Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 13:53:53.248 00:06:00.064 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 13:58:55.837 00:00:11.760 TCP 12.102.0.1:53420 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:59:25.697 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 13:59:25.721 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 13:59:25.700 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:59:25.815 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 13:59:25.646 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 13:59:25.734 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 13:59:25.741 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 13:59:57.634 00:00:11.817 TCP 12.102.0.1:56844 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:00:59.489 00:00:11.825 TCP 12.102.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:02:01.354 00:00:11.833 TCP 12.102.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:57:53.248 00:06:00.067 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 14:03:03.225 00:00:11.805 TCP 12.102.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:04:05.079 00:00:11.808 TCP 12.102.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:04:25.565 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:04:25.444 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:04:25.600 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:04:25.556 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:04:25.484 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:04:25.615 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:04:25.543 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:05:06.919 00:00:11.839 TCP 12.102.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:00:53.251 00:06:00.062 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 14:06:08.796 00:00:11.803 TCP 12.102.0.1:36514 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:07:10.639 00:00:11.799 TCP 12.102.0.1:35882 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:08:12.485 00:00:11.764 TCP 12.102.0.1:52560 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:09:14.291 00:00:11.813 TCP 12.102.0.1:47136 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:09:25.580 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:09:25.597 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:09:25.774 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:09:25.380 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:09:25.617 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:09:25.705 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:09:25.557 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:04:53.250 00:06:00.067 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 14:10:16.136 00:00:11.778 TCP 12.102.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:11:17.950 00:00:11.798 TCP 12.102.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:12:19.788 00:00:11.805 TCP 12.102.0.1:37498 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:07:53.253 00:06:00.064 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 14:13:21.644 00:00:11.824 TCP 12.102.0.1:59692 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:14:25.690 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:14:25.713 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:14:25.670 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:14:25.909 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:14:25.807 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:14:25.819 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:14:25.852 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:14:23.507 00:00:11.774 TCP 12.102.0.1:39796 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:15:25.318 00:00:11.811 TCP 12.102.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:16:27.170 00:00:11.797 TCP 12.102.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:11:53.251 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 14:17:29.010 00:00:11.755 TCP 12.102.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:18:30.810 00:00:11.760 TCP 12.102.0.1:46614 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:19:26.057 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:19:26.015 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:19:25.932 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:19:26.076 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:19:26.264 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:19:26.052 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:19:26.034 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:19:32.609 00:00:11.801 TCP 12.102.0.1:41122 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:14:53.255 00:06:00.069 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 14:20:34.451 00:00:11.813 TCP 12.102.0.1:54958 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:21:36.294 00:00:11.799 TCP 12.102.0.1:47892 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:22:38.131 00:00:11.800 TCP 12.102.0.1:36518 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:23:39.973 00:00:11.759 TCP 12.102.0.1:36520 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:18:53.254 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 14:24:25.917 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:24:25.739 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:24:25.993 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:24:26.086 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:24:25.870 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:24:25.887 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:24:25.716 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:24:41.773 00:00:11.798 TCP 12.102.0.1:50794 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:25:43.609 00:00:11.800 TCP 12.102.0.1:54496 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:21:53.259 00:06:00.068 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 14:26:45.450 00:00:11.762 TCP 12.102.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:27:47.256 00:00:12.231 TCP 12.102.0.1:56892 -> 1.101.0.1:3000 15 1926 1 2025-10-18 14:28:49.529 00:00:11.761 TCP 12.102.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:29:25.920 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:29:26.153 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:29:26.036 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:29:26.263 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:29:26.051 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:29:26.016 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:29:25.899 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:29:51.329 00:00:11.798 TCP 12.102.0.1:39658 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:25:53.256 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 14:30:53.166 00:00:11.799 TCP 12.102.0.1:37540 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:31:55.007 00:00:11.800 TCP 12.102.0.1:56646 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:32:56.846 00:00:11.818 TCP 12.102.0.1:35136 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:28:53.264 00:06:00.064 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 14:33:58.712 00:00:11.804 TCP 12.102.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:34:26.339 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:34:26.362 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:34:26.333 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:34:26.294 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:34:26.242 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:34:26.244 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:34:26.135 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:35:00.555 00:00:11.796 TCP 12.102.0.1:53404 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:36:02.390 00:00:13.022 TCP 12.102.0.1:49396 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:37:05.452 00:00:11.803 TCP 12.102.0.1:56458 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:32:53.259 00:06:00.075 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 14:38:07.298 00:00:11.805 TCP 12.102.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:39:09.147 00:00:11.814 TCP 12.102.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:39:26.775 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:39:26.411 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:39:26.726 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:39:26.777 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:39:26.874 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:39:26.587 00:00:00.029 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:39:26.752 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:40:10.991 00:00:11.800 TCP 12.102.0.1:34550 -> 1.101.0.1:3000 12 1559 1 2025-10-18 14:35:53.262 00:06:00.072 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 14:41:12.835 00:00:11.798 TCP 12.102.0.1:57278 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:42:14.668 00:00:11.808 TCP 12.102.0.1:46174 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:43:16.515 00:00:11.819 TCP 12.102.0.1:40464 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:44:26.386 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:44:26.439 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:44:26.274 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:44:26.348 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:44:26.432 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:44:26.306 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:44:26.363 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:44:18.370 00:00:11.818 TCP 12.102.0.1:53790 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:39:53.269 00:06:00.070 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 14:45:20.222 00:00:11.809 TCP 12.102.0.1:41146 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:46:22.077 00:00:11.815 TCP 12.102.0.1:40498 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:47:23.928 00:00:11.811 TCP 12.102.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:42:53.271 00:06:00.065 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 14:48:25.778 00:00:11.755 TCP 12.102.0.1:39656 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:49:26.381 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:49:26.435 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:49:26.438 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:49:26.518 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:49:26.526 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:49:26.321 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:49:26.358 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:49:27.573 00:00:11.801 TCP 12.102.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:50:29.423 00:00:11.805 TCP 12.102.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:51:31.269 00:00:11.809 TCP 12.102.0.1:51080 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:46:53.269 00:06:00.069 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 14:52:33.112 00:00:11.812 TCP 12.102.0.1:50064 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:53:34.960 00:00:11.807 TCP 12.102.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:54:26.437 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 14:54:26.563 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:54:26.585 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 14:54:26.659 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 14:54:26.566 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 14:54:26.323 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 14:54:26.413 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 14:54:36.805 00:00:11.800 TCP 12.102.0.1:45938 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:49:53.272 00:06:00.066 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 14:55:38.638 00:00:11.841 TCP 12.102.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:56:40.513 00:00:11.766 TCP 12.102.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:57:42.309 00:00:11.800 TCP 12.102.0.1:52942 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123682, total packets: 1133, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-10-18 13:53:53 - 2025-10-18 14:57:54 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0019s User: 0.0038s Wall: 0.0020s flows/second: 77600.0 Runtime: 0.0021s