Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 17:53:55.212 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 17:59:27.106 00:00:11.807 TCP 12.102.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:00:28.951 00:00:11.807 TCP 12.102.0.1:43442 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:01:26.145 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:01:25.814 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:01:26.017 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:01:26.425 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:01:25.875 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:01:26.471 00:00:00.029 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:01:26.121 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:01:30.805 00:00:11.814 TCP 12.102.0.1:52590 -> 1.101.0.1:3000 11 1507 1 2025-10-22 17:56:55.214 00:06:00.073 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:02:32.646 00:00:11.816 TCP 12.102.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:03:34.494 00:00:11.806 TCP 12.102.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:04:36.334 00:00:11.805 TCP 12.102.0.1:33430 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:05:38.176 00:00:11.804 TCP 12.102.0.1:60970 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:00:55.216 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 18:06:26.057 00:00:00.038 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:06:25.823 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:06:25.948 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:06:26.026 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:06:26.152 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:06:25.921 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:06:26.035 00:00:00.038 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:06:40.021 00:00:11.804 TCP 12.102.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:07:41.864 00:00:11.809 TCP 12.102.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:08:43.714 00:00:11.801 TCP 12.102.0.1:54088 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:03:55.218 00:06:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:09:45.552 00:00:12.175 TCP 12.102.0.1:54652 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:10:47.763 00:00:11.798 TCP 12.102.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:11:26.133 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:11:26.156 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:11:26.202 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:11:25.926 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:11:25.977 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:11:26.017 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:11:26.141 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:11:49.593 00:00:11.802 TCP 12.102.0.1:34462 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:07:55.216 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 18:12:51.430 00:00:11.828 TCP 12.102.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:13:53.266 00:00:11.812 TCP 12.102.0.1:47664 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:14:55.113 00:00:12.274 TCP 12.102.0.1:47880 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:10:55.219 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:15:57.427 00:00:11.829 TCP 12.102.0.1:45594 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:16:26.181 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:16:26.047 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:16:26.039 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:16:25.840 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:16:26.253 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:16:25.924 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:16:26.158 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:16:59.302 00:00:11.810 TCP 12.102.0.1:43174 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:18:01.151 00:00:11.805 TCP 12.102.0.1:51908 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:19:02.988 00:00:11.797 TCP 12.102.0.1:39722 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:14:55.216 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 18:20:04.823 00:00:12.333 TCP 12.102.0.1:48042 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:21:07.192 00:00:11.804 TCP 12.102.0.1:57408 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:21:25.985 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:21:26.008 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:21:26.394 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:21:26.322 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:21:26.134 00:00:00.038 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:21:26.216 00:00:00.033 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:21:26.202 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:22:09.035 00:00:11.799 TCP 12.102.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:17:55.219 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:23:10.870 00:00:11.773 TCP 12.102.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:24:12.686 00:00:11.807 TCP 12.102.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:25:14.530 00:00:11.801 TCP 12.102.0.1:44636 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:26:26.389 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:26:26.668 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:26:26.543 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:26:26.632 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:26:26.826 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:26:26.609 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:26:26.366 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:26:16.367 00:00:11.843 TCP 12.102.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:21:55.217 00:06:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 18:27:18.249 00:00:22.000 TCP 12.102.0.1:45628 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:28:30.284 00:00:11.805 TCP 12.102.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:29:32.129 00:00:11.840 TCP 12.102.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:24:55.222 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:30:34.008 00:00:11.818 TCP 12.102.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:31:26.230 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:31:26.252 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:31:26.610 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:31:26.549 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:31:26.273 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:31:26.488 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:31:26.375 00:00:00.016 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:31:35.867 00:00:11.800 TCP 12.102.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:32:37.706 00:00:11.800 TCP 12.102.0.1:39948 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:33:39.543 00:00:11.808 TCP 12.102.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:28:55.219 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 18:34:41.395 00:00:11.817 TCP 12.102.0.1:41742 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:35:43.247 00:00:14.629 TCP 12.102.0.1:33876 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:36:26.298 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:36:26.320 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:36:26.561 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:36:26.681 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:36:26.610 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:36:26.691 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:36:26.430 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:31:55.222 00:06:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:36:47.926 00:00:11.824 TCP 12.102.0.1:45692 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:37:49.798 00:00:11.806 TCP 12.102.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:38:51.650 00:00:11.820 TCP 12.102.0.1:37836 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:39:53.517 00:00:11.815 TCP 12.102.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:35:55.221 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 18:40:55.371 00:00:11.785 TCP 12.102.0.1:56584 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:41:27.163 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:41:27.186 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:41:27.268 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:41:27.258 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:41:27.427 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:41:27.461 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:41:27.317 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:41:57.196 00:00:11.798 TCP 12.102.0.1:40738 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:42:59.047 00:00:11.800 TCP 12.102.0.1:34246 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:38:55.222 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:44:00.885 00:00:11.798 TCP 12.102.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:45:02.722 00:00:11.860 TCP 12.102.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:46:04.626 00:00:11.801 TCP 12.102.0.1:37946 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:46:26.802 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:46:26.883 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:46:26.893 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:46:26.885 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:46:26.752 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:46:26.779 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:46:26.992 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:47:06.464 00:00:11.804 TCP 12.102.0.1:35982 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:42:55.222 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 18:48:08.305 00:00:11.804 TCP 12.102.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:49:10.143 00:00:11.783 TCP 12.102.0.1:54080 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:50:11.961 00:00:11.803 TCP 12.102.0.1:37588 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:45:55.224 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:51:26.835 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:51:13.806 00:00:11.803 TCP 12.102.0.1:59354 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:51:26.858 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:51:26.905 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:51:26.868 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:51:26.801 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:51:27.039 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:51:26.982 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:52:15.648 00:00:11.800 TCP 12.102.0.1:38692 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:53:17.485 00:00:11.804 TCP 12.102.0.1:53584 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:54:19.330 00:00:11.800 TCP 12.102.0.1:51916 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:49:55.223 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-22 18:55:21.167 00:00:12.965 TCP 12.102.0.1:34196 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:56:26.935 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-22 18:56:26.687 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-22 18:56:26.978 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-22 18:56:26.960 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-22 18:56:26.982 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-22 18:56:27.040 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 18:56:27.029 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-22 18:56:24.173 00:00:11.756 TCP 12.102.0.1:35114 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:57:25.971 00:00:11.818 TCP 12.102.0.1:38352 -> 1.101.0.1:3000 11 1507 1 2025-10-22 18:52:55.227 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-22 18:58:27.819 00:00:11.759 TCP 12.102.0.1:41942 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 254, avg pps: 0, avg bpp: 108 Time window: 2025-10-22 17:53:55 - 2025-10-22 18:58:55 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0028s User: 0.0019s Wall: 0.0017s flows/second: 91641.2 Runtime: 0.0018s