023 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:42:43.850 00:00:11.804 TCP 12.102.0.1:60924 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:43:45.708 00:00:11.778 TCP 12.102.0.1:38386 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:39:50.880 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-13 14:44:47.525 00:00:11.806 TCP 12.102.0.1:54854 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:45:49.370 00:00:11.811 TCP 12.102.0.1:33240 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:47:01.813 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:47:01.836 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:47:01.971 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:47:01.909 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:47:01.858 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:47:01.839 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:47:02.107 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:46:51.218 00:00:11.801 TCP 12.102.0.1:34956 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:47:53.075 00:00:11.793 TCP 12.102.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:43:50.842 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:48:54.907 00:00:11.794 TCP 12.102.0.1:53700 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:49:56.739 00:00:12.028 TCP 12.102.0.1:46810 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:50:58.807 00:00:11.808 TCP 12.102.0.1:49898 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:46:50.880 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-13 14:52:01.809 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:52:02.204 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:52:02.227 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:52:02.071 00:00:00.017 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:52:02.265 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:52:02.227 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:52:02.141 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:52:00.655 00:00:11.819 TCP 12.102.0.1:45410 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:53:02.512 00:00:11.822 TCP 12.102.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:54:04.377 00:00:11.814 TCP 12.102.0.1:34674 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:55:06.231 00:00:11.804 TCP 12.102.0.1:36772 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:50:50.842 00:06:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 14:56:08.082 00:00:11.759 TCP 12.102.0.1:51158 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:57:01.955 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 14:57:01.942 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 14:57:01.933 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 14:57:02.013 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:57:02.081 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 14:57:02.291 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 14:57:02.171 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 14:57:09.881 00:00:11.803 TCP 12.102.0.1:59084 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:58:11.727 00:00:11.800 TCP 12.102.0.1:39242 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:53:50.884 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 Summary: total flows: 160, total bytes: 121634, total packets: 1087, avg bps: 249, avg pps: 0, avg bpp: 111 Time window: 2025-10-13 13:54:50 - 2025-10-13 14:59:50 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0045s User: 0.0000s Wall: 0.0020s flows/second: 80245.0 Runtime: 0.0020s