Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 01:59:32.936 00:00:11.806 TCP 12.102.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:00:34.786 00:00:11.769 TCP 12.102.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:01:35.692 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:01:35.715 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:01:35.494 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:01:35.426 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:01:35.732 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:01:35.339 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:01:35.524 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:01:36.595 00:00:11.813 TCP 12.102.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:56:55.363 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:02:38.447 00:00:11.760 TCP 12.102.0.1:60074 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:03:40.248 00:00:11.808 TCP 12.102.0.1:45778 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:04:42.089 00:00:13.017 TCP 12.102.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:59:55.366 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 02:05:45.140 00:00:11.816 TCP 12.102.0.1:53506 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:06:35.439 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:06:35.461 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:06:35.648 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:06:35.357 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:06:35.471 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:06:35.717 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:06:35.520 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:06:46.996 00:00:11.797 TCP 12.102.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:07:48.833 00:00:11.800 TCP 12.102.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:03:55.367 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:08:50.672 00:00:11.806 TCP 12.102.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:09:52.520 00:00:11.806 TCP 12.102.0.1:59182 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:10:54.362 00:00:11.823 TCP 12.102.0.1:40982 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:11:35.718 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:11:35.715 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:11:35.812 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:11:35.767 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:11:35.753 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:11:35.614 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:11:35.695 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:06:55.369 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 02:11:56.226 00:00:12.287 TCP 12.102.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:12:58.551 00:00:12.584 TCP 12.102.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:14:01.171 00:00:11.801 TCP 12.102.0.1:42920 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:15:03.008 00:00:11.800 TCP 12.102.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:10:55.367 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:16:04.845 00:00:11.824 TCP 12.102.0.1:52706 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:16:35.811 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:16:35.857 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:16:35.614 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:16:35.795 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:16:35.939 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:16:35.439 00:00:00.029 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:16:35.788 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:17:06.709 00:00:11.795 TCP 12.102.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:18:08.547 00:00:11.800 TCP 12.102.0.1:44980 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:13:55.371 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 02:19:10.384 00:00:11.769 TCP 12.102.0.1:51712 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:20:12.205 00:00:11.802 TCP 12.102.0.1:51118 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:21:14.073 00:00:11.800 TCP 12.102.0.1:54770 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:21:35.648 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:21:35.671 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:21:35.940 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:21:35.772 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:21:35.971 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:21:35.950 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:21:35.960 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:22:15.915 00:00:11.833 TCP 12.102.0.1:44164 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:17:55.370 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:23:17.781 00:00:11.800 TCP 12.102.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:24:19.623 00:00:11.798 TCP 12.102.0.1:58080 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:25:21.461 00:00:11.816 TCP 12.102.0.1:33666 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:20:55.375 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 02:26:35.813 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:26:35.909 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:26:35.947 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:26:35.856 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:26:23.309 00:00:11.770 TCP 12.102.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:26:35.958 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:26:36.000 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:26:35.792 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:27:25.110 00:00:11.983 TCP 12.102.0.1:48300 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:28:27.131 00:00:11.803 TCP 12.102.0.1:34980 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:29:28.973 00:00:11.804 TCP 12.102.0.1:33578 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:24:55.372 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:30:30.814 00:00:11.799 TCP 12.102.0.1:51494 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:31:36.033 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:31:36.057 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:31:36.044 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:31:35.952 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:31:35.838 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:31:36.034 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:31:36.222 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:31:32.652 00:00:12.048 TCP 12.102.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:32:34.737 00:00:11.796 TCP 12.102.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:27:55.375 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 02:33:36.575 00:00:11.804 TCP 12.102.0.1:33828 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:34:38.415 00:00:11.796 TCP 12.102.0.1:34592 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:35:40.247 00:00:11.760 TCP 12.102.0.1:41096 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:36:36.589 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:36:36.612 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:36:36.446 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:36:36.851 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:36:36.817 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:36:36.361 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:36:36.346 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:36:42.079 00:00:11.798 TCP 12.102.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:31:55.372 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:37:43.909 00:00:11.791 TCP 12.102.0.1:42986 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:38:45.742 00:00:11.809 TCP 12.102.0.1:60546 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:34:55.376 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 02:39:47.584 00:00:11.803 TCP 12.102.0.1:35318 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:40:49.429 00:00:11.801 TCP 12.102.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:41:35.888 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:41:35.910 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:41:36.351 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:41:36.383 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:41:36.177 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:41:36.151 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:41:36.216 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:41:51.267 00:00:11.797 TCP 12.102.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:42:53.104 00:00:11.800 TCP 12.102.0.1:40892 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:38:55.373 00:06:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:43:54.945 00:00:11.805 TCP 12.102.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:44:56.785 00:00:11.759 TCP 12.102.0.1:36312 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:45:58.584 00:00:11.810 TCP 12.102.0.1:41556 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:46:36.297 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:46:36.321 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:46:36.441 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:46:36.379 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:46:36.421 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:46:36.374 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:46:36.334 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:41:55.377 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 02:47:00.430 00:00:11.759 TCP 12.102.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:48:02.228 00:00:11.765 TCP 12.102.0.1:43554 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:49:04.034 00:00:11.804 TCP 12.102.0.1:53460 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:50:05.870 00:00:11.800 TCP 12.102.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:45:55.375 00:06:00.092 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:51:07.707 00:00:11.773 TCP 12.102.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:51:36.497 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:51:36.605 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:51:36.551 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:51:36.427 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:51:36.455 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:51:36.502 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:51:36.474 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:52:09.512 00:00:11.812 TCP 12.102.0.1:39236 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:53:11.360 00:00:11.829 TCP 12.102.0.1:57652 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:48:55.380 00:06:00.086 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 02:54:13.224 00:00:11.826 TCP 12.102.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:55:15.089 00:00:11.798 TCP 12.102.0.1:40464 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:56:16.927 00:00:11.810 TCP 12.102.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:56:36.798 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 02:56:36.820 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 02:56:36.858 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 02:56:36.803 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 02:56:36.630 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 02:56:36.794 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 02:56:36.676 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 02:57:18.775 00:00:11.799 TCP 12.102.0.1:45228 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:52:55.377 00:06:00.092 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 02:58:20.612 00:00:11.757 TCP 12.102.0.1:45532 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123211, total packets: 1128, avg bps: 264, avg pps: 0, avg bpp: 109 Time window: 2025-10-23 01:56:55 - 2025-10-23 02:58:55 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0027s User: 0.0027s Wall: 0.0023s flows/second: 68894.0 Runtime: 0.0023s