Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 05:58:52.030 00:00:11.801 TCP 12.102.0.1:45830 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:54:54.064 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 05:59:53.867 00:00:11.808 TCP 12.102.0.1:45720 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:00:13.207 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.361 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.460 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.421 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.418 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.357 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.185 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 05:55:54.068 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:00:55.717 00:00:11.773 TCP 12.102.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:01:57.523 00:00:11.816 TCP 12.102.0.1:35244 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:02:59.377 00:00:11.820 TCP 12.102.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:04:01.220 00:00:11.803 TCP 12.102.0.1:41920 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:05:13.771 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:05:03.074 00:00:11.810 TCP 12.102.0.1:36350 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:05:13.755 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.670 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.854 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.992 00:00:00.035 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.636 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.750 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:06:04.925 00:00:11.818 TCP 12.102.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:01:54.066 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 06:07:06.785 00:00:11.758 TCP 12.102.0.1:37754 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:02:54.069 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:08:08.577 00:00:12.235 TCP 12.102.0.1:55338 -> 1.101.0.1:3000 15 1926 1 2025-10-20 06:09:10.846 00:00:11.799 TCP 12.102.0.1:49010 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:10:13.797 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:10:13.819 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.934 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.850 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.621 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.913 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.819 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:10:12.685 00:00:11.808 TCP 12.102.0.1:36784 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:11:14.532 00:00:11.800 TCP 12.102.0.1:44638 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:12:16.369 00:00:11.815 TCP 12.102.0.1:56470 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:13:18.224 00:00:11.806 TCP 12.102.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:08:54.068 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 06:14:20.083 00:00:11.801 TCP 12.102.0.1:48366 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:09:54.072 00:06:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:15:13.935 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:15:13.957 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:15:13.960 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:15:13.863 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:15:13.856 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:15:13.944 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:15:13.915 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:15:21.928 00:00:13.042 TCP 12.102.0.1:40508 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:16:25.010 00:00:11.798 TCP 12.102.0.1:50226 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:17:26.849 00:00:11.772 TCP 12.102.0.1:58726 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:18:28.659 00:00:11.824 TCP 12.102.0.1:38356 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:19:30.508 00:00:11.818 TCP 12.102.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:20:14.100 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:20:14.124 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:20:13.870 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:20:14.134 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:20:13.692 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:20:13.991 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:20:14.055 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:20:32.366 00:00:11.795 TCP 12.102.0.1:46196 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:15:54.070 00:06:00.094 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 06:21:34.197 00:00:12.756 TCP 12.102.0.1:37816 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:16:54.073 00:06:00.089 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:22:36.990 00:00:11.798 TCP 12.102.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:23:38.827 00:00:11.762 TCP 12.102.0.1:47280 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:24:40.628 00:00:11.804 TCP 12.102.0.1:50800 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:25:14.115 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:25:14.140 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.168 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.130 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.002 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.172 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.190 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:25:42.469 00:00:11.802 TCP 12.102.0.1:60406 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:26:44.312 00:00:11.798 TCP 12.102.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:22:54.073 00:06:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 06:27:46.148 00:00:11.804 TCP 12.102.0.1:50572 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:23:54.076 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:28:48.000 00:00:12.247 TCP 12.102.0.1:37696 -> 1.101.0.1:3000 15 1926 1 2025-10-20 06:29:50.286 00:00:11.757 TCP 12.102.0.1:40842 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:30:14.187 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:30:14.212 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.444 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.327 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.087 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.093 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.211 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:30:52.090 00:00:12.111 TCP 12.102.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:31:54.241 00:00:11.813 TCP 12.102.0.1:52544 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:32:56.094 00:00:11.758 TCP 12.102.0.1:58620 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:33:57.894 00:00:11.857 TCP 12.102.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:29:54.074 00:06:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 06:34:59.785 00:00:11.811 TCP 12.102.0.1:50420 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:35:14.514 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:35:14.649 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.537 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.646 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.512 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.566 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.588 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:30:54.077 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:36:01.640 00:00:11.802 TCP 12.102.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:37:03.481 00:00:12.169 TCP 12.102.0.1:54790 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:38:05.698 00:00:11.809 TCP 12.102.0.1:51716 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:39:07.539 00:00:11.761 TCP 12.102.0.1:34734 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:40:14.386 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:40:14.408 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.605 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.594 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.483 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.531 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.407 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:40:09.356 00:00:11.861 TCP 12.102.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:41:11.262 00:00:11.768 TCP 12.102.0.1:46530 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:36:54.075 00:06:00.114 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 06:42:13.084 00:00:11.807 TCP 12.102.0.1:33092 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:37:54.078 00:06:00.109 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:43:14.928 00:00:11.819 TCP 12.102.0.1:38566 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:44:16.785 00:00:11.808 TCP 12.102.0.1:54928 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:45:14.697 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.442 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.551 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.358 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.517 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.500 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.478 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:45:18.630 00:00:11.803 TCP 12.102.0.1:48006 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:46:20.472 00:00:11.854 TCP 12.102.0.1:34352 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:47:22.366 00:00:11.820 TCP 12.102.0.1:36780 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:48:24.222 00:00:11.804 TCP 12.102.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:43:54.077 00:06:00.114 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 06:49:26.078 00:00:12.035 TCP 12.102.0.1:48134 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:44:54.081 00:06:00.108 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:50:14.516 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.513 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.736 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.677 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.626 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.554 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.490 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:50:28.179 00:00:11.807 TCP 12.102.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:51:30.033 00:00:11.831 TCP 12.102.0.1:43994 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:52:31.901 00:00:12.357 TCP 12.102.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:53:34.293 00:00:11.799 TCP 12.102.0.1:44646 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:54:36.132 00:00:11.797 TCP 12.102.0.1:59668 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:55:14.684 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-20 06:55:14.707 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-20 06:55:14.813 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:55:14.578 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-20 06:55:14.710 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-20 06:55:14.848 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-20 06:55:14.871 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-20 06:55:37.968 00:00:11.800 TCP 12.102.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:50:54.078 00:06:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-20 06:56:39.810 00:00:11.807 TCP 12.102.0.1:41632 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:51:54.080 00:06:00.108 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-20 06:57:41.649 00:00:12.051 TCP 12.102.0.1:48728 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 264, avg pps: 0, avg bpp: 108 Time window: 2025-10-20 05:54:54 - 2025-10-20 06:57:54 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0053s User: 0.0009s Wall: 0.0025s flows/second: 63036.7 Runtime: 0.0026s