Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 01:53:52.068 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 01:58:56.634 00:00:11.759 TCP 12.102.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:59:58.436 00:00:11.756 TCP 12.102.0.1:46482 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:01:00.230 00:00:11.810 TCP 12.102.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:02:02.084 00:00:11.796 TCP 12.102.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:03:13.451 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.465 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.271 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.550 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:03:03.919 00:00:11.782 TCP 12.102.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:03:13.628 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.400 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.430 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:04:05.741 00:00:11.764 TCP 12.102.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:59:52.049 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:05:07.547 00:00:11.812 TCP 12.102.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:00:52.075 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:06:09.404 00:00:11.805 TCP 12.102.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:07:11.249 00:00:11.814 TCP 12.102.0.1:38322 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:08:14.025 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:08:14.049 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.717 00:00:00.039 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:08:14.132 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:08:14.035 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.696 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.997 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.104 00:00:11.762 TCP 12.102.0.1:57386 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:09:14.903 00:00:11.822 TCP 12.102.0.1:34802 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:10:16.765 00:00:11.812 TCP 12.102.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:11:18.614 00:00:11.778 TCP 12.102.0.1:34928 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:06:52.050 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:12:20.424 00:00:11.766 TCP 12.102.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:07:52.074 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:13:13.417 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:13:13.439 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.762 00:00:00.017 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.583 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.360 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.682 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.733 00:00:00.029 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:13:22.236 00:00:11.800 TCP 12.102.0.1:56534 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:14:24.085 00:00:11.798 TCP 12.102.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:15:25.924 00:00:11.833 TCP 12.102.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:16:27.801 00:00:11.807 TCP 12.102.0.1:52730 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:17:29.649 00:00:11.817 TCP 12.102.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:18:13.771 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.802 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:18:14.003 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.897 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.906 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.779 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.749 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:18:31.504 00:00:11.800 TCP 12.102.0.1:46964 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:13:52.051 00:06:00.027 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:19:33.347 00:00:11.802 TCP 12.102.0.1:36198 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:14:52.075 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:20:35.190 00:00:11.802 TCP 12.102.0.1:44818 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:21:37.028 00:00:11.805 TCP 12.102.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:22:38.870 00:00:11.820 TCP 12.102.0.1:44158 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:23:13.641 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.593 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.795 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.854 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.871 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.948 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.618 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:23:40.726 00:00:11.806 TCP 12.102.0.1:51652 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:24:42.569 00:00:11.855 TCP 12.102.0.1:46564 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:25:44.464 00:00:11.795 TCP 12.102.0.1:58950 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:20:52.052 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:21:52.077 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:26:46.302 00:00:11.760 TCP 12.102.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:27:48.103 00:00:11.804 TCP 12.102.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:28:13.941 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.236 00:00:00.042 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:28:13.887 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.282 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.169 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.140 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:28:13.918 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:28:49.945 00:00:11.814 TCP 12.102.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:29:51.791 00:00:11.769 TCP 12.102.0.1:37774 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:30:53.599 00:00:11.799 TCP 12.102.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:31:55.445 00:00:11.759 TCP 12.102.0.1:33750 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:27:52.056 00:06:00.026 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:32:57.251 00:00:11.805 TCP 12.102.0.1:53874 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:33:13.962 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.146 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.278 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:33:13.838 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.155 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:33:13.960 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:33:13.940 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:28:52.079 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:33:59.095 00:00:11.805 TCP 12.102.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:35:00.938 00:00:12.199 TCP 12.102.0.1:39934 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:36:03.179 00:00:11.809 TCP 12.102.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:37:05.039 00:00:11.755 TCP 12.102.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:38:14.167 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:38:14.191 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.133 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.256 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.016 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.258 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:38:13.996 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:38:06.830 00:00:11.813 TCP 12.102.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:39:08.686 00:00:11.808 TCP 12.102.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:34:52.059 00:06:00.025 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:40:10.538 00:00:11.807 TCP 12.102.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:35:52.082 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:41:12.386 00:00:11.816 TCP 12.102.0.1:33584 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:42:14.239 00:00:11.855 TCP 12.102.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:43:14.149 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:43:14.172 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.149 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.085 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.200 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.202 00:00:00.045 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:43:13.951 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:43:16.135 00:00:11.810 TCP 12.102.0.1:51854 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:44:17.985 00:00:11.805 TCP 12.102.0.1:49938 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:45:19.825 00:00:11.804 TCP 12.102.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:46:21.672 00:00:11.803 TCP 12.102.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:41:52.063 00:06:00.023 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:47:23.514 00:00:11.918 TCP 12.102.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:42:52.082 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:48:14.071 00:00:00.042 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.582 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.490 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.492 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.199 00:00:00.052 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.199 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.048 00:00:00.042 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:48:25.474 00:00:11.797 TCP 12.102.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:49:27.310 00:00:11.805 TCP 12.102.0.1:44494 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:50:29.167 00:00:11.757 TCP 12.102.0.1:45220 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:51:30.964 00:00:11.808 TCP 12.102.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:52:32.819 00:00:11.804 TCP 12.102.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:53:14.352 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:53:14.374 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.429 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.733 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.576 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.664 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.614 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:53:34.661 00:00:11.821 TCP 12.102.0.1:51138 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:48:52.064 00:06:00.022 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:54:36.521 00:00:11.820 TCP 12.102.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:49:52.083 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:55:38.415 00:00:11.807 TCP 12.102.0.1:55536 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:56:40.256 00:00:11.771 TCP 12.102.0.1:52450 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:57:42.082 00:00:11.803 TCP 12.102.0.1:58756 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:58:14.324 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:58:14.346 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.660 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.479 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.548 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.564 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.443 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 159, total bytes: 119935, total packets: 1065, avg bps: 248, avg pps: 0, avg bpp: 112 Time window: 2025-10-16 01:53:52 - 2025-10-16 02:58:14 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0039s User: 0.0000s Wall: 0.0015s flows/second: 105705.2 Runtime: 0.0015s