Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 14:58:57.298 00:00:11.807 TCP 12.102.0.1:54490 -> 1.101.0.1:3000 11 1507 1 2025-10-22 14:54:55.123 00:06:00.120 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 14:59:59.142 00:00:11.775 TCP 12.102.0.1:48450 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:01:00.956 00:00:11.835 TCP 12.102.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:01:22.175 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:01:22.334 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:01:22.105 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:01:22.218 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:01:22.318 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:01:22.187 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:01:22.152 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:02:02.828 00:00:11.803 TCP 12.102.0.1:47202 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:03:04.676 00:00:12.312 TCP 12.102.0.1:56560 -> 1.101.0.1:3000 11 1507 1 2025-10-22 14:58:55.121 00:06:00.125 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 15:04:07.034 00:00:11.807 TCP 12.102.0.1:50130 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:05:08.885 00:00:11.805 TCP 12.102.0.1:35370 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:06:22.282 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:06:22.593 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:06:22.636 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:06:10.728 00:00:11.809 TCP 12.102.0.1:39124 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:06:22.458 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:06:22.379 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:06:22.462 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:06:22.259 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:01:55.124 00:06:00.120 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 15:07:12.574 00:00:11.812 TCP 12.102.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:08:14.418 00:00:11.804 TCP 12.102.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:09:16.265 00:00:11.806 TCP 12.102.0.1:42712 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:10:18.107 00:00:11.806 TCP 12.102.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:05:55.127 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 15:11:22.369 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:11:22.336 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:11:22.583 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:11:22.314 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:11:22.391 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:11:22.422 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:11:22.520 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:11:19.953 00:00:11.801 TCP 12.102.0.1:52972 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:12:21.792 00:00:11.760 TCP 12.102.0.1:52492 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:13:23.590 00:00:11.914 TCP 12.102.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:08:55.131 00:06:00.117 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 15:14:25.542 00:00:12.240 TCP 12.102.0.1:51926 -> 1.101.0.1:3000 15 1926 1 2025-10-22 15:15:27.821 00:00:11.799 TCP 12.102.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:16:22.577 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:16:22.590 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:16:22.584 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:16:22.561 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:16:22.664 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:16:22.533 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:16:22.554 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:16:29.656 00:00:11.817 TCP 12.102.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:17:31.512 00:00:11.770 TCP 12.102.0.1:38518 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:12:55.149 00:06:00.100 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 15:18:33.320 00:00:11.809 TCP 12.102.0.1:60358 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:19:35.163 00:00:11.804 TCP 12.102.0.1:52542 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:20:37.004 00:00:11.795 TCP 12.102.0.1:46970 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:15:55.151 00:06:00.095 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 15:21:22.518 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:21:22.542 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:21:22.675 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:21:22.857 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:21:22.733 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:21:22.694 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:21:22.545 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:21:38.842 00:00:11.812 TCP 12.102.0.1:52338 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:22:40.690 00:00:11.802 TCP 12.102.0.1:53392 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:23:42.540 00:00:11.812 TCP 12.102.0.1:54914 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:19:55.150 00:06:00.102 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 15:24:44.389 00:00:11.809 TCP 12.102.0.1:57390 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:25:46.236 00:00:11.810 TCP 12.102.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:26:22.829 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:26:22.706 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:26:22.821 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:26:22.726 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:26:22.820 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:26:22.612 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:26:22.806 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:26:48.084 00:00:11.886 TCP 12.102.0.1:47652 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:22:55.153 00:06:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 15:27:50.022 00:00:11.818 TCP 12.102.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:28:51.883 00:00:11.815 TCP 12.102.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:29:53.751 00:00:11.761 TCP 12.102.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:30:55.563 00:00:11.816 TCP 12.102.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:31:22.833 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:31:22.856 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:31:22.977 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:31:22.962 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:31:22.945 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:31:22.964 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:31:22.977 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:26:55.151 00:06:00.103 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 15:31:57.414 00:00:11.800 TCP 12.102.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:32:59.256 00:00:11.818 TCP 12.102.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:34:01.111 00:00:12.660 TCP 12.102.0.1:54426 -> 1.101.0.1:3000 17 2241 1 2025-10-22 15:29:55.155 00:06:00.096 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 15:35:03.811 00:00:11.761 TCP 12.102.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:36:05.607 00:00:11.802 TCP 12.102.0.1:51370 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:36:23.114 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:36:23.131 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:36:22.997 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:36:23.188 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:36:22.980 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:36:23.095 00:00:00.045 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:36:23.092 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:37:07.443 00:00:11.789 TCP 12.102.0.1:54130 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:38:09.268 00:00:11.798 TCP 12.102.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:33:55.152 00:06:00.102 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 15:39:11.105 00:00:11.803 TCP 12.102.0.1:59442 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:40:12.941 00:00:12.162 TCP 12.102.0.1:56904 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:41:23.106 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:41:15.142 00:00:11.805 TCP 12.102.0.1:33840 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:41:23.131 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:41:23.023 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:41:23.157 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:41:23.296 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:41:23.427 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:41:23.108 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:36:55.155 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 15:42:16.985 00:00:11.774 TCP 12.102.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:43:18.800 00:00:11.800 TCP 12.102.0.1:44422 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:44:20.645 00:00:11.810 TCP 12.102.0.1:35306 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:45:22.499 00:00:11.807 TCP 12.102.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:40:55.154 00:06:00.103 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 15:46:23.243 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:46:23.267 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:46:23.368 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:46:23.373 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:46:23.355 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:46:23.164 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:46:23.263 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:46:24.345 00:00:11.803 TCP 12.102.0.1:60560 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:47:26.185 00:00:11.805 TCP 12.102.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:48:28.035 00:00:11.773 TCP 12.102.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:43:55.156 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 15:49:29.849 00:00:11.806 TCP 12.102.0.1:58876 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:50:31.701 00:00:11.800 TCP 12.102.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:51:23.010 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:51:23.391 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:51:23.137 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:51:23.222 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:51:23.378 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:51:23.189 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:51:22.986 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:51:33.544 00:00:11.802 TCP 12.102.0.1:57802 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:52:35.391 00:00:11.813 TCP 12.102.0.1:38688 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:47:55.155 00:06:00.102 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 15:53:37.245 00:00:11.765 TCP 12.102.0.1:55764 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:54:39.077 00:00:11.802 TCP 12.102.0.1:37268 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:55:40.915 00:00:11.834 TCP 12.102.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:50:55.158 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 15:56:23.428 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 15:56:23.451 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 15:56:23.045 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 15:56:23.282 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 15:56:23.407 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 15:56:23.399 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 15:56:23.391 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 15:56:42.785 00:00:11.801 TCP 12.102.0.1:59354 -> 1.101.0.1:3000 11 1507 1 2025-10-22 15:57:44.628 00:00:11.801 TCP 12.102.0.1:49722 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124364, total packets: 1138, avg bps: 263, avg pps: 0, avg bpp: 109 Time window: 2025-10-22 14:54:55 - 2025-10-22 15:57:56 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0033s User: 0.0011s Wall: 0.0014s flows/second: 113417.4 Runtime: 0.0014s