Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 01:53:54.849 00:06:00.133 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 01:58:52.331 00:00:11.858 TCP 12.102.0.1:60044 -> 1.101.0.1:3000 11 1507 1 2025-10-22 01:54:54.853 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 01:59:54.226 00:00:11.807 TCP 12.102.0.1:40038 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:01:06.516 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:01:06.538 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:01:06.684 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:01:06.669 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:01:06.492 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:01:06.523 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:01:06.614 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:00:56.083 00:00:11.812 TCP 12.102.0.1:37002 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:01:57.930 00:00:11.772 TCP 12.102.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:02:59.740 00:00:11.806 TCP 12.102.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:04:01.595 00:00:11.804 TCP 12.102.0.1:47398 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:05:03.439 00:00:11.818 TCP 12.102.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:00:54.854 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 02:06:06.575 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:06:06.597 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:06:06.584 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:06:06.666 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:06:06.702 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:06:06.490 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:06:06.671 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:06:05.286 00:00:11.797 TCP 12.102.0.1:58592 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:01:54.856 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 02:07:07.122 00:00:11.802 TCP 12.102.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:08:08.975 00:00:11.773 TCP 12.102.0.1:46914 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:09:10.789 00:00:11.766 TCP 12.102.0.1:47728 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:10:12.594 00:00:11.809 TCP 12.102.0.1:46464 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:11:06.667 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:11:06.765 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:11:06.949 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:11:06.951 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:11:06.573 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:11:06.743 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:11:07.045 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:11:14.445 00:00:11.759 TCP 12.102.0.1:38140 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:12:16.240 00:00:11.805 TCP 12.102.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:07:54.858 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 02:13:18.088 00:00:11.808 TCP 12.102.0.1:54582 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:08:54.859 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 02:14:19.935 00:00:11.811 TCP 12.102.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:15:21.786 00:00:12.038 TCP 12.102.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:16:06.852 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:16:06.874 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:16:06.662 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:16:07.144 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:16:07.075 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:16:07.161 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:16:07.031 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:16:23.867 00:00:11.764 TCP 12.102.0.1:42536 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:17:25.674 00:00:11.766 TCP 12.102.0.1:58960 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:18:27.479 00:00:11.801 TCP 12.102.0.1:47262 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:19:29.322 00:00:11.758 TCP 12.102.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:14:54.859 00:06:00.129 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 02:20:31.119 00:00:11.804 TCP 12.102.0.1:58086 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:15:54.861 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 02:21:06.928 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:21:06.909 00:00:00.019 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:21:07.032 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:21:07.094 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:21:07.129 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:21:07.096 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:21:07.010 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:21:32.962 00:00:11.811 TCP 12.102.0.1:56372 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:22:34.804 00:00:12.124 TCP 12.102.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:23:36.969 00:00:11.812 TCP 12.102.0.1:47202 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:24:38.819 00:00:12.231 TCP 12.102.0.1:54826 -> 1.101.0.1:3000 15 1926 1 2025-10-22 02:25:41.094 00:00:11.759 TCP 12.102.0.1:51418 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:26:07.070 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:26:07.092 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:26:07.109 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:26:07.341 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:26:07.105 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:26:07.113 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:26:07.174 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:26:42.890 00:00:11.847 TCP 12.102.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:21:54.859 00:06:00.129 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 02:27:44.773 00:00:11.759 TCP 12.102.0.1:44490 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:22:54.862 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 02:28:46.568 00:00:11.803 TCP 12.102.0.1:58322 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:29:48.413 00:00:11.802 TCP 12.102.0.1:37254 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:30:50.253 00:00:11.799 TCP 12.102.0.1:40550 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:31:07.241 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:31:07.310 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:31:06.993 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:31:07.267 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:31:07.361 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:31:07.087 00:00:00.035 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:31:07.220 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:31:52.091 00:00:11.804 TCP 12.102.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:32:53.933 00:00:11.806 TCP 12.102.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:28:54.861 00:06:00.129 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 02:33:55.778 00:00:12.191 TCP 12.102.0.1:35074 -> 1.101.0.1:3000 15 1926 1 2025-10-22 02:29:54.865 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 02:34:58.010 00:00:11.802 TCP 12.102.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:35:59.852 00:00:11.800 TCP 12.102.0.1:51206 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:36:07.288 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:36:07.334 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:36:07.412 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:36:07.434 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:36:07.476 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:36:07.290 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:36:07.267 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:37:01.689 00:00:11.801 TCP 12.102.0.1:58700 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:38:03.529 00:00:11.803 TCP 12.102.0.1:47554 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:39:05.369 00:00:11.819 TCP 12.102.0.1:44064 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:40:07.222 00:00:11.801 TCP 12.102.0.1:49896 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:35:54.864 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 02:41:07.306 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:41:07.726 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:41:07.644 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:41:07.512 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:41:07.782 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:41:07.693 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:41:07.284 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:41:09.085 00:00:11.806 TCP 12.102.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:36:54.866 00:06:00.122 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 02:42:10.932 00:00:11.820 TCP 12.102.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:43:12.786 00:00:11.806 TCP 12.102.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:44:14.633 00:00:11.759 TCP 12.102.0.1:45188 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:45:16.434 00:00:11.804 TCP 12.102.0.1:41772 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:46:07.724 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:46:07.557 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:46:07.706 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:46:08.044 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:46:07.827 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:46:08.100 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:46:07.701 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:46:18.314 00:00:11.800 TCP 12.102.0.1:36058 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:47:20.155 00:00:11.807 TCP 12.102.0.1:44598 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:42:54.866 00:06:00.127 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 02:48:21.998 00:00:11.834 TCP 12.102.0.1:39752 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:43:54.868 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 02:49:23.872 00:00:11.800 TCP 12.102.0.1:48544 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:50:25.709 00:00:11.809 TCP 12.102.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:51:07.691 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:51:07.714 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:51:07.700 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:51:07.747 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:51:07.923 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:51:07.552 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:51:07.694 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:51:27.557 00:00:11.823 TCP 12.102.0.1:45646 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:52:29.418 00:00:11.805 TCP 12.102.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:53:31.259 00:00:12.082 TCP 12.102.0.1:45452 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:54:33.379 00:00:11.767 TCP 12.102.0.1:54962 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:49:54.867 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 02:55:35.181 00:00:11.798 TCP 12.102.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:50:54.869 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 02:56:07.795 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 02:56:07.619 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 02:56:07.748 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 02:56:07.641 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 02:56:07.788 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 02:56:07.706 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 02:56:07.772 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 02:56:37.034 00:00:11.823 TCP 12.102.0.1:53750 -> 1.101.0.1:3000 11 1507 1 2025-10-22 02:57:38.892 00:00:11.800 TCP 12.102.0.1:53494 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 260, avg pps: 0, avg bpp: 108 Time window: 2025-10-22 01:53:54 - 2025-10-22 02:57:50 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0042s User: 0.0017s Wall: 0.0037s flows/second: 43079.3 Runtime: 0.0037s