Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 22:58:44.035 00:00:11.821 TCP 12.102.0.1:54672 -> 1.101.0.1:3000 11 1507 1 2025-10-13 22:59:45.898 00:00:11.796 TCP 12.102.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:00:47.736 00:00:11.802 TCP 12.102.0.1:51898 -> 1.101.0.1:3000 11 1507 1 2025-10-13 22:57:50.992 00:05:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-13 23:01:49.575 00:00:11.803 TCP 12.102.0.1:36662 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:02:11.667 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:02:11.792 00:00:00.017 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:02:11.882 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:02:11.646 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:02:12.138 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:02:12.006 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:02:12.091 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:02:51.417 00:00:11.813 TCP 12.102.0.1:59138 -> 1.101.0.1:3000 11 1507 1 2025-10-13 22:59:50.990 00:05:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-13 23:03:53.263 00:00:11.799 TCP 12.102.0.1:38976 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:04:55.104 00:00:11.807 TCP 12.102.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:05:56.948 00:00:12.238 TCP 12.102.0.1:40676 -> 1.101.0.1:3000 15 1926 1 2025-10-13 23:07:11.909 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:06:59.223 00:00:11.819 TCP 12.102.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:07:11.932 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:07:11.973 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:07:11.861 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:07:11.781 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:07:11.842 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:07:11.978 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:03:50.993 00:05:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-13 23:08:01.079 00:00:11.802 TCP 12.102.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:09:02.921 00:00:12.880 TCP 12.102.0.1:60458 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:05:50.992 00:05:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-13 23:10:05.840 00:00:11.767 TCP 12.102.0.1:52764 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:11:07.649 00:00:11.823 TCP 12.102.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:12:12.178 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:12:12.495 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:12:12.319 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:12:12.365 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:12:12.459 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:12:12.257 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:12:12.156 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:12:09.510 00:00:11.801 TCP 12.102.0.1:46324 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:13:11.359 00:00:11.810 TCP 12.102.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:09:50.995 00:05:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-13 23:14:13.208 00:00:11.764 TCP 12.102.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:15:15.021 00:00:11.807 TCP 12.102.0.1:39674 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:11:50.992 00:05:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-13 23:16:16.867 00:00:11.756 TCP 12.102.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:17:12.431 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:17:12.138 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:17:12.287 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:17:12.526 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:17:12.262 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:17:12.117 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:17:12.408 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:17:18.666 00:00:11.808 TCP 12.102.0.1:39962 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:18:20.528 00:00:11.805 TCP 12.102.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:19:22.376 00:00:11.766 TCP 12.102.0.1:45400 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:15:50.996 00:05:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-13 23:20:24.178 00:00:11.772 TCP 12.102.0.1:40842 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:21:25.988 00:00:11.826 TCP 12.102.0.1:59360 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:17:50.994 00:05:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-13 23:22:12.244 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:22:12.268 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:22:12.448 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:22:12.354 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:22:12.344 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:22:12.391 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:22:12.221 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:22:27.855 00:00:11.810 TCP 12.102.0.1:56194 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:21:50.997 00:01:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 4 246 1 2025-10-13 23:23:29.699 00:00:11.813 TCP 12.102.0.1:41724 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:24:31.545 00:00:11.810 TCP 12.102.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:25:33.395 00:00:11.805 TCP 12.102.0.1:54014 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:26:35.234 00:00:11.775 TCP 12.102.0.1:34876 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:27:12.475 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:27:12.566 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:27:12.605 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:27:12.496 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:27:12.308 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:27:12.374 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:27:12.452 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:23:50.999 00:05:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 11 667 1 2025-10-13 23:27:37.066 00:00:11.816 TCP 12.102.0.1:46104 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:23:50.995 00:05:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-13 23:28:38.918 00:00:11.821 TCP 12.102.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:29:40.775 00:00:11.762 TCP 12.102.0.1:36236 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:30:42.576 00:00:11.805 TCP 12.102.0.1:45624 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:31:44.417 00:00:12.232 TCP 12.102.0.1:48150 -> 1.101.0.1:3000 15 1926 1 2025-10-13 23:32:12.520 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:32:12.639 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:32:12.722 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:32:12.543 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:32:12.574 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:32:12.335 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:32:12.496 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:32:46.688 00:00:11.806 TCP 12.102.0.1:40170 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:28:51.076 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 13 809 1 2025-10-13 23:29:51.000 00:05:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-13 23:33:48.538 00:00:11.767 TCP 12.102.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:34:50.343 00:00:11.798 TCP 12.102.0.1:47270 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:35:52.181 00:00:11.777 TCP 12.102.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:36:54.006 00:00:11.774 TCP 12.102.0.1:60672 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:37:12.622 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:37:12.662 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:37:12.514 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:37:12.630 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:37:12.477 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:37:12.744 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:37:12.598 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:37:55.813 00:00:11.805 TCP 12.102.0.1:53822 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:38:57.655 00:00:11.906 TCP 12.102.0.1:34738 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:39:59.600 00:00:11.800 TCP 12.102.0.1:50070 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:35:51.004 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 23:35:51.000 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 23:41:01.440 00:00:12.297 TCP 12.102.0.1:60720 -> 1.101.0.1:3000 15 1926 1 2025-10-13 23:42:03.779 00:00:11.800 TCP 12.102.0.1:33752 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:42:12.711 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:42:12.706 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:42:12.736 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:42:12.756 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:42:12.581 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:42:12.817 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:42:12.690 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:43:05.626 00:00:11.807 TCP 12.102.0.1:36928 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:44:07.472 00:00:11.811 TCP 12.102.0.1:44420 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:45:09.325 00:00:11.804 TCP 12.102.0.1:32990 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:46:11.170 00:00:11.804 TCP 12.102.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:47:12.865 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:47:12.887 00:00:00.033 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:47:12.660 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:47:12.857 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:47:12.903 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:47:12.850 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:47:12.827 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:47:13.011 00:00:11.798 TCP 12.102.0.1:43470 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:42:51.005 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 23:42:51.002 00:06:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 23:48:14.850 00:00:11.803 TCP 12.102.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:49:16.690 00:00:11.766 TCP 12.102.0.1:46258 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:50:18.495 00:00:11.802 TCP 12.102.0.1:42850 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:51:20.338 00:00:12.292 TCP 12.102.0.1:50782 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:52:12.676 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:52:12.699 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:52:13.082 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:52:12.735 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:52:12.729 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:52:12.823 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:52:13.026 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:52:22.666 00:00:11.815 TCP 12.102.0.1:51326 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:53:24.515 00:00:11.764 TCP 12.102.0.1:43736 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:54:26.318 00:00:11.851 TCP 12.102.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:49:51.030 00:06:00.055 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 23:49:51.030 00:05:00.050 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-13 23:55:28.215 00:00:11.804 TCP 12.102.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:56:30.072 00:00:11.806 TCP 12.102.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:57:13.339 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 23:57:13.573 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:57:12.941 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 23:57:13.056 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 23:57:13.450 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 23:57:13.559 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 23:57:13.317 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 23:57:31.927 00:00:11.813 TCP 12.102.0.1:36428 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:58:33.778 00:00:11.803 TCP 12.102.0.1:33016 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 125483, total packets: 1143, avg bps: 274, avg pps: 0, avg bpp: 109 Time window: 2025-10-13 22:57:50 - 2025-10-13 23:58:45 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0042s User: 0.0011s Wall: 0.0022s flows/second: 73203.8 Runtime: 0.0022s