Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 21:59:06.165 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 21:59:06.187 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 21:58:54.039 00:00:11.801 TCP 12.102.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:59:06.210 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:59:06.374 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 21:59:06.271 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 21:59:06.314 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 21:59:05.967 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 21:59:55.875 00:00:11.799 TCP 12.102.0.1:36778 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:00:57.717 00:00:11.799 TCP 12.102.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:01:59.553 00:00:11.766 TCP 12.102.0.1:54456 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:03:01.360 00:00:11.815 TCP 12.102.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:58:52.893 00:06:00.055 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 22:04:06.228 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:04:06.250 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:04:06.171 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:04:06.247 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:04:06.203 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:04:06.067 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:04:06.368 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:04:03.211 00:00:11.826 TCP 12.102.0.1:49910 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:59:52.896 00:06:00.049 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 22:05:05.083 00:00:11.761 TCP 12.102.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:06:06.880 00:00:11.759 TCP 12.102.0.1:60760 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:07:08.677 00:00:11.761 TCP 12.102.0.1:51964 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:08:10.472 00:00:13.401 TCP 12.102.0.1:50704 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:09:06.415 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:09:06.487 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:09:06.480 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:09:06.378 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:09:06.543 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:09:06.476 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:09:06.393 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:09:13.908 00:00:11.831 TCP 12.102.0.1:52442 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:10:15.775 00:00:11.803 TCP 12.102.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:05:52.894 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 22:11:17.612 00:00:11.809 TCP 12.102.0.1:33322 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:06:52.898 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 22:12:19.456 00:00:11.776 TCP 12.102.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:13:21.265 00:00:11.848 TCP 12.102.0.1:34294 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:14:06.564 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:14:06.586 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:14:06.659 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:14:06.720 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:14:06.611 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:14:06.570 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:14:06.352 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:14:23.153 00:00:11.766 TCP 12.102.0.1:36068 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:15:24.956 00:00:11.809 TCP 12.102.0.1:46914 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:16:26.806 00:00:11.775 TCP 12.102.0.1:45932 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:17:28.619 00:00:11.799 TCP 12.102.0.1:48662 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:12:52.895 00:06:00.063 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 22:18:30.454 00:00:11.805 TCP 12.102.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:13:52.899 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 22:19:06.547 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:19:06.570 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:19:06.782 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:19:06.616 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:19:06.520 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:19:06.693 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:19:06.654 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:19:32.296 00:00:11.811 TCP 12.102.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:20:34.146 00:00:11.772 TCP 12.102.0.1:38442 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:21:35.958 00:00:11.831 TCP 12.102.0.1:46610 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:22:37.830 00:00:11.812 TCP 12.102.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:23:39.679 00:00:11.760 TCP 12.102.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:24:06.644 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:24:06.679 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:24:06.827 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:24:06.572 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:24:06.704 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:24:06.717 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:24:06.620 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:19:52.898 00:06:00.063 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 22:24:41.474 00:00:11.802 TCP 12.102.0.1:39474 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:25:43.312 00:00:11.803 TCP 12.102.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:20:52.901 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 22:26:45.150 00:00:11.811 TCP 12.102.0.1:51942 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:27:47.004 00:00:11.817 TCP 12.102.0.1:54722 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:28:48.851 00:00:11.800 TCP 12.102.0.1:42856 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:29:06.720 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:29:06.743 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:29:06.941 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:29:06.867 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:29:06.938 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:29:06.896 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:29:06.848 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:29:50.700 00:00:11.769 TCP 12.102.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:30:52.507 00:00:11.832 TCP 12.102.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:26:52.898 00:06:00.067 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 22:31:54.378 00:00:11.820 TCP 12.102.0.1:44960 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:27:52.903 00:06:00.059 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 22:32:56.235 00:00:11.770 TCP 12.102.0.1:47810 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:34:06.799 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:34:06.777 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:33:58.076 00:00:11.817 TCP 12.102.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:34:07.012 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:34:07.051 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:34:07.054 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:34:06.997 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:34:07.033 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:34:59.953 00:00:11.786 TCP 12.102.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:36:01.775 00:00:11.806 TCP 12.102.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:37:03.625 00:00:12.439 TCP 12.102.0.1:36202 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:38:06.101 00:00:11.842 TCP 12.102.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:33:52.902 00:06:00.064 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 22:39:07.138 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:39:07.161 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:39:07.071 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:39:07.281 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:39:07.132 00:00:00.054 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:39:07.060 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:39:07.053 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:39:07.981 00:00:11.812 TCP 12.102.0.1:47842 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:34:52.905 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 22:40:09.829 00:00:11.838 TCP 12.102.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:41:11.706 00:00:11.785 TCP 12.102.0.1:32970 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:42:13.519 00:00:11.804 TCP 12.102.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:43:15.366 00:00:11.832 TCP 12.102.0.1:55138 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:44:06.881 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:44:07.117 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:44:07.141 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:44:07.144 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:44:07.026 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:44:07.191 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:44:07.177 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:44:17.233 00:00:11.800 TCP 12.102.0.1:58170 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:45:19.079 00:00:11.810 TCP 12.102.0.1:34382 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:40:52.905 00:06:00.063 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 22:46:20.918 00:00:11.819 TCP 12.102.0.1:45560 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:41:52.908 00:06:00.058 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 22:47:22.773 00:00:11.800 TCP 12.102.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:48:24.609 00:00:11.804 TCP 12.102.0.1:57902 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:49:07.994 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:49:08.093 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:49:08.018 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:49:08.024 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:49:08.021 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:49:08.060 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:49:07.971 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:49:26.455 00:00:11.798 TCP 12.102.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:50:28.305 00:00:11.774 TCP 12.102.0.1:42126 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:51:30.115 00:00:11.802 TCP 12.102.0.1:38850 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:52:31.954 00:00:11.802 TCP 12.102.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:47:52.906 00:06:00.063 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-17 22:53:33.793 00:00:11.797 TCP 12.102.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:48:52.910 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 22:54:07.154 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 22:54:07.178 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 22:54:07.388 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:54:07.091 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 22:54:07.187 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 22:54:07.387 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 22:54:07.255 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 22:54:35.626 00:00:11.798 TCP 12.102.0.1:41140 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:55:37.463 00:00:11.802 TCP 12.102.0.1:42826 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:56:39.303 00:00:11.763 TCP 12.102.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:57:41.106 00:00:11.806 TCP 12.102.0.1:57868 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122350, total packets: 1114, avg bps: 276, avg pps: 0, avg bpp: 109 Time window: 2025-10-17 21:58:52 - 2025-10-17 22:57:52 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0020s User: 0.0040s Wall: 0.0022s flows/second: 71720.8 Runtime: 0.0022s