Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 16:59:16.959 00:00:11.804 TCP 12.102.0.1:60744 -> 1.101.0.1:3000 11 1507 1 2025-10-19 16:54:53.800 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 16:59:58.107 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 16:59:58.218 00:00:00.037 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 16:59:58.029 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 16:59:58.124 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 16:59:58.214 00:00:00.039 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 16:59:58.090 00:00:00.042 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 16:59:58.085 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:00:18.805 00:00:11.778 TCP 12.102.0.1:59670 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:01:20.624 00:00:11.943 TCP 12.102.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:02:22.610 00:00:11.800 TCP 12.102.0.1:48116 -> 1.101.0.1:3000 11 1507 1 2025-10-19 16:57:53.803 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 17:03:24.445 00:00:12.245 TCP 12.102.0.1:53750 -> 1.101.0.1:3000 15 1926 1 2025-10-19 17:04:26.734 00:00:11.765 TCP 12.102.0.1:40448 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:04:57.994 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:04:58.018 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:04:58.127 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:04:58.357 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:04:58.238 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:04:58.140 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:04:58.160 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:05:28.549 00:00:12.027 TCP 12.102.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:06:30.621 00:00:11.798 TCP 12.102.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:01:53.801 00:06:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 17:07:32.463 00:00:11.805 TCP 12.102.0.1:52894 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:08:34.306 00:00:11.771 TCP 12.102.0.1:60018 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:09:36.113 00:00:11.814 TCP 12.102.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:04:53.804 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 17:09:58.015 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:09:58.037 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:09:58.134 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:09:57.937 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:09:58.384 00:00:00.010 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:09:58.275 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:09:58.046 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:10:37.973 00:00:11.804 TCP 12.102.0.1:43730 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:11:39.817 00:00:11.780 TCP 12.102.0.1:58684 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:12:41.643 00:00:11.813 TCP 12.102.0.1:49192 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:08:53.802 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 17:13:43.495 00:00:11.800 TCP 12.102.0.1:60646 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:14:58.132 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:14:58.341 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:14:57.955 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:14:45.339 00:00:11.797 TCP 12.102.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:14:58.274 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:14:58.277 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:14:58.024 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:14:58.110 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:15:47.181 00:00:11.800 TCP 12.102.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:11:53.804 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 17:16:49.033 00:00:11.816 TCP 12.102.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:17:50.883 00:00:12.103 TCP 12.102.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:18:53.036 00:00:11.802 TCP 12.102.0.1:36134 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:19:58.376 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:19:58.140 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:19:58.158 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:19:58.030 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:19:58.384 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:19:58.478 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:19:58.352 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:19:54.876 00:00:11.758 TCP 12.102.0.1:41804 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:15:53.804 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 17:20:56.673 00:00:11.807 TCP 12.102.0.1:50208 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:21:58.520 00:00:11.816 TCP 12.102.0.1:34232 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:23:00.374 00:00:11.816 TCP 12.102.0.1:48872 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:18:53.808 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 17:24:02.230 00:00:12.263 TCP 12.102.0.1:37614 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:24:58.718 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:24:58.741 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:24:58.785 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:24:58.639 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:24:58.697 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:24:58.786 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:24:58.574 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:25:04.532 00:00:11.815 TCP 12.102.0.1:37012 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:26:06.377 00:00:11.814 TCP 12.102.0.1:47728 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:27:08.239 00:00:11.800 TCP 12.102.0.1:45532 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:22:53.806 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 17:28:10.079 00:00:11.796 TCP 12.102.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:29:11.914 00:00:11.774 TCP 12.102.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:29:58.467 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:29:58.491 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:29:58.658 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:29:58.837 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:29:58.590 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:29:58.804 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:29:58.634 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:30:13.731 00:00:11.799 TCP 12.102.0.1:58660 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:25:53.809 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 17:31:15.569 00:00:11.757 TCP 12.102.0.1:46958 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:32:17.367 00:00:11.817 TCP 12.102.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:33:19.222 00:00:11.800 TCP 12.102.0.1:41016 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:34:21.078 00:00:11.806 TCP 12.102.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:29:53.807 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 17:34:58.699 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:34:58.721 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:34:58.777 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:34:58.792 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:34:58.685 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:34:58.708 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:34:58.731 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:35:22.918 00:00:11.828 TCP 12.102.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:36:24.786 00:00:11.757 TCP 12.102.0.1:60264 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:37:26.581 00:00:11.805 TCP 12.102.0.1:50946 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:32:53.809 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 17:38:28.430 00:00:12.249 TCP 12.102.0.1:42986 -> 1.101.0.1:3000 15 1926 1 2025-10-19 17:39:30.719 00:00:11.803 TCP 12.102.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:39:58.641 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:39:58.663 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:39:58.878 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:39:58.865 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:39:58.829 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:39:58.861 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:39:58.747 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:40:32.558 00:00:11.850 TCP 12.102.0.1:38828 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:41:34.451 00:00:11.805 TCP 12.102.0.1:44170 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:36:53.807 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 17:42:36.293 00:00:11.836 TCP 12.102.0.1:49254 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:43:38.169 00:00:11.799 TCP 12.102.0.1:51084 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:44:40.011 00:00:11.803 TCP 12.102.0.1:33248 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:44:58.762 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:39:53.812 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 17:44:58.785 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:44:58.893 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:44:58.939 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:44:58.798 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:44:58.901 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:44:58.784 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:45:41.853 00:00:11.765 TCP 12.102.0.1:39378 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:46:43.663 00:00:11.768 TCP 12.102.0.1:57578 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:47:45.467 00:00:11.801 TCP 12.102.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:43:53.810 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 17:48:47.303 00:00:11.811 TCP 12.102.0.1:44392 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:49:59.047 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:49:59.188 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:49:59.048 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:49:59.020 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:49:49.157 00:00:11.776 TCP 12.102.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:49:59.023 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:49:58.908 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:49:59.026 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:50:50.965 00:00:11.763 TCP 12.102.0.1:45294 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:46:53.814 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 17:51:52.772 00:00:11.759 TCP 12.102.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:52:54.569 00:00:11.808 TCP 12.102.0.1:55938 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:53:56.416 00:00:11.799 TCP 12.102.0.1:38124 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:54:59.149 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 17:54:59.199 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:54:58.824 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 17:54:59.219 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 17:54:58.974 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 17:54:59.047 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 17:54:59.126 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 17:54:58.253 00:00:11.812 TCP 12.102.0.1:35718 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:50:53.813 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 17:56:00.101 00:00:11.805 TCP 12.102.0.1:40904 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:57:01.944 00:00:12.210 TCP 12.102.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:58:04.206 00:00:11.814 TCP 12.102.0.1:45512 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 261, avg pps: 0, avg bpp: 109 Time window: 2025-10-19 16:54:53 - 2025-10-19 17:58:16 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0019s User: 0.0029s Wall: 0.0021s flows/second: 76964.1 Runtime: 0.0021s