Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 07:59:09.786 00:00:11.758 TCP 12.102.0.1:48580 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:00:11.579 00:00:11.755 TCP 12.102.0.1:45828 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:01:13.372 00:00:11.779 TCP 12.102.0.1:35282 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:02:15.191 00:00:11.806 TCP 12.102.0.1:35350 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:03:17.053 00:00:11.805 TCP 12.102.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:03:49.475 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:03:49.497 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:03:49.614 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:03:49.609 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:03:49.528 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:03:49.609 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:03:49.411 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 07:58:52.606 00:06:00.027 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 08:04:18.893 00:00:11.816 TCP 12.102.0.1:49604 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:59:52.627 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 08:05:20.746 00:00:11.808 TCP 12.102.0.1:41082 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:06:22.587 00:00:11.832 TCP 12.102.0.1:43286 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:07:24.460 00:00:11.804 TCP 12.102.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:08:26.303 00:00:11.761 TCP 12.102.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:08:49.500 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:08:49.523 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:08:49.723 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:08:49.740 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:08:49.710 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:08:49.599 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:08:49.675 00:00:00.018 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:09:28.107 00:00:11.852 TCP 12.102.0.1:49176 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:10:30.002 00:00:11.811 TCP 12.102.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:05:52.607 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 08:11:31.852 00:00:12.090 TCP 12.102.0.1:40252 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:06:52.633 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 08:12:33.983 00:00:11.798 TCP 12.102.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:13:49.815 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:13:35.819 00:00:11.807 TCP 12.102.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:13:49.839 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:13:49.912 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:13:49.730 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:13:49.891 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:13:49.913 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:13:49.687 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:14:37.668 00:00:11.807 TCP 12.102.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:15:39.513 00:00:11.811 TCP 12.102.0.1:36028 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:16:41.363 00:00:11.781 TCP 12.102.0.1:56348 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:17:43.181 00:00:11.780 TCP 12.102.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:12:52.611 00:06:00.025 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 08:18:49.822 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:18:49.844 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:18:49.625 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:18:49.927 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:18:49.745 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:18:49.842 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:18:49.778 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:18:44.998 00:00:11.813 TCP 12.102.0.1:50896 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:13:52.633 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 08:19:46.849 00:00:11.800 TCP 12.102.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:20:48.687 00:00:11.825 TCP 12.102.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:21:50.549 00:00:11.808 TCP 12.102.0.1:43448 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:22:52.395 00:00:11.814 TCP 12.102.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:23:50.116 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:23:50.139 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:23:49.977 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:23:49.906 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:23:49.860 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:23:49.973 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:23:50.067 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:23:54.248 00:00:11.813 TCP 12.102.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:19:52.613 00:06:00.024 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 08:24:56.103 00:00:11.806 TCP 12.102.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:20:52.635 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 08:25:57.958 00:00:11.801 TCP 12.102.0.1:48220 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:26:59.796 00:00:11.810 TCP 12.102.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:28:01.641 00:00:12.566 TCP 12.102.0.1:48922 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:28:49.896 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:28:49.749 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:28:50.161 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:28:49.945 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:28:50.045 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:28:49.730 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:28:49.873 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:29:04.249 00:00:11.767 TCP 12.102.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:30:06.074 00:00:11.818 TCP 12.102.0.1:38490 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:31:07.932 00:00:11.813 TCP 12.102.0.1:47826 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:26:52.617 00:06:00.022 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 08:32:09.785 00:00:11.763 TCP 12.102.0.1:59532 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:27:52.636 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 08:33:11.585 00:00:11.817 TCP 12.102.0.1:53424 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:33:50.000 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:33:50.211 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:33:50.075 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:33:50.038 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:33:50.143 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:33:50.014 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:33:49.977 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:34:13.446 00:00:12.026 TCP 12.102.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:35:15.512 00:00:11.800 TCP 12.102.0.1:43624 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:36:17.350 00:00:11.791 TCP 12.102.0.1:39392 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:37:19.184 00:00:11.758 TCP 12.102.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:38:20.980 00:00:11.800 TCP 12.102.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:38:50.097 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:38:49.921 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:38:50.121 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:38:50.326 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:38:50.053 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:38:50.121 00:00:00.048 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:38:50.064 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:33:52.619 00:06:00.023 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 08:39:22.821 00:00:11.803 TCP 12.102.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:34:52.638 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 08:40:24.673 00:00:11.806 TCP 12.102.0.1:53794 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:41:26.519 00:00:11.763 TCP 12.102.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:42:28.318 00:00:11.810 TCP 12.102.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:43:30.170 00:00:11.759 TCP 12.102.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:43:49.977 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:43:50.000 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:43:50.007 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:43:50.275 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:43:50.217 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:43:50.481 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:43:50.269 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:44:31.967 00:00:11.823 TCP 12.102.0.1:43566 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:45:33.826 00:00:11.829 TCP 12.102.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:40:52.621 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 08:46:35.694 00:00:11.802 TCP 12.102.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:41:52.640 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 08:47:37.536 00:00:11.825 TCP 12.102.0.1:41358 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:48:39.400 00:00:11.809 TCP 12.102.0.1:42928 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:48:50.312 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:48:50.193 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:48:50.348 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:48:50.390 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:48:50.446 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:48:50.385 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:48:50.291 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:49:41.244 00:00:11.804 TCP 12.102.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:50:43.089 00:00:11.803 TCP 12.102.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:51:44.937 00:00:11.808 TCP 12.102.0.1:58424 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:47:52.624 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 08:52:46.781 00:00:12.692 TCP 12.102.0.1:54650 -> 1.101.0.1:3000 17 2241 1 2025-10-17 08:53:50.462 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 08:53:50.485 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:53:50.539 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:53:50.568 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:53:50.531 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:53:50.283 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:53:50.547 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:48:52.640 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-17 08:53:49.515 00:00:11.800 TCP 12.102.0.1:46934 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:54:51.353 00:00:11.784 TCP 12.102.0.1:50840 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:55:53.177 00:00:11.804 TCP 12.102.0.1:59726 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:56:55.026 00:00:11.807 TCP 12.102.0.1:57302 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:57:56.863 00:00:11.913 TCP 12.102.0.1:54130 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:58:50.503 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 08:58:50.693 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 08:58:50.583 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 08:58:50.600 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 08:58:50.544 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 08:58:50.421 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 08:58:50.479 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 Summary: total flows: 158, total bytes: 120172, total packets: 1064, avg bps: 267, avg pps: 0, avg bpp: 112 Time window: 2025-10-17 07:58:52 - 2025-10-17 08:58:50 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0029s User: 0.0010s Wall: 0.0014s flows/second: 115937.7 Runtime: 0.0014s