Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 12:59:16.528 00:00:11.757 TCP 12.102.0.1:60694 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:00:18.320 00:00:11.803 TCP 12.102.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-10-24 12:55:56.063 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 13:01:20.164 00:00:11.804 TCP 12.102.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:02:17.867 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:02:18.070 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:02:17.930 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:02:17.966 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:02:17.940 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:02:17.932 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:02:17.846 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:02:22.010 00:00:11.804 TCP 12.102.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:02:56.065 00:00:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 2 123 1 2025-10-24 12:57:56.061 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 13:03:23.848 00:00:11.762 TCP 12.102.0.1:36848 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:04:25.649 00:00:11.867 TCP 12.102.0.1:33510 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:05:27.553 00:00:11.802 TCP 12.102.0.1:46698 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:06:29.392 00:00:11.806 TCP 12.102.0.1:54064 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:07:18.055 00:00:00.045 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:07:18.190 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:07:18.186 00:00:00.039 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:07:18.218 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:07:18.105 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:07:18.318 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:07:18.033 00:00:00.045 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:07:31.234 00:00:11.901 TCP 12.102.0.1:58974 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:03:56.066 00:04:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-10-24 13:08:33.172 00:00:11.805 TCP 12.102.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:09:35.024 00:00:11.801 TCP 12.102.0.1:49254 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:04:56.064 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 13:10:36.861 00:00:11.813 TCP 12.102.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:11:38.710 00:00:11.809 TCP 12.102.0.1:36450 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:12:17.990 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:12:18.064 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:12:18.045 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:12:18.091 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:12:18.189 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:12:18.003 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:12:17.968 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:12:40.554 00:00:11.816 TCP 12.102.0.1:44516 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:08:56.069 00:04:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-10-24 13:13:42.401 00:00:11.803 TCP 12.102.0.1:34822 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:14:44.241 00:00:11.810 TCP 12.102.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:15:46.088 00:00:11.764 TCP 12.102.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:11:56.065 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 13:16:47.893 00:00:13.424 TCP 12.102.0.1:55608 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:17:18.248 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:17:18.366 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:17:18.383 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:17:18.069 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:17:18.385 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:17:18.408 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:17:18.225 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:17:51.349 00:00:11.804 TCP 12.102.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:13:56.070 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 13:18:53.186 00:00:11.849 TCP 12.102.0.1:39044 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:19:55.082 00:00:11.761 TCP 12.102.0.1:36436 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:20:56.879 00:00:11.804 TCP 12.102.0.1:35412 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:21:58.722 00:00:11.803 TCP 12.102.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:22:18.305 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:22:18.334 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:22:18.408 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:22:18.307 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:22:18.479 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:22:18.297 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:22:18.281 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:23:00.563 00:00:11.807 TCP 12.102.0.1:34958 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:18:56.069 00:05:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-24 13:24:02.409 00:00:11.802 TCP 12.102.0.1:50146 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:25:04.243 00:00:11.803 TCP 12.102.0.1:54388 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:20:56.072 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 13:26:06.084 00:00:11.799 TCP 12.102.0.1:44794 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:27:18.460 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:27:18.484 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:27:18.586 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:27:18.521 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:27:18.430 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:27:18.658 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:27:18.300 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:27:07.921 00:00:11.788 TCP 12.102.0.1:43496 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:28:09.740 00:00:11.804 TCP 12.102.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:24:56.072 00:04:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-10-24 13:29:11.579 00:00:11.804 TCP 12.102.0.1:59346 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:30:13.417 00:00:11.760 TCP 12.102.0.1:35864 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:31:15.213 00:00:11.806 TCP 12.102.0.1:43828 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:32:18.233 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:32:18.580 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:32:18.561 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:32:18.674 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:32:18.701 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:32:18.601 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:32:18.211 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:32:17.083 00:00:11.802 TCP 12.102.0.1:44572 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:27:56.074 00:06:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 13:33:18.929 00:00:11.780 TCP 12.102.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:34:20.747 00:00:11.802 TCP 12.102.0.1:46914 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:29:56.072 00:06:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 13:34:56.074 00:00:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 2 123 1 2025-10-24 13:35:22.585 00:00:11.767 TCP 12.102.0.1:58464 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:36:24.386 00:00:11.818 TCP 12.102.0.1:50622 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:37:19.314 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:37:18.632 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:37:19.155 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:37:18.391 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:37:19.132 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:37:18.601 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:37:19.131 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:37:26.242 00:00:11.801 TCP 12.102.0.1:38060 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:38:28.081 00:00:11.804 TCP 12.102.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:39:29.922 00:00:11.828 TCP 12.102.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:35:56.074 00:04:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-10-24 13:40:31.789 00:00:12.233 TCP 12.102.0.1:48090 -> 1.101.0.1:3000 15 1926 1 2025-10-24 13:41:34.074 00:00:13.444 TCP 12.102.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:36:56.073 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 13:42:18.702 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:42:18.724 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:42:18.941 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:42:18.728 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:42:18.712 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:42:18.929 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:42:18.585 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:42:37.556 00:00:11.817 TCP 12.102.0.1:52658 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:43:39.413 00:00:11.831 TCP 12.102.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:44:41.281 00:00:11.856 TCP 12.102.0.1:45356 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:40:56.075 00:04:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-10-24 13:45:43.178 00:00:11.811 TCP 12.102.0.1:54706 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:46:45.035 00:00:11.766 TCP 12.102.0.1:55200 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:47:18.789 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:47:18.931 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:47:18.673 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:47:18.923 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:47:19.021 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:47:18.607 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:47:18.767 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:47:46.841 00:00:11.801 TCP 12.102.0.1:34796 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:43:56.073 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 13:48:48.676 00:00:11.805 TCP 12.102.0.1:37384 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:45:56.075 00:04:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-10-24 13:49:50.523 00:00:11.811 TCP 12.102.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:50:56.073 00:00:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 2 123 1 2025-10-24 13:50:52.369 00:00:11.870 TCP 12.102.0.1:59142 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:51:54.283 00:00:11.801 TCP 12.102.0.1:50272 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:52:18.778 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:52:18.801 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:52:18.907 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:52:18.920 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:52:18.904 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:52:18.823 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:52:18.787 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:52:56.122 00:00:11.804 TCP 12.102.0.1:34514 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:53:57.961 00:00:11.804 TCP 12.102.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:54:59.797 00:00:12.238 TCP 12.102.0.1:37736 -> 1.101.0.1:3000 15 1926 1 2025-10-24 13:51:56.073 00:04:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-10-24 13:50:56.076 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 13:56:02.086 00:00:11.799 TCP 12.102.0.1:45734 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:57:03.924 00:00:11.823 TCP 12.102.0.1:60026 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:57:19.019 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 13:57:19.043 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 13:57:18.958 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 13:57:18.939 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 13:57:19.052 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 13:57:19.013 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 13:57:18.996 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 13:58:05.787 00:00:11.759 TCP 12.102.0.1:48598 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 124295, total packets: 1140, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-10-24 12:55:56 - 2025-10-24 13:58:17 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0023s Wall: 0.0032s flows/second: 51089.3 Runtime: 0.0032s