Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 19:58:46.684 00:00:11.803 TCP 12.102.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:00:01.560 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 19:59:48.525 00:00:11.800 TCP 12.102.0.1:40370 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:00:01.584 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:00:01.753 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:00:01.821 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:00:01.510 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:00:01.782 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:00:01.501 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:00:50.364 00:00:11.850 TCP 12.102.0.1:37208 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:56:53.865 00:06:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:01:52.254 00:00:11.806 TCP 12.102.0.1:58940 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:02:54.100 00:00:11.800 TCP 12.102.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:03:55.935 00:00:11.809 TCP 12.102.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:59:53.868 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 20:05:01.579 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:05:01.972 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:05:01.858 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:05:01.557 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:05:02.181 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:05:02.059 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:05:02.174 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:04:57.781 00:00:11.804 TCP 12.102.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:05:59.624 00:00:11.799 TCP 12.102.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:07:01.463 00:00:11.805 TCP 12.102.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:08:03.306 00:00:12.242 TCP 12.102.0.1:48968 -> 1.101.0.1:3000 15 1926 1 2025-10-19 20:03:53.865 00:06:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:09:05.587 00:00:11.812 TCP 12.102.0.1:39854 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:10:01.822 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:10:01.860 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:10:01.713 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:10:01.862 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:10:01.709 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:10:01.754 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:10:01.799 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:10:07.436 00:00:11.809 TCP 12.102.0.1:55564 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:11:09.286 00:00:11.806 TCP 12.102.0.1:54358 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:06:53.870 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 20:12:11.127 00:00:11.822 TCP 12.102.0.1:51828 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:13:12.990 00:00:12.231 TCP 12.102.0.1:59260 -> 1.101.0.1:3000 15 1926 1 2025-10-19 20:14:15.261 00:00:11.806 TCP 12.102.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:15:01.861 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:15:01.884 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:15:01.707 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:15:01.867 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:15:01.887 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:15:01.891 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:15:01.979 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:15:17.102 00:00:11.798 TCP 12.102.0.1:37098 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:10:53.866 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:16:18.946 00:00:11.815 TCP 12.102.0.1:47220 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:17:20.794 00:00:11.767 TCP 12.102.0.1:36162 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:18:22.602 00:00:11.802 TCP 12.102.0.1:39694 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:13:53.870 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 20:19:24.442 00:00:11.760 TCP 12.102.0.1:48134 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:20:01.951 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:20:01.974 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:20:01.911 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:20:01.696 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:20:01.807 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:20:01.886 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:20:02.037 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:20:26.244 00:00:12.829 TCP 12.102.0.1:60842 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:21:29.109 00:00:11.761 TCP 12.102.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:22:30.909 00:00:11.829 TCP 12.102.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:17:53.867 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:23:32.776 00:00:11.800 TCP 12.102.0.1:45872 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:24:34.614 00:00:11.807 TCP 12.102.0.1:41022 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:25:02.586 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:25:02.609 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:25:02.711 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:25:02.534 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:25:02.711 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:25:02.799 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:25:02.754 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:25:36.462 00:00:11.803 TCP 12.102.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:20:53.871 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 20:26:38.298 00:00:11.807 TCP 12.102.0.1:43526 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:27:40.139 00:00:11.819 TCP 12.102.0.1:36056 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:28:41.995 00:00:11.800 TCP 12.102.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:24:53.868 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:29:43.830 00:00:11.807 TCP 12.102.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:30:02.023 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:30:02.045 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:30:02.357 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:30:02.208 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:30:02.072 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:30:02.180 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:30:02.045 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:30:45.672 00:00:11.804 TCP 12.102.0.1:44256 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:31:47.519 00:00:11.801 TCP 12.102.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:27:53.872 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 20:32:49.368 00:00:11.825 TCP 12.102.0.1:51916 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:33:51.235 00:00:12.241 TCP 12.102.0.1:50032 -> 1.101.0.1:3000 15 1926 1 2025-10-19 20:35:02.238 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:34:53.515 00:00:11.800 TCP 12.102.0.1:40644 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:35:02.261 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:35:02.349 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:35:02.441 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:35:02.405 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:35:02.378 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:35:02.233 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:35:55.355 00:00:11.772 TCP 12.102.0.1:53286 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:31:53.874 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:36:57.166 00:00:11.798 TCP 12.102.0.1:46708 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:37:59.007 00:00:11.792 TCP 12.102.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:39:00.839 00:00:11.808 TCP 12.102.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:34:53.877 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 20:40:02.063 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:40:02.402 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:40:02.088 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:40:02.525 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:40:02.526 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:40:02.330 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:40:02.575 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:40:02.690 00:00:11.807 TCP 12.102.0.1:50330 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:41:04.532 00:00:11.804 TCP 12.102.0.1:33904 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:42:06.374 00:00:11.778 TCP 12.102.0.1:39608 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:43:08.187 00:00:11.812 TCP 12.102.0.1:57692 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:38:53.875 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:44:10.071 00:00:11.757 TCP 12.102.0.1:51908 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:45:02.448 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:45:02.470 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:45:02.501 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:45:02.526 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:45:02.579 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:45:02.615 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:45:02.550 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:45:11.870 00:00:11.806 TCP 12.102.0.1:33708 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:46:13.716 00:00:11.804 TCP 12.102.0.1:39714 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:41:53.878 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 20:47:15.561 00:00:11.810 TCP 12.102.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:48:17.409 00:00:11.806 TCP 12.102.0.1:32838 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:49:19.258 00:00:11.805 TCP 12.102.0.1:56446 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:50:02.624 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:50:02.648 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:50:02.627 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:50:02.633 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:50:02.617 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:50:02.701 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:50:02.410 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:50:21.101 00:00:11.800 TCP 12.102.0.1:37050 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:45:53.876 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:51:22.942 00:00:11.775 TCP 12.102.0.1:50828 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:52:24.748 00:00:11.799 TCP 12.102.0.1:56594 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:53:26.584 00:00:11.802 TCP 12.102.0.1:37136 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:48:53.881 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-19 20:54:28.424 00:00:11.807 TCP 12.102.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:55:02.458 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-19 20:55:02.481 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-19 20:55:02.596 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:55:02.784 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-19 20:55:02.744 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-19 20:55:02.707 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-19 20:55:02.720 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-19 20:55:30.279 00:00:11.762 TCP 12.102.0.1:57790 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:56:32.081 00:00:11.803 TCP 12.102.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:57:33.921 00:00:11.823 TCP 12.102.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:52:53.880 00:06:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-19 20:58:35.778 00:00:11.802 TCP 12.102.0.1:46984 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125975, total packets: 1151, avg bps: 270, avg pps: 0, avg bpp: 109 Time window: 2025-10-19 19:56:53 - 2025-10-19 20:58:53 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0027s User: 0.0018s Wall: 0.0020s flows/second: 80158.7 Runtime: 0.0020s