Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 11:59:28.415 00:00:11.807 TCP 12.102.0.1:59740 -> 1.101.0.1:3000 11 1507 1 2025-10-16 11:54:52.216 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:00:30.259 00:00:11.804 TCP 12.102.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-10-16 11:55:52.247 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:01:32.097 00:00:11.814 TCP 12.102.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:02:33.948 00:00:11.810 TCP 12.102.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:03:25.399 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:03:25.421 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:03:25.552 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:03:25.151 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:03:25.336 00:00:00.028 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:03:25.512 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:03:25.238 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:03:35.793 00:00:11.767 TCP 12.102.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:04:37.597 00:00:11.764 TCP 12.102.0.1:52380 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:05:39.400 00:00:11.798 TCP 12.102.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:06:41.239 00:00:12.241 TCP 12.102.0.1:51526 -> 1.101.0.1:3000 15 1926 1 2025-10-16 12:01:52.217 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:07:43.516 00:00:11.797 TCP 12.102.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:02:52.249 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:08:25.436 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:08:25.458 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:08:25.429 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:08:25.493 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:08:25.350 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:08:25.551 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:08:25.253 00:00:00.017 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:08:45.356 00:00:11.806 TCP 12.102.0.1:34018 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:09:47.199 00:00:11.797 TCP 12.102.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:10:49.050 00:00:11.812 TCP 12.102.0.1:49228 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:11:50.903 00:00:11.806 TCP 12.102.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:12:52.745 00:00:11.806 TCP 12.102.0.1:33546 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:13:25.622 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:13:25.452 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:13:25.377 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:13:25.648 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:13:25.603 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:13:25.866 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:13:25.428 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:08:52.219 00:06:00.034 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:13:54.586 00:00:11.811 TCP 12.102.0.1:54766 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:09:52.251 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:14:56.439 00:00:11.821 TCP 12.102.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:15:58.295 00:00:11.802 TCP 12.102.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:17:00.143 00:00:11.816 TCP 12.102.0.1:47608 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:18:01.996 00:00:11.804 TCP 12.102.0.1:35704 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:18:25.533 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:18:25.554 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:18:25.464 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:18:25.692 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:18:25.659 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:18:25.869 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:18:25.552 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:19:03.843 00:00:11.813 TCP 12.102.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:20:05.702 00:00:11.772 TCP 12.102.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:15:52.220 00:06:00.034 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:21:07.516 00:00:11.795 TCP 12.102.0.1:42460 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:16:52.251 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:22:09.353 00:00:12.201 TCP 12.102.0.1:59360 -> 1.101.0.1:3000 15 1926 1 2025-10-16 12:23:25.683 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:23:25.705 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:23:25.599 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:23:25.929 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:23:25.654 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:23:11.597 00:00:12.494 TCP 12.102.0.1:49742 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:23:25.840 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:23:25.719 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:24:14.129 00:00:11.758 TCP 12.102.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:25:15.935 00:00:11.821 TCP 12.102.0.1:56746 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:26:17.794 00:00:11.806 TCP 12.102.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:27:19.640 00:00:11.801 TCP 12.102.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:22:52.222 00:06:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:28:25.748 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:28:25.891 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:28:25.625 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:28:25.875 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:28:25.977 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:28:25.764 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:28:25.726 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:28:21.486 00:00:11.797 TCP 12.102.0.1:58294 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:23:52.252 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:29:23.327 00:00:11.803 TCP 12.102.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:30:25.166 00:00:11.813 TCP 12.102.0.1:40952 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:31:27.026 00:00:11.816 TCP 12.102.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:32:28.883 00:00:11.804 TCP 12.102.0.1:36680 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:33:25.852 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:33:26.093 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:33:26.169 00:00:00.041 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:33:25.793 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:33:26.081 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:33:25.954 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:33:25.874 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:33:30.725 00:00:11.801 TCP 12.102.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:34:32.561 00:00:11.808 TCP 12.102.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:29:52.224 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:35:34.405 00:00:11.812 TCP 12.102.0.1:56866 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:30:52.258 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:36:36.253 00:00:11.802 TCP 12.102.0.1:60896 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:37:38.092 00:00:11.806 TCP 12.102.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:38:25.910 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:38:26.107 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:38:26.033 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:38:26.020 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:38:25.958 00:00:00.016 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:38:25.985 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:38:25.888 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:38:39.938 00:00:11.859 TCP 12.102.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:39:41.834 00:00:11.802 TCP 12.102.0.1:59396 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:40:43.671 00:00:20.873 TCP 12.102.0.1:55826 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:36:52.225 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:41:54.588 00:00:11.758 TCP 12.102.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:37:52.258 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:42:56.385 00:00:11.772 TCP 12.102.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:43:25.993 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:43:26.016 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:43:26.427 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:43:25.949 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:43:26.034 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:43:26.049 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:43:26.227 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:43:58.186 00:00:11.803 TCP 12.102.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:45:00.040 00:00:11.801 TCP 12.102.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:46:01.881 00:00:11.766 TCP 12.102.0.1:47200 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:47:03.685 00:00:11.804 TCP 12.102.0.1:53546 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:48:05.523 00:00:11.802 TCP 12.102.0.1:49822 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:48:26.193 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:48:26.214 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:48:26.274 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:48:26.105 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:48:26.848 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:48:26.392 00:00:00.081 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:48:26.874 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:43:52.227 00:06:00.037 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:49:07.363 00:00:11.812 TCP 12.102.0.1:33008 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:44:52.259 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:50:09.217 00:00:11.803 TCP 12.102.0.1:55088 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:51:11.080 00:00:11.799 TCP 12.102.0.1:49988 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:52:12.920 00:00:11.881 TCP 12.102.0.1:56914 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:53:26.345 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:53:14.840 00:00:11.807 TCP 12.102.0.1:42144 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:53:26.367 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:53:26.510 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:53:26.335 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:53:26.457 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:53:26.420 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:53:26.472 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:54:16.703 00:00:11.776 TCP 12.102.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:55:18.510 00:00:11.816 TCP 12.102.0.1:54366 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:50:52.227 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 12:56:20.365 00:00:12.250 TCP 12.102.0.1:44980 -> 1.101.0.1:3000 15 1926 1 2025-10-16 12:51:52.260 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 12:57:22.653 00:00:11.937 TCP 12.102.0.1:36342 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:58:26.229 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 12:58:26.252 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 12:58:26.474 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 12:58:26.469 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 12:58:26.447 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 12:58:26.641 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 12:58:26.494 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 12:58:24.622 00:00:11.805 TCP 12.102.0.1:42690 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 122053, total packets: 1091, avg bps: 255, avg pps: 0, avg bpp: 111 Time window: 2025-10-16 11:54:52 - 2025-10-16 12:58:36 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0018s Wall: 0.0019s flows/second: 84840.5 Runtime: 0.0019s