Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 04:59:23.956 00:00:11.817 TCP 12.102.0.1:55288 -> 1.101.0.1:3000 11 1507 1 2025-10-16 04:54:52.096 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:00:25.807 00:00:11.764 TCP 12.102.0.1:43700 -> 1.101.0.1:3000 11 1507 1 2025-10-16 04:55:52.114 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:01:27.612 00:00:11.801 TCP 12.102.0.1:51854 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:02:29.452 00:00:20.703 TCP 12.102.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:03:16.752 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:03:16.775 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:03:16.974 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:03:16.912 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:03:16.564 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:03:16.992 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:03:17.046 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:03:40.202 00:00:12.108 TCP 12.102.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:04:42.355 00:00:11.825 TCP 12.102.0.1:44308 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:05:44.218 00:00:11.806 TCP 12.102.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:01:52.095 00:06:00.022 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:06:46.092 00:00:11.836 TCP 12.102.0.1:48518 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:02:52.116 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:07:47.980 00:00:11.806 TCP 12.102.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:08:17.028 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:08:17.051 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:08:17.140 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:08:17.163 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:08:17.065 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:08:17.082 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:08:17.042 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:08:49.828 00:00:11.777 TCP 12.102.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:09:51.642 00:00:11.806 TCP 12.102.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:10:53.494 00:00:11.766 TCP 12.102.0.1:60146 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:11:55.294 00:00:11.804 TCP 12.102.0.1:53294 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:12:57.138 00:00:11.803 TCP 12.102.0.1:51792 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:13:16.910 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:13:17.128 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:13:17.125 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:13:17.272 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:13:17.117 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:13:17.119 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:13:17.106 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:08:52.097 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:13:58.980 00:00:11.805 TCP 12.102.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:09:52.117 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:15:00.823 00:00:11.800 TCP 12.102.0.1:52288 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:16:02.662 00:00:11.804 TCP 12.102.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:17:04.523 00:00:11.801 TCP 12.102.0.1:35972 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:18:16.909 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:18:16.932 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:18:06.360 00:00:11.825 TCP 12.102.0.1:41852 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:18:17.191 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:18:17.111 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:18:17.277 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:18:17.313 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:18:17.021 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:19:08.222 00:00:11.806 TCP 12.102.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:20:10.079 00:00:11.757 TCP 12.102.0.1:48820 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:15:52.099 00:06:00.025 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:21:11.870 00:00:11.810 TCP 12.102.0.1:46714 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:16:52.118 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:22:13.716 00:00:11.800 TCP 12.102.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:23:17.271 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:23:17.381 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:23:17.477 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:23:17.555 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:23:17.406 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:23:17.165 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:23:17.249 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:23:15.553 00:00:11.808 TCP 12.102.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:24:17.398 00:00:11.804 TCP 12.102.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:25:19.240 00:00:11.761 TCP 12.102.0.1:56962 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:26:21.056 00:00:11.755 TCP 12.102.0.1:45818 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:27:22.843 00:00:11.846 TCP 12.102.0.1:50648 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:22:52.100 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:28:17.450 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:28:17.473 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:28:17.523 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:28:17.538 00:00:00.036 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:28:17.429 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:28:17.507 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:28:17.392 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:28:24.732 00:00:11.809 TCP 12.102.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:23:52.123 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:29:26.578 00:00:11.764 TCP 12.102.0.1:41772 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:30:28.384 00:00:11.810 TCP 12.102.0.1:38048 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:31:30.234 00:00:11.826 TCP 12.102.0.1:38546 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:32:32.101 00:00:11.761 TCP 12.102.0.1:44462 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:33:17.572 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:33:17.595 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:33:17.725 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:33:17.517 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:33:17.674 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:33:17.675 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:33:17.554 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:33:33.898 00:00:11.803 TCP 12.102.0.1:49790 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:34:35.746 00:00:11.803 TCP 12.102.0.1:38664 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:29:52.103 00:06:00.025 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:35:37.585 00:00:12.309 TCP 12.102.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:30:52.124 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:36:39.935 00:00:11.768 TCP 12.102.0.1:56976 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:37:41.747 00:00:11.770 TCP 12.102.0.1:50322 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:38:17.471 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:38:17.493 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:38:17.816 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:38:17.526 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:38:17.615 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:38:17.412 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:38:17.502 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:38:43.550 00:00:11.803 TCP 12.102.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:39:45.394 00:00:11.775 TCP 12.102.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:40:47.188 00:00:11.811 TCP 12.102.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:36:52.105 00:06:00.026 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:41:49.062 00:00:11.797 TCP 12.102.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:37:52.127 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:42:50.900 00:00:16.220 TCP 12.102.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:43:17.661 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:43:17.683 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:43:17.792 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:43:18.102 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:43:17.665 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:43:18.193 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:43:18.060 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:43:57.158 00:00:11.803 TCP 12.102.0.1:56764 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:44:59.002 00:00:11.809 TCP 12.102.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:46:00.845 00:00:11.802 TCP 12.102.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:47:02.684 00:00:11.810 TCP 12.102.0.1:33134 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:48:04.535 00:00:11.765 TCP 12.102.0.1:50386 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:48:18.440 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:48:18.657 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:48:18.698 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:48:18.444 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:48:18.707 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:48:18.301 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:48:18.417 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:43:52.105 00:06:00.027 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:49:06.336 00:00:12.050 TCP 12.102.0.1:40674 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:44:52.128 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:50:08.425 00:00:11.804 TCP 12.102.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:51:10.269 00:00:11.761 TCP 12.102.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:52:12.078 00:00:11.767 TCP 12.102.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:53:17.824 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:53:17.916 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:53:17.873 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:53:17.994 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:53:17.860 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:53:17.969 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:53:17.800 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:53:13.889 00:00:11.805 TCP 12.102.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:54:15.736 00:00:11.803 TCP 12.102.0.1:41426 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:55:17.572 00:00:11.757 TCP 12.102.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:50:52.106 00:06:00.027 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 05:56:19.373 00:00:11.810 TCP 12.102.0.1:34420 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:51:52.129 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 05:57:21.222 00:00:11.804 TCP 12.102.0.1:45562 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:58:18.617 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 05:58:18.900 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 05:58:18.940 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 05:58:19.012 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 05:58:18.943 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 05:58:18.902 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 05:58:18.595 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 05:58:23.086 00:00:11.759 TCP 12.102.0.1:35294 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 120796, total packets: 1079, avg bps: 252, avg pps: 0, avg bpp: 111 Time window: 2025-10-16 04:54:52 - 2025-10-16 05:58:34 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0019s User: 0.0019s Wall: 0.0015s flows/second: 109066.9 Runtime: 0.0015s