Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 08:58:52.084 00:00:11.762 TCP 12.102.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-10-22 08:59:53.894 00:00:11.801 TCP 12.102.0.1:54632 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:00:55.738 00:00:11.798 TCP 12.102.0.1:57376 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:01:14.923 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:01:14.947 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:01:14.991 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:01:14.691 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:01:14.974 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:01:15.084 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:01:14.953 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 08:57:54.976 00:05:00.173 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:01:57.575 00:00:11.812 TCP 12.102.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:02:59.424 00:00:11.798 TCP 12.102.0.1:45438 -> 1.101.0.1:3000 11 1507 1 2025-10-22 08:59:54.978 00:05:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:04:01.265 00:00:11.800 TCP 12.102.0.1:56528 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:05:03.102 00:00:11.803 TCP 12.102.0.1:36486 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:06:14.721 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:06:15.252 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:06:15.182 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:06:04.943 00:00:11.809 TCP 12.102.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:06:14.744 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:06:15.063 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:06:15.009 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:06:15.134 00:00:00.044 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:07:06.806 00:00:11.817 TCP 12.102.0.1:48042 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:03:54.977 00:05:00.173 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:08:08.672 00:00:11.764 TCP 12.102.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:09:10.486 00:00:12.248 TCP 12.102.0.1:53478 -> 1.101.0.1:3000 15 1926 1 2025-10-22 09:05:54.979 00:05:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:10:12.771 00:00:11.760 TCP 12.102.0.1:37744 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:11:15.342 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:11:15.411 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:11:15.560 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:11:15.449 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:11:15.335 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:11:15.346 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:11:15.318 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:11:14.573 00:00:11.761 TCP 12.102.0.1:54250 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:12:16.378 00:00:11.824 TCP 12.102.0.1:49780 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:13:18.244 00:00:11.764 TCP 12.102.0.1:41404 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:09:54.979 00:05:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:14:20.065 00:00:11.810 TCP 12.102.0.1:32932 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:15:21.912 00:00:11.821 TCP 12.102.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:11:54.982 00:05:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:16:15.257 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:16:15.280 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:16:15.324 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:16:15.354 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:16:15.209 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:16:15.066 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:16:15.048 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:16:23.774 00:00:11.798 TCP 12.102.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:17:25.610 00:00:12.543 TCP 12.102.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:18:28.190 00:00:11.908 TCP 12.102.0.1:59416 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:19:30.132 00:00:11.807 TCP 12.102.0.1:56040 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:15:54.980 00:05:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:20:31.981 00:00:11.815 TCP 12.102.0.1:37852 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:21:15.275 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:21:15.408 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:21:15.466 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:21:15.536 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:21:15.276 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:21:15.266 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:21:15.252 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:21:33.834 00:00:11.809 TCP 12.102.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:17:54.982 00:05:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:22:35.682 00:00:11.799 TCP 12.102.0.1:37274 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:23:37.523 00:00:11.828 TCP 12.102.0.1:46166 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:24:39.391 00:00:11.764 TCP 12.102.0.1:45534 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:25:41.194 00:00:11.803 TCP 12.102.0.1:38896 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:21:54.980 00:05:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:26:15.676 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:26:15.502 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:26:15.674 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:26:15.653 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:26:15.862 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:26:15.619 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:26:15.653 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:26:43.060 00:00:11.761 TCP 12.102.0.1:58648 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:27:44.859 00:00:11.761 TCP 12.102.0.1:44198 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:23:54.983 00:05:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:28:46.659 00:00:11.819 TCP 12.102.0.1:53392 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:29:48.520 00:00:11.802 TCP 12.102.0.1:33818 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:30:50.364 00:00:11.772 TCP 12.102.0.1:51444 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:31:15.730 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:31:15.753 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:31:15.760 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:31:15.798 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:31:15.791 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:31:15.762 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:31:15.754 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:27:54.981 00:05:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:31:52.184 00:00:11.806 TCP 12.102.0.1:52934 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:32:54.040 00:00:11.866 TCP 12.102.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:29:54.985 00:05:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:33:55.947 00:00:11.808 TCP 12.102.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:34:57.795 00:00:11.834 TCP 12.102.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:36:15.564 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:35:59.668 00:00:11.810 TCP 12.102.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:36:15.588 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:36:15.630 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:36:15.435 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:36:15.623 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:36:15.781 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:36:15.675 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:37:01.517 00:00:11.817 TCP 12.102.0.1:55916 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:33:54.984 00:05:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:38:03.370 00:00:11.821 TCP 12.102.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:39:05.231 00:00:11.805 TCP 12.102.0.1:57412 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:35:54.985 00:05:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:40:07.082 00:00:11.801 TCP 12.102.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:41:15.765 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:41:15.789 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:41:15.730 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:41:15.822 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:41:15.944 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:41:15.835 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:41:15.782 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:41:08.921 00:00:11.822 TCP 12.102.0.1:42836 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:42:10.787 00:00:11.762 TCP 12.102.0.1:56924 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:43:12.590 00:00:11.817 TCP 12.102.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:39:54.984 00:05:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:44:14.447 00:00:11.813 TCP 12.102.0.1:52204 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:45:16.298 00:00:11.799 TCP 12.102.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:41:54.986 00:05:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:46:15.828 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:46:15.851 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:46:15.797 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:46:15.951 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:46:15.991 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:46:16.038 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:46:15.921 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:46:18.138 00:00:11.813 TCP 12.102.0.1:59828 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:47:19.989 00:00:18.388 TCP 12.102.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:48:28.414 00:00:11.775 TCP 12.102.0.1:60304 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:49:30.244 00:00:11.774 TCP 12.102.0.1:44236 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:45:54.984 00:05:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:50:32.086 00:00:11.826 TCP 12.102.0.1:52148 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:51:15.793 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:51:15.815 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:51:15.955 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:51:16.027 00:00:00.017 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:51:15.986 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:51:15.937 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:51:15.977 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:51:33.956 00:00:11.813 TCP 12.102.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:47:54.986 00:05:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:52:35.819 00:00:11.814 TCP 12.102.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:53:37.671 00:00:11.815 TCP 12.102.0.1:59092 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:54:39.525 00:00:11.806 TCP 12.102.0.1:59766 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:51:54.985 00:05:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-22 09:55:41.371 00:00:11.818 TCP 12.102.0.1:52768 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:56:15.971 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 09:56:16.285 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 09:56:16.102 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 09:56:16.273 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 09:56:16.171 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 09:56:15.976 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 09:56:15.949 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 09:56:43.225 00:00:12.293 TCP 12.102.0.1:54472 -> 1.101.0.1:3000 11 1507 1 2025-10-22 09:53:54.987 00:05:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-22 09:57:45.553 00:00:11.818 TCP 12.102.0.1:58726 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 270, avg pps: 0, avg bpp: 109 Time window: 2025-10-22 08:57:54 - 2025-10-22 09:58:55 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0024s User: 0.0024s Wall: 0.0021s flows/second: 78643.2 Runtime: 0.0021s