Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 02:58:43.923 00:00:11.820 TCP 12.102.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:59:45.780 00:00:11.803 TCP 12.102.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:55:52.068 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:00:47.622 00:00:12.550 TCP 12.102.0.1:40812 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:56:52.084 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:01:50.212 00:00:11.811 TCP 12.102.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:02:52.091 00:00:11.807 TCP 12.102.0.1:54092 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:03:14.631 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:03:14.653 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.433 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.810 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.411 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.748 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.564 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:03:53.937 00:00:11.986 TCP 12.102.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:04:55.964 00:00:11.817 TCP 12.102.0.1:46992 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:05:57.820 00:00:11.763 TCP 12.102.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:06:59.618 00:00:11.808 TCP 12.102.0.1:36382 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:02:52.069 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:08:01.469 00:00:11.803 TCP 12.102.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:08:14.592 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.838 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.727 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.744 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.732 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.720 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.568 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:03:52.086 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:09:03.311 00:00:11.800 TCP 12.102.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:10:05.153 00:00:11.773 TCP 12.102.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:11:06.970 00:00:12.079 TCP 12.102.0.1:53778 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:12:09.094 00:00:12.238 TCP 12.102.0.1:45034 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:13:14.821 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.960 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.781 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.853 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.957 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.938 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.798 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:13:11.373 00:00:11.826 TCP 12.102.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:14:13.251 00:00:11.802 TCP 12.102.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:09:52.072 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:15:15.102 00:00:11.763 TCP 12.102.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:10:52.086 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:16:16.903 00:00:11.805 TCP 12.102.0.1:36832 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:17:18.744 00:00:11.804 TCP 12.102.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:18:15.034 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:18:15.058 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:18:14.675 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:18:15.016 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:18:15.213 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:18:14.963 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:18:14.976 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:18:20.586 00:00:11.806 TCP 12.102.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:19:22.430 00:00:11.821 TCP 12.102.0.1:40008 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:20:24.287 00:00:11.804 TCP 12.102.0.1:32776 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:21:26.127 00:00:12.240 TCP 12.102.0.1:39748 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:16:52.072 00:06:00.022 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:22:28.407 00:00:11.802 TCP 12.102.0.1:54726 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:17:52.088 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:23:14.935 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:23:14.957 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:23:15.017 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:23:15.017 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:23:15.056 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:23:14.817 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:23:14.901 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:23:30.245 00:00:11.778 TCP 12.102.0.1:50890 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:24:32.079 00:00:11.762 TCP 12.102.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:25:33.885 00:00:11.800 TCP 12.102.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:26:35.727 00:00:11.849 TCP 12.102.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:27:37.620 00:00:11.808 TCP 12.102.0.1:59598 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:28:14.734 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:28:15.208 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:28:15.298 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:28:15.053 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:28:15.200 00:00:00.044 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:28:14.950 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:28:14.710 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:28:39.461 00:00:12.113 TCP 12.102.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:23:52.075 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:24:52.093 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:29:41.611 00:00:12.065 TCP 12.102.0.1:36524 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:30:43.722 00:00:11.811 TCP 12.102.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:31:45.560 00:00:11.793 TCP 12.102.0.1:40686 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:32:47.359 00:00:11.783 TCP 12.102.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:33:15.093 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:33:15.115 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:33:14.956 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:33:15.218 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:33:15.215 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:33:15.017 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:33:15.005 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:33:49.182 00:00:11.836 TCP 12.102.0.1:39614 -> 1.101.0.1:3000 12 1559 1 2025-10-16 03:34:51.075 00:00:11.807 TCP 12.102.0.1:46898 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:30:52.078 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:35:52.919 00:00:11.844 TCP 12.102.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:31:52.095 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:36:54.790 00:00:11.814 TCP 12.102.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:37:56.639 00:00:11.828 TCP 12.102.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:38:15.154 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.339 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.403 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.131 00:00:00.047 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.287 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.254 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.130 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:38:58.507 00:00:11.800 TCP 12.102.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:40:00.343 00:00:11.803 TCP 12.102.0.1:40496 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:41:02.182 00:00:11.768 TCP 12.102.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:42:03.985 00:00:11.760 TCP 12.102.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:37:52.079 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:43:15.440 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:43:15.463 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.512 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.324 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.411 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.521 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.175 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:43:05.784 00:00:11.766 TCP 12.102.0.1:35562 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:38:52.095 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:44:07.582 00:00:11.861 TCP 12.102.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:45:09.478 00:00:11.801 TCP 12.102.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:46:11.315 00:00:11.804 TCP 12.102.0.1:59698 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:47:13.158 00:00:11.765 TCP 12.102.0.1:49670 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:48:15.361 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.378 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.393 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.452 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.574 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.351 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.338 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:48:14.959 00:00:11.795 TCP 12.102.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:49:16.793 00:00:11.801 TCP 12.102.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:44:52.080 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:50:18.633 00:00:11.799 TCP 12.102.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:45:52.096 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:51:20.472 00:00:12.200 TCP 12.102.0.1:40958 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:52:22.712 00:00:11.801 TCP 12.102.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:53:15.428 00:00:00.019 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:53:15.451 00:00:00.018 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.585 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.490 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.484 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.701 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.579 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:53:24.553 00:00:11.798 TCP 12.102.0.1:55186 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:54:26.388 00:00:12.234 TCP 12.102.0.1:37614 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:55:28.661 00:00:11.815 TCP 12.102.0.1:47994 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:56:30.514 00:00:11.799 TCP 12.102.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:51:52.081 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:57:32.357 00:00:11.803 TCP 12.102.0.1:47856 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:52:52.097 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:58:15.486 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.603 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.819 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.875 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.599 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.717 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.580 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:58:34.194 00:00:11.755 TCP 12.102.0.1:46442 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 123612, total packets: 1103, avg bps: 261, avg pps: 0, avg bpp: 112 Time window: 2025-10-16 02:55:52 - 2025-10-16 03:58:52 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0023s User: 0.0035s Wall: 0.0021s flows/second: 78193.9 Runtime: 0.0021s