Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 08:53:52.184 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 08:58:51.971 00:00:11.803 TCP 12.102.0.1:51578 -> 1.101.0.1:3000 11 1507 1 2025-10-16 08:59:53.807 00:00:11.801 TCP 12.102.0.1:57344 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:00:55.644 00:00:11.767 TCP 12.102.0.1:47816 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:01:57.445 00:00:11.803 TCP 12.102.0.1:50130 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:02:59.289 00:00:11.814 TCP 12.102.0.1:58072 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:03:21.703 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:03:21.725 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:03:21.765 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:03:21.770 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:03:21.888 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:03:21.920 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:03:21.812 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:04:01.136 00:00:11.797 TCP 12.102.0.1:55200 -> 1.101.0.1:3000 11 1507 1 2025-10-16 08:59:52.170 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 09:05:02.970 00:00:11.755 TCP 12.102.0.1:54260 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:00:52.186 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 09:06:04.763 00:00:11.764 TCP 12.102.0.1:51360 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:07:06.565 00:00:11.812 TCP 12.102.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:08:08.412 00:00:12.313 TCP 12.102.0.1:51350 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:08:21.781 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:08:21.645 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:08:21.837 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:08:21.730 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:08:21.831 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:08:21.618 00:00:00.017 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:08:21.757 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:09:10.769 00:00:11.772 TCP 12.102.0.1:36054 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:10:12.575 00:00:11.768 TCP 12.102.0.1:49826 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:11:14.382 00:00:12.252 TCP 12.102.0.1:52822 -> 1.101.0.1:3000 15 1926 1 2025-10-16 09:06:52.171 00:06:00.022 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 09:12:16.675 00:00:11.760 TCP 12.102.0.1:55024 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:07:52.188 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 09:13:21.777 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:13:21.881 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:13:21.932 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:13:21.754 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:13:22.069 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:13:22.107 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:13:22.165 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:13:18.475 00:00:11.766 TCP 12.102.0.1:53832 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:14:20.281 00:00:11.849 TCP 12.102.0.1:60388 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:15:22.180 00:00:11.799 TCP 12.102.0.1:34722 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:16:24.031 00:00:12.191 TCP 12.102.0.1:37546 -> 1.101.0.1:3000 15 1926 1 2025-10-16 09:17:26.261 00:00:11.775 TCP 12.102.0.1:55476 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:18:21.904 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:18:21.894 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:18:21.894 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:18:21.881 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:18:22.112 00:00:00.015 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:18:22.045 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:18:21.992 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:18:28.080 00:00:11.802 TCP 12.102.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:13:52.173 00:06:00.023 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 09:19:29.921 00:00:11.787 TCP 12.102.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:14:52.191 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 09:20:31.743 00:00:11.809 TCP 12.102.0.1:41274 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:21:33.591 00:00:12.249 TCP 12.102.0.1:37242 -> 1.101.0.1:3000 15 1926 1 2025-10-16 09:22:35.880 00:00:11.801 TCP 12.102.0.1:37050 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:23:22.337 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:23:22.361 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:23:22.168 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:23:22.326 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:23:22.474 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:23:22.406 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:23:22.289 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:23:37.722 00:00:11.761 TCP 12.102.0.1:40062 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:24:39.521 00:00:11.804 TCP 12.102.0.1:39176 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:20:52.174 00:06:00.023 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 09:25:41.361 00:00:11.818 TCP 12.102.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:26:43.220 00:00:11.760 TCP 12.102.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:21:52.194 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 09:27:45.023 00:00:11.808 TCP 12.102.0.1:54344 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:28:22.257 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:28:22.280 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:28:22.222 00:00:00.037 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:28:22.264 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:28:22.301 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:28:22.317 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:28:22.200 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:28:46.866 00:00:11.772 TCP 12.102.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:29:48.679 00:00:11.809 TCP 12.102.0.1:48492 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:30:50.520 00:00:11.818 TCP 12.102.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:31:52.376 00:00:11.841 TCP 12.102.0.1:52778 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:27:52.174 00:06:00.024 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 09:32:54.256 00:00:11.802 TCP 12.102.0.1:55020 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:33:22.240 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:33:22.490 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:33:22.483 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:33:22.400 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:33:22.361 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:33:22.316 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:33:22.217 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:28:52.195 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 09:33:56.100 00:00:11.825 TCP 12.102.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:34:57.949 00:00:11.815 TCP 12.102.0.1:57590 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:35:59.805 00:00:12.263 TCP 12.102.0.1:34484 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:37:02.106 00:00:11.800 TCP 12.102.0.1:35488 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:38:03.940 00:00:11.809 TCP 12.102.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:38:22.407 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:38:22.579 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:38:22.369 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:38:22.430 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:38:22.575 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:38:22.426 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:38:22.390 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:39:05.789 00:00:11.800 TCP 12.102.0.1:50434 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:34:52.177 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 09:40:07.629 00:00:11.760 TCP 12.102.0.1:40440 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:35:52.195 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 09:41:09.424 00:00:11.815 TCP 12.102.0.1:46136 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:42:11.281 00:00:11.769 TCP 12.102.0.1:39320 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:43:23.001 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:43:13.095 00:00:11.795 TCP 12.102.0.1:38122 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:43:23.024 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:43:22.612 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:43:22.552 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:43:23.029 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:43:22.718 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:43:22.509 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:44:14.930 00:00:11.808 TCP 12.102.0.1:33546 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:45:16.779 00:00:11.801 TCP 12.102.0.1:47734 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:46:18.624 00:00:11.803 TCP 12.102.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:41:52.181 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 09:47:20.470 00:00:11.771 TCP 12.102.0.1:46682 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:42:52.196 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 09:48:22.715 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:48:22.737 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:48:22.766 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:48:22.582 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:48:22.718 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:48:22.759 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:48:22.550 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:48:22.264 00:00:11.763 TCP 12.102.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:49:24.079 00:00:11.759 TCP 12.102.0.1:47820 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:50:25.873 00:00:11.809 TCP 12.102.0.1:32784 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:51:27.715 00:00:11.804 TCP 12.102.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:52:29.558 00:00:11.803 TCP 12.102.0.1:43694 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:53:22.759 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 09:53:22.941 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:53:22.974 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:53:23.003 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:53:22.880 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:53:22.781 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:53:23.001 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:53:31.401 00:00:18.544 TCP 12.102.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:48:52.183 00:06:00.018 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 09:54:39.991 00:00:11.815 TCP 12.102.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:49:52.198 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 09:55:41.855 00:00:11.815 TCP 12.102.0.1:36516 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:56:43.717 00:00:11.800 TCP 12.102.0.1:55796 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:57:45.568 00:00:11.832 TCP 12.102.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:58:22.646 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 09:58:22.767 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 09:58:22.816 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 09:58:22.933 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 09:58:22.949 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 09:58:22.826 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 09:58:22.624 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 Summary: total flows: 159, total bytes: 121192, total packets: 1077, avg bps: 250, avg pps: 0, avg bpp: 112 Time window: 2025-10-16 08:53:52 - 2025-10-16 09:58:22 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0038s User: 0.0019s Wall: 0.0022s flows/second: 71848.1 Runtime: 0.0022s