Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 08:59:27.267 00:00:11.808 TCP 12.102.0.1:36056 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:00:29.111 00:00:11.856 TCP 12.102.0.1:50912 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:01:31.006 00:00:11.795 TCP 12.102.0.1:60192 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:02:32.838 00:00:11.762 TCP 12.102.0.1:48960 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:58:56.908 00:05:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 08:58:56.905 00:05:00.202 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:03:12.313 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:03:12.347 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:03:12.378 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:03:12.457 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:03:12.421 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:03:11.980 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:03:12.290 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:03:34.637 00:00:11.835 TCP 12.102.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:04:36.510 00:00:11.759 TCP 12.102.0.1:42976 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:05:38.301 00:00:11.803 TCP 12.102.0.1:41642 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:06:40.154 00:00:11.770 TCP 12.102.0.1:48386 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:07:41.960 00:00:11.759 TCP 12.102.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:08:10.854 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:08:10.877 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:08:10.977 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:08:11.090 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:08:10.771 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:08:11.001 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:08:10.971 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:08:43.757 00:00:11.804 TCP 12.102.0.1:41034 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:04:56.910 00:05:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:04:56.908 00:05:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:09:45.595 00:00:11.815 TCP 12.102.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:10:47.449 00:00:11.811 TCP 12.102.0.1:42964 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:11:49.295 00:00:11.804 TCP 12.102.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:12:51.134 00:00:11.765 TCP 12.102.0.1:51698 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:13:11.037 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:13:11.059 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:13:11.083 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:13:11.221 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:13:10.998 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:13:11.179 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:13:11.168 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:13:52.940 00:00:11.810 TCP 12.102.0.1:36758 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:10:56.909 00:05:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:10:56.911 00:05:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:14:54.796 00:00:11.807 TCP 12.102.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:15:56.636 00:00:11.802 TCP 12.102.0.1:49766 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:16:58.477 00:00:11.798 TCP 12.102.0.1:50336 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:18:10.863 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:18:11.218 00:00:00.044 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:18:11.288 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:18:11.257 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:18:11.288 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:18:11.164 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:18:10.841 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:18:00.315 00:00:11.758 TCP 12.102.0.1:40512 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:19:02.111 00:00:11.802 TCP 12.102.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:20:03.954 00:00:11.761 TCP 12.102.0.1:46910 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:16:56.912 00:05:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:16:56.909 00:05:00.201 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:21:05.754 00:00:11.804 TCP 12.102.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:22:07.597 00:00:11.805 TCP 12.102.0.1:53896 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:23:11.604 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:23:11.743 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:23:11.444 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:23:11.433 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:23:11.316 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:23:11.561 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:23:11.581 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:23:09.443 00:00:11.814 TCP 12.102.0.1:55346 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:24:11.296 00:00:11.802 TCP 12.102.0.1:53248 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:25:13.137 00:00:11.826 TCP 12.102.0.1:40860 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:26:15.005 00:00:11.818 TCP 12.102.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:22:56.915 00:05:00.194 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:22:56.912 00:05:00.199 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:27:16.860 00:00:11.803 TCP 12.102.0.1:40186 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:28:11.454 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:28:11.536 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:28:11.634 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:28:11.493 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:28:11.696 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:28:11.532 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:28:11.432 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:28:18.701 00:00:11.805 TCP 12.102.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:29:20.552 00:00:11.857 TCP 12.102.0.1:36634 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:30:22.452 00:00:11.762 TCP 12.102.0.1:33544 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:31:24.251 00:00:12.239 TCP 12.102.0.1:57470 -> 1.101.0.1:3000 15 1926 1 2025-10-26 09:32:26.529 00:00:11.765 TCP 12.102.0.1:58848 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:28:56.915 00:05:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:28:56.913 00:05:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:33:11.450 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:33:11.964 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:33:11.446 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:33:12.223 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:33:12.192 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:33:12.332 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:33:12.200 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:33:28.331 00:00:11.808 TCP 12.102.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:34:30.172 00:00:11.803 TCP 12.102.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:35:32.019 00:00:11.881 TCP 12.102.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:36:33.939 00:00:11.810 TCP 12.102.0.1:37492 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:37:35.786 00:00:11.806 TCP 12.102.0.1:36186 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:38:11.466 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:38:11.693 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:38:11.605 00:00:00.032 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:38:11.473 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:38:11.744 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:38:11.706 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:38:11.443 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:38:37.631 00:00:12.630 TCP 12.102.0.1:41528 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:34:56.916 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:34:56.914 00:05:00.199 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:39:40.300 00:00:11.804 TCP 12.102.0.1:52936 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:40:42.141 00:00:11.817 TCP 12.102.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:41:43.996 00:00:11.800 TCP 12.102.0.1:49094 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:42:45.834 00:00:11.805 TCP 12.102.0.1:41828 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:43:11.586 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:43:11.610 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:43:11.730 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:43:11.888 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:43:11.789 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:43:11.798 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:43:11.774 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:43:47.674 00:00:11.807 TCP 12.102.0.1:48306 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:40:56.918 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:44:49.518 00:00:11.800 TCP 12.102.0.1:32930 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:40:56.915 00:05:00.198 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:45:51.359 00:00:11.816 TCP 12.102.0.1:49910 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:46:53.212 00:00:12.276 TCP 12.102.0.1:52232 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:47:55.529 00:00:11.812 TCP 12.102.0.1:45224 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:48:11.563 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:48:11.743 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:48:11.585 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:48:11.760 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:48:11.794 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:48:11.850 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:48:11.541 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:48:57.382 00:00:11.810 TCP 12.102.0.1:43312 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:49:59.225 00:00:12.192 TCP 12.102.0.1:56286 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:46:56.920 00:05:00.192 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:46:56.918 00:05:00.197 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:51:01.464 00:00:12.644 TCP 12.102.0.1:59012 -> 1.101.0.1:3000 17 2241 1 2025-10-26 09:52:04.156 00:00:11.822 TCP 12.102.0.1:58486 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:53:11.821 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:53:11.963 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:53:11.840 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:53:11.962 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:53:11.798 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:53:12.081 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:53:12.019 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:53:06.025 00:00:11.830 TCP 12.102.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:54:07.900 00:00:11.803 TCP 12.102.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:55:09.751 00:00:11.812 TCP 12.102.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:56:11.604 00:00:11.814 TCP 12.102.0.1:58802 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:52:56.921 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 09:52:56.919 00:05:00.198 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:57:13.462 00:00:11.815 TCP 12.102.0.1:59680 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:58:11.963 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 09:58:11.935 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 09:58:12.059 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 09:58:12.035 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:58:12.065 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 09:58:12.129 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 09:58:12.036 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 09:58:15.318 00:00:11.811 TCP 12.102.0.1:38264 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124487, total packets: 1140, avg bps: 278, avg pps: 0, avg bpp: 109 Time window: 2025-10-26 08:58:56 - 2025-10-26 09:58:27 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0044s User: 0.0011s Wall: 0.0020s flows/second: 80354.5 Runtime: 0.0020s