Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 09:58:47.446 00:00:11.761 TCP 12.102.0.1:53420 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:59:49.256 00:00:11.767 TCP 12.102.0.1:43506 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:55:52.185 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:00:51.071 00:00:11.806 TCP 12.102.0.1:52434 -> 1.101.0.1:3000 11 1507 1 2025-10-16 09:56:52.200 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:01:52.915 00:00:11.783 TCP 12.102.0.1:55816 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:02:54.738 00:00:11.814 TCP 12.102.0.1:52014 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:03:23.009 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:03:22.863 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:03:22.927 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:03:22.884 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:03:23.094 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:03:22.779 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:03:22.984 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:03:56.592 00:00:11.804 TCP 12.102.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:04:58.429 00:00:11.813 TCP 12.102.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:06:00.280 00:00:11.803 TCP 12.102.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:07:02.120 00:00:11.806 TCP 12.102.0.1:35028 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:02:52.187 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:08:03.956 00:00:11.854 TCP 12.102.0.1:38202 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:08:22.930 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:08:22.915 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:08:23.155 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:08:22.948 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:08:23.131 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:08:23.009 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:08:22.906 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:03:52.201 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:09:05.850 00:00:11.810 TCP 12.102.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:10:07.699 00:00:11.767 TCP 12.102.0.1:36430 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:11:09.505 00:00:11.807 TCP 12.102.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:12:11.353 00:00:11.819 TCP 12.102.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:13:23.148 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:13:23.172 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:13:23.293 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:13:23.295 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:13:13.218 00:00:11.837 TCP 12.102.0.1:52162 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:13:23.090 00:00:00.028 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:13:23.295 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:13:22.954 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:14:15.088 00:00:11.804 TCP 12.102.0.1:34170 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:09:52.186 00:06:00.025 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:15:16.932 00:00:11.810 TCP 12.102.0.1:35166 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:10:52.206 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:16:18.782 00:00:11.803 TCP 12.102.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:17:20.625 00:00:11.756 TCP 12.102.0.1:59344 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:18:23.254 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:18:23.427 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:18:23.303 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:18:23.303 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:18:23.437 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:18:23.177 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:18:23.231 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:18:22.413 00:00:11.800 TCP 12.102.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:19:24.251 00:00:11.806 TCP 12.102.0.1:43674 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:20:26.098 00:00:11.805 TCP 12.102.0.1:34718 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:21:27.939 00:00:11.779 TCP 12.102.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:16:52.189 00:06:00.026 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:22:29.755 00:00:11.795 TCP 12.102.0.1:41128 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:17:52.209 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:23:23.134 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:23:23.366 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:23:23.396 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:23:23.384 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:23:23.540 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:23:23.473 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:23:23.111 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:23:31.592 00:00:11.807 TCP 12.102.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:24:33.438 00:00:11.808 TCP 12.102.0.1:35984 -> 1.101.0.1:3000 12 1559 1 2025-10-16 10:25:35.287 00:00:11.852 TCP 12.102.0.1:41822 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:26:37.180 00:00:11.810 TCP 12.102.0.1:52932 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:27:39.037 00:00:11.817 TCP 12.102.0.1:44148 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:28:23.230 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:28:23.253 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:28:23.669 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:28:23.375 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:28:23.361 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:28:23.613 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:28:23.440 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:23:52.190 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:28:40.893 00:00:11.825 TCP 12.102.0.1:57140 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:29:42.769 00:00:12.004 TCP 12.102.0.1:55934 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:24:52.214 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:30:44.813 00:00:11.806 TCP 12.102.0.1:44742 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:31:46.657 00:00:11.821 TCP 12.102.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:32:48.523 00:00:11.802 TCP 12.102.0.1:50270 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:33:23.748 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:33:23.770 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:33:23.671 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:33:23.885 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:33:23.561 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:33:23.539 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:33:24.031 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:33:50.369 00:00:11.819 TCP 12.102.0.1:37002 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:34:52.223 00:00:11.759 TCP 12.102.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:30:52.191 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:35:54.027 00:00:11.751 TCP 12.102.0.1:48500 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:31:52.217 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:36:55.813 00:00:11.809 TCP 12.102.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:37:57.654 00:00:11.764 TCP 12.102.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:38:23.602 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:38:23.431 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:38:23.633 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:38:23.625 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:38:23.382 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:38:23.772 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:38:23.749 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:38:59.453 00:00:11.805 TCP 12.102.0.1:47406 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:40:01.300 00:00:11.803 TCP 12.102.0.1:48260 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:41:03.175 00:00:11.761 TCP 12.102.0.1:55134 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:42:04.976 00:00:11.819 TCP 12.102.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:37:52.194 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:43:06.832 00:00:11.764 TCP 12.102.0.1:39722 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:43:23.718 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:43:23.867 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:43:23.712 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:43:23.759 00:00:00.018 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:43:23.808 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:43:23.748 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:43:23.740 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:38:52.216 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:44:08.639 00:00:11.804 TCP 12.102.0.1:32772 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:45:10.479 00:00:11.795 TCP 12.102.0.1:54872 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:46:12.315 00:00:11.801 TCP 12.102.0.1:35392 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:47:14.153 00:00:11.772 TCP 12.102.0.1:51802 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:48:23.836 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:48:23.859 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:48:23.967 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:48:23.984 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:48:23.941 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:48:23.930 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:48:23.724 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:48:15.953 00:00:11.804 TCP 12.102.0.1:54950 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:49:17.795 00:00:11.758 TCP 12.102.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:44:52.196 00:06:00.027 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:50:19.593 00:00:11.760 TCP 12.102.0.1:32984 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:45:52.220 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:51:21.394 00:00:11.803 TCP 12.102.0.1:56730 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:52:23.235 00:00:11.801 TCP 12.102.0.1:58084 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:53:23.976 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:53:23.850 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:53:24.017 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:53:23.817 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:53:24.153 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:53:23.889 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:53:23.953 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:53:25.084 00:00:11.760 TCP 12.102.0.1:57168 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:54:26.883 00:00:11.800 TCP 12.102.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:55:28.721 00:00:11.819 TCP 12.102.0.1:52128 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:56:30.567 00:00:11.799 TCP 12.102.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:51:52.197 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 10:57:32.407 00:00:11.804 TCP 12.102.0.1:47768 -> 1.101.0.1:3000 11 1507 1 2025-10-16 10:52:52.221 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 10:58:24.020 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 10:58:24.103 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 10:58:24.291 00:00:00.013 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 10:58:24.038 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 10:58:24.154 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 10:58:24.090 00:00:00.051 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 10:58:23.997 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 10:58:34.251 00:00:11.796 TCP 12.102.0.1:46138 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 122355, total packets: 1091, avg bps: 258, avg pps: 0, avg bpp: 112 Time window: 2025-10-16 09:55:52 - 2025-10-16 10:58:52 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0035s User: 0.0017s Wall: 0.0033s flows/second: 48103.9 Runtime: 0.0034s