Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 18:59:05.392 00:00:11.806 TCP 12.102.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-10-23 18:54:55.663 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:00:07.234 00:00:11.806 TCP 12.102.0.1:51680 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:01:09.080 00:00:11.795 TCP 12.102.0.1:45514 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:01:55.731 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:01:55.754 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:01:55.876 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:01:56.019 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:01:55.991 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:01:56.186 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:01:56.179 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:02:10.915 00:00:11.822 TCP 12.102.0.1:53508 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:03:12.773 00:00:11.803 TCP 12.102.0.1:36278 -> 1.101.0.1:3000 11 1507 1 2025-10-23 18:58:55.660 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 19:04:14.617 00:00:11.803 TCP 12.102.0.1:41338 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:05:16.456 00:00:11.766 TCP 12.102.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:06:18.251 00:00:11.806 TCP 12.102.0.1:34924 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:06:56.028 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:01:55.664 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:06:56.306 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:06:56.214 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:06:56.337 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:06:56.431 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:06:56.248 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:06:56.005 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:07:20.095 00:00:11.760 TCP 12.102.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:08:21.891 00:00:11.798 TCP 12.102.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:09:23.727 00:00:11.815 TCP 12.102.0.1:49340 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:10:25.581 00:00:11.766 TCP 12.102.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:05:55.663 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 19:11:27.384 00:00:11.803 TCP 12.102.0.1:44332 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:11:55.996 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:11:56.159 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:11:56.316 00:00:00.018 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:11:56.101 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:11:56.117 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:11:56.073 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:11:55.973 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:12:29.225 00:00:11.808 TCP 12.102.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:13:31.081 00:00:11.800 TCP 12.102.0.1:39266 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:08:55.667 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:14:32.916 00:00:11.826 TCP 12.102.0.1:51794 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:15:34.781 00:00:11.775 TCP 12.102.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:16:36.592 00:00:11.812 TCP 12.102.0.1:59188 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:16:56.190 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:16:56.034 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:16:56.243 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:16:56.421 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:16:56.220 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:16:55.892 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:16:55.869 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:17:38.440 00:00:11.811 TCP 12.102.0.1:38194 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:12:55.665 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 19:18:40.289 00:00:11.813 TCP 12.102.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:19:42.139 00:00:11.833 TCP 12.102.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:20:44.012 00:00:11.798 TCP 12.102.0.1:50392 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:15:55.667 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:21:56.609 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:21:56.555 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:21:56.630 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:21:56.685 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:21:56.684 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:21:56.278 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:21:56.668 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:21:45.848 00:00:12.309 TCP 12.102.0.1:50566 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:22:48.191 00:00:11.765 TCP 12.102.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:23:49.988 00:00:11.803 TCP 12.102.0.1:60082 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:19:55.667 00:06:00.099 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 19:24:51.831 00:00:11.807 TCP 12.102.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:25:53.677 00:00:11.772 TCP 12.102.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:26:56.355 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:26:56.378 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:26:56.176 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:26:56.443 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:26:56.463 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:26:56.426 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:26:56.434 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:26:55.489 00:00:11.803 TCP 12.102.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:22:55.669 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:27:57.332 00:00:11.811 TCP 12.102.0.1:38140 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:28:59.183 00:00:11.760 TCP 12.102.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:30:00.988 00:00:12.275 TCP 12.102.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:31:03.301 00:00:11.815 TCP 12.102.0.1:55624 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:31:56.478 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:31:56.417 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:31:56.609 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:31:56.503 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:31:56.676 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:31:56.403 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:26:55.668 00:06:00.099 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 19:31:56.456 00:00:00.019 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:32:05.156 00:00:11.813 TCP 12.102.0.1:33554 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:33:07.011 00:00:11.798 TCP 12.102.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:34:08.851 00:00:11.801 TCP 12.102.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:29:55.672 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:35:10.694 00:00:11.810 TCP 12.102.0.1:47104 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:36:12.538 00:00:11.803 TCP 12.102.0.1:51200 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:36:56.579 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:36:56.519 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:36:56.700 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:36:56.718 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:36:56.631 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:36:56.587 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:36:56.557 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:37:14.375 00:00:11.810 TCP 12.102.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:38:16.228 00:00:11.809 TCP 12.102.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:33:55.670 00:06:00.100 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 19:39:18.081 00:00:11.816 TCP 12.102.0.1:55590 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:40:19.931 00:00:11.820 TCP 12.102.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:41:21.794 00:00:11.800 TCP 12.102.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:36:55.671 00:06:00.095 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:41:56.923 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:41:57.420 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:41:57.164 00:00:00.015 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:41:57.427 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:41:57.035 00:00:00.017 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:41:57.045 00:00:00.009 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:41:57.399 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:42:23.646 00:00:11.759 TCP 12.102.0.1:53574 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:43:25.446 00:00:11.825 TCP 12.102.0.1:56798 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:44:27.316 00:00:11.802 TCP 12.102.0.1:38912 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:45:29.160 00:00:11.809 TCP 12.102.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:40:55.669 00:06:00.103 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 19:46:31.008 00:00:11.808 TCP 12.102.0.1:51850 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:46:56.712 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:46:56.735 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:46:56.968 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:46:56.674 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:46:56.694 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:46:56.837 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:46:57.052 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:47:32.858 00:00:11.801 TCP 12.102.0.1:54992 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:48:34.698 00:00:11.803 TCP 12.102.0.1:47118 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:43:55.674 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:49:36.537 00:00:11.774 TCP 12.102.0.1:40148 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:50:38.349 00:00:11.802 TCP 12.102.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:51:56.878 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:51:56.901 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:51:56.945 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:51:40.191 00:00:11.869 TCP 12.102.0.1:53902 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:51:56.919 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:51:56.866 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:51:56.958 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:51:57.018 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:47:55.673 00:06:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-23 19:52:42.101 00:00:11.999 TCP 12.102.0.1:37860 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:53:44.141 00:00:11.776 TCP 12.102.0.1:60354 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:54:45.957 00:00:11.811 TCP 12.102.0.1:45034 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:50:55.676 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-23 19:55:47.813 00:00:11.806 TCP 12.102.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:56:56.843 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-23 19:56:56.921 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-23 19:56:56.956 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-23 19:56:49.660 00:00:11.814 TCP 12.102.0.1:46862 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:56:57.045 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-23 19:56:57.011 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:56:57.182 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-23 19:56:57.021 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-23 19:57:51.510 00:00:11.799 TCP 12.102.0.1:47290 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123211, total packets: 1128, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-10-23 18:54:55 - 2025-10-23 19:58:03 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0019s User: 0.0029s Wall: 0.0021s flows/second: 74091.1 Runtime: 0.0022s