Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 01:58:51.790 00:00:11.795 TCP 12.102.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-10-17 01:54:52.507 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-10-17 01:59:53.638 00:00:11.804 TCP 12.102.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-10-17 01:55:52.497 00:06:00.015 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:00:55.483 00:00:11.812 TCP 12.102.0.1:48610 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:01:57.324 00:00:11.766 TCP 12.102.0.1:39578 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:02:59.124 00:00:11.852 TCP 12.102.0.1:32962 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:03:42.031 00:00:00.041 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:03:42.054 00:00:00.041 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:03:42.135 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:03:42.125 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:03:42.320 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:03:42.293 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:03:42.283 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:04:01.024 00:00:11.802 TCP 12.102.0.1:47080 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:05:02.866 00:00:11.806 TCP 12.102.0.1:35640 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:06:04.709 00:00:11.804 TCP 12.102.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:01:52.510 00:06:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-10-17 02:07:06.550 00:00:12.199 TCP 12.102.0.1:60764 -> 1.101.0.1:3000 15 1926 1 2025-10-17 02:02:52.499 00:06:00.016 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:08:08.786 00:00:11.802 TCP 12.102.0.1:59014 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:08:42.165 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:08:42.189 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:08:42.486 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:08:42.318 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:08:42.415 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:08:42.015 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:08:42.045 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:09:10.632 00:00:11.895 TCP 12.102.0.1:36338 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:10:12.564 00:00:11.800 TCP 12.102.0.1:47944 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:11:14.411 00:00:11.804 TCP 12.102.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:12:16.255 00:00:11.807 TCP 12.102.0.1:43048 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:13:18.122 00:00:11.809 TCP 12.102.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:13:42.348 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:13:42.369 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:13:42.381 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:13:42.329 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:13:42.464 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:13:42.208 00:00:00.046 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:13:42.305 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:08:52.513 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-10-17 02:14:19.969 00:00:11.817 TCP 12.102.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:09:52.503 00:06:00.015 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:15:21.824 00:00:11.805 TCP 12.102.0.1:35352 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:16:23.667 00:00:11.806 TCP 12.102.0.1:60908 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:17:25.514 00:00:11.800 TCP 12.102.0.1:33628 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:18:27.356 00:00:11.845 TCP 12.102.0.1:41150 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:18:42.464 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:18:42.487 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:18:42.793 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:18:42.760 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:18:42.665 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:18:42.499 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:18:42.369 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:19:29.236 00:00:11.802 TCP 12.102.0.1:44352 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:20:31.079 00:00:11.797 TCP 12.102.0.1:58410 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:15:52.514 00:06:00.001 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-10-17 02:21:32.914 00:00:11.825 TCP 12.102.0.1:45394 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:16:52.506 00:06:00.013 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:22:34.779 00:00:11.805 TCP 12.102.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:23:43.306 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:23:43.069 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:23:42.958 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:23:43.491 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:23:43.323 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:23:43.387 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:23:43.284 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:23:36.622 00:00:11.801 TCP 12.102.0.1:42068 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:24:38.463 00:00:11.800 TCP 12.102.0.1:50658 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:25:40.305 00:00:19.175 TCP 12.102.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:26:49.533 00:00:11.794 TCP 12.102.0.1:47006 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:22:52.517 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-10-17 02:27:51.371 00:00:11.771 TCP 12.102.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:28:42.452 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:28:42.476 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:28:42.920 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:28:42.845 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:28:42.774 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:28:42.813 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:28:42.737 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:23:52.509 00:06:00.013 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:28:53.180 00:00:11.809 TCP 12.102.0.1:40642 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:29:55.033 00:00:11.759 TCP 12.102.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:30:56.834 00:00:11.763 TCP 12.102.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:31:58.645 00:00:11.820 TCP 12.102.0.1:48340 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:33:00.499 00:00:11.807 TCP 12.102.0.1:46028 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:33:42.707 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:33:42.730 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:33:42.736 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:33:42.785 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:33:42.952 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:33:42.862 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:33:42.637 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:34:02.352 00:00:11.798 TCP 12.102.0.1:37862 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:29:52.519 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-10-17 02:35:04.193 00:00:11.804 TCP 12.102.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:30:52.515 00:06:00.008 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:36:06.064 00:00:11.934 TCP 12.102.0.1:46052 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:37:08.057 00:00:11.829 TCP 12.102.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:38:09.924 00:00:11.784 TCP 12.102.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:38:43.048 00:00:00.048 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:38:43.072 00:00:00.047 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:38:43.323 00:00:00.033 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:38:43.208 00:00:00.040 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:38:43.207 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:38:43.195 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:38:43.212 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:39:11.749 00:00:11.802 TCP 12.102.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:40:13.597 00:00:11.804 TCP 12.102.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:41:15.436 00:00:11.815 TCP 12.102.0.1:35220 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:36:52.521 00:06:00.001 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 02:42:17.284 00:00:11.811 TCP 12.102.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:37:52.519 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:43:19.130 00:00:11.798 TCP 12.102.0.1:55978 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:43:43.004 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:43:43.138 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:43:43.042 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:43:43.107 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:43:43.138 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:43:43.158 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:43:42.980 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:44:20.964 00:00:12.119 TCP 12.102.0.1:44218 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:45:23.118 00:00:11.803 TCP 12.102.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:46:24.957 00:00:11.797 TCP 12.102.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:47:26.798 00:00:11.801 TCP 12.102.0.1:35430 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:48:28.645 00:00:11.804 TCP 12.102.0.1:52388 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:48:43.064 00:00:00.052 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:48:42.908 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:48:43.037 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:48:43.232 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:48:43.101 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:48:43.075 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:48:43.040 00:00:00.053 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:43:52.521 00:06:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 653 1 2025-10-17 02:49:30.488 00:00:11.801 TCP 12.102.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:44:52.521 00:06:00.007 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:50:32.327 00:00:11.807 TCP 12.102.0.1:42160 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:51:34.169 00:00:11.802 TCP 12.102.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:52:36.010 00:00:11.858 TCP 12.102.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:53:42.939 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:53:43.154 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:53:43.053 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:53:43.279 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:53:43.279 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:53:43.143 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:53:42.916 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 02:53:37.905 00:00:11.800 TCP 12.102.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:54:39.743 00:00:11.809 TCP 12.102.0.1:58574 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:55:41.583 00:00:11.817 TCP 12.102.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:50:52.524 00:06:00.004 TCP 179.10.12.10:179 -> 179.10.12.12:58070 13 809 1 2025-10-17 02:51:52.523 00:06:00.011 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 02:56:43.440 00:00:11.801 TCP 12.102.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:57:45.281 00:00:11.802 TCP 12.102.0.1:42800 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:58:43.489 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 02:58:43.609 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:58:43.399 00:00:00.042 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 02:58:43.428 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 02:58:43.610 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 02:58:43.496 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 02:58:43.467 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 Summary: total flows: 160, total bytes: 122047, total packets: 1099, avg bps: 254, avg pps: 0, avg bpp: 111 Time window: 2025-10-17 01:54:52 - 2025-10-17 02:58:43 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0050s User: 0.0010s Wall: 0.0022s flows/second: 71460.8 Runtime: 0.0023s