Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 04:58:41.237 00:00:11.761 TCP 12.102.0.1:40654 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:59:43.069 00:00:11.796 TCP 12.102.0.1:56718 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:00:44.911 00:00:11.819 TCP 12.102.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:56:52.556 00:06:00.007 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:01:46.772 00:00:11.761 TCP 12.102.0.1:45964 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:57:52.559 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 05:02:48.571 00:00:11.808 TCP 12.102.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:03:45.889 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:03:45.913 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:03:45.859 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:03:45.990 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:03:45.905 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:03:45.867 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:03:45.802 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:03:50.421 00:00:11.765 TCP 12.102.0.1:56826 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:04:52.224 00:00:11.759 TCP 12.102.0.1:57918 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:05:54.032 00:00:11.796 TCP 12.102.0.1:36356 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:06:55.871 00:00:11.825 TCP 12.102.0.1:43568 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:07:57.751 00:00:11.816 TCP 12.102.0.1:40734 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:08:46.016 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:08:46.039 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:08:46.136 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:08:46.078 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:08:46.176 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:08:46.329 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:08:45.850 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:03:52.558 00:06:00.010 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:08:59.612 00:00:11.758 TCP 12.102.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:04:52.562 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 05:10:01.414 00:00:11.782 TCP 12.102.0.1:35272 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:11:03.228 00:00:11.805 TCP 12.102.0.1:36058 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:12:05.086 00:00:12.288 TCP 12.102.0.1:47846 -> 1.101.0.1:3000 15 1926 1 2025-10-17 05:13:07.414 00:00:11.804 TCP 12.102.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:13:46.089 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:13:46.112 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:13:46.151 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:13:46.146 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:13:46.210 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:13:46.082 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:13:46.175 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:14:09.256 00:00:11.810 TCP 12.102.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:15:11.104 00:00:11.757 TCP 12.102.0.1:57784 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:10:52.557 00:06:00.011 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:16:12.900 00:00:11.797 TCP 12.102.0.1:51710 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:11:52.565 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 05:17:14.737 00:00:12.236 TCP 12.102.0.1:37576 -> 1.101.0.1:3000 15 1926 1 2025-10-17 05:18:17.010 00:00:11.853 TCP 12.102.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:18:46.381 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:18:46.159 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:18:46.257 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:18:46.430 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:18:46.459 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:18:46.370 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:18:46.234 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:19:18.899 00:00:11.762 TCP 12.102.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:20:20.698 00:00:11.763 TCP 12.102.0.1:48818 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:21:22.505 00:00:11.798 TCP 12.102.0.1:39166 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:22:24.353 00:00:11.818 TCP 12.102.0.1:43016 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:17:52.560 00:06:00.011 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:23:26.209 00:00:11.818 TCP 12.102.0.1:48492 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:23:46.117 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:23:46.139 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:23:46.220 00:00:00.050 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:23:46.353 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:23:46.365 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:23:46.279 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:23:46.114 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:18:52.567 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 05:24:28.079 00:00:11.761 TCP 12.102.0.1:38914 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:25:29.879 00:00:11.801 TCP 12.102.0.1:46726 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:26:31.714 00:00:12.042 TCP 12.102.0.1:53360 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:27:33.793 00:00:12.096 TCP 12.102.0.1:36028 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:28:46.198 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:28:46.183 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:28:46.248 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:28:46.326 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:28:46.523 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:28:46.198 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:28:46.174 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:28:35.920 00:00:11.826 TCP 12.102.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:29:37.799 00:00:11.808 TCP 12.102.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:24:52.561 00:06:00.012 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:30:39.655 00:00:11.812 TCP 12.102.0.1:55422 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:25:52.569 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 05:31:41.504 00:00:11.801 TCP 12.102.0.1:41312 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:32:43.350 00:00:11.820 TCP 12.102.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:33:46.437 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:33:46.460 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:33:46.597 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:33:46.608 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:33:46.580 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:33:46.747 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:33:46.467 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:33:45.213 00:00:11.814 TCP 12.102.0.1:44194 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:34:47.078 00:00:11.805 TCP 12.102.0.1:36754 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:35:48.921 00:00:11.822 TCP 12.102.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:31:52.562 00:06:00.017 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:36:50.782 00:00:11.807 TCP 12.102.0.1:45070 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:32:52.571 00:06:00.006 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 05:37:52.627 00:00:11.801 TCP 12.102.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:38:46.576 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:38:46.600 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:38:46.548 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:38:46.682 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:38:46.427 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:38:46.256 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:38:46.405 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:38:54.473 00:00:11.800 TCP 12.102.0.1:42502 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:39:56.313 00:00:11.807 TCP 12.102.0.1:43286 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:40:58.168 00:00:11.801 TCP 12.102.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:42:00.006 00:00:11.798 TCP 12.102.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:43:01.843 00:00:11.804 TCP 12.102.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:43:46.624 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:43:46.562 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:43:46.664 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:43:46.713 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:43:46.873 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:43:46.709 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:43:46.603 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:38:52.565 00:06:00.016 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:44:03.686 00:00:11.804 TCP 12.102.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:39:52.577 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 05:45:05.537 00:00:11.805 TCP 12.102.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:46:07.377 00:00:11.815 TCP 12.102.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:47:09.233 00:00:11.811 TCP 12.102.0.1:57790 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:48:11.085 00:00:11.817 TCP 12.102.0.1:59168 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:48:46.777 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:48:46.897 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:48:46.815 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:48:46.795 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:48:46.493 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:48:46.470 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:48:46.994 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:49:12.937 00:00:11.803 TCP 12.102.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:50:14.774 00:00:11.863 TCP 12.102.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:45:52.565 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:51:16.681 00:00:11.836 TCP 12.102.0.1:42752 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:46:52.581 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 05:52:18.553 00:00:11.801 TCP 12.102.0.1:55076 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:53:20.392 00:00:11.814 TCP 12.102.0.1:46586 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:53:46.747 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:53:46.770 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:53:46.748 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:53:46.880 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:53:46.796 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:53:46.762 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:53:46.926 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 05:54:22.244 00:00:11.816 TCP 12.102.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:55:24.092 00:00:11.806 TCP 12.102.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:56:25.940 00:00:11.810 TCP 12.102.0.1:48032 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:57:27.789 00:00:11.810 TCP 12.102.0.1:49932 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:52:52.567 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 05:58:46.810 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 05:58:29.648 00:00:11.833 TCP 12.102.0.1:35580 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:58:46.833 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 05:58:46.870 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:58:46.800 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 05:58:46.788 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 05:58:46.976 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 05:58:46.993 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 160, total bytes: 122644, total packets: 1091, avg bps: 263, avg pps: 0, avg bpp: 112 Time window: 2025-10-17 04:56:52 - 2025-10-17 05:58:52 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0036s User: 0.0012s Wall: 0.0027s flows/second: 60128.0 Runtime: 0.0027s