Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 09:59:17.176 00:00:11.806 TCP 12.102.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:00:19.033 00:00:11.801 TCP 12.102.0.1:57560 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:01:20.871 00:00:11.856 TCP 12.102.0.1:52266 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:02:22.768 00:00:11.827 TCP 12.102.0.1:36864 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:58:56.920 00:05:00.198 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 09:58:56.922 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:03:12.023 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:03:12.299 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:03:12.135 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:03:12.109 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:03:12.047 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:03:12.235 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:03:12.000 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:03:24.634 00:00:16.943 TCP 12.102.0.1:51726 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:04:31.615 00:00:11.812 TCP 12.102.0.1:42534 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:05:33.465 00:00:11.847 TCP 12.102.0.1:34122 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:06:35.330 00:00:11.813 TCP 12.102.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:07:37.182 00:00:11.811 TCP 12.102.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:08:12.226 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:08:12.249 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:08:12.543 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:08:12.566 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:08:12.297 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:08:12.384 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:08:12.186 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:08:39.058 00:00:11.804 TCP 12.102.0.1:35032 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:04:56.924 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:04:56.921 00:05:00.198 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:09:40.904 00:00:11.805 TCP 12.102.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:10:42.745 00:00:11.763 TCP 12.102.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:11:44.548 00:00:11.813 TCP 12.102.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:12:46.398 00:00:11.814 TCP 12.102.0.1:48558 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:13:12.112 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:13:12.134 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:13:12.332 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:13:12.342 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:13:12.310 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:13:12.037 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:13:12.280 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:13:48.257 00:00:11.803 TCP 12.102.0.1:42448 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:10:56.921 00:05:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:14:50.112 00:00:11.813 TCP 12.102.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:10:56.924 00:05:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:15:51.970 00:00:11.806 TCP 12.102.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:16:53.812 00:00:11.769 TCP 12.102.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:17:55.635 00:00:11.832 TCP 12.102.0.1:35834 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:18:12.436 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:18:12.499 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:18:12.554 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:18:12.158 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:18:12.507 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:18:12.454 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:18:12.413 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:18:57.512 00:00:11.823 TCP 12.102.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:19:59.384 00:00:11.819 TCP 12.102.0.1:45712 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:16:56.925 00:05:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:16:56.923 00:05:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:21:01.238 00:00:12.193 TCP 12.102.0.1:57516 -> 1.101.0.1:3000 15 1926 1 2025-10-26 10:22:03.466 00:00:11.810 TCP 12.102.0.1:47790 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:23:12.490 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:23:12.515 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:23:12.641 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:23:12.568 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:23:12.448 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:23:12.702 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:23:12.412 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:23:05.314 00:00:11.812 TCP 12.102.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:24:07.150 00:00:11.821 TCP 12.102.0.1:41446 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:25:09.013 00:00:11.760 TCP 12.102.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:26:10.811 00:00:11.854 TCP 12.102.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:22:56.929 00:05:00.197 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:22:56.930 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:27:12.705 00:00:11.799 TCP 12.102.0.1:56560 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:28:12.742 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:28:12.950 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:28:12.774 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:28:13.051 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:28:12.957 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:28:12.827 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:28:12.720 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:28:14.543 00:00:11.803 TCP 12.102.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:29:16.384 00:00:11.812 TCP 12.102.0.1:50578 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:30:18.233 00:00:11.810 TCP 12.102.0.1:47778 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:31:20.081 00:00:11.808 TCP 12.102.0.1:41578 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:32:21.924 00:00:11.862 TCP 12.102.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:28:56.932 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:28:56.929 00:05:00.199 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:33:12.825 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:33:12.848 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:33:12.638 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:33:12.790 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:33:12.893 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:33:12.667 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:33:12.743 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:33:23.825 00:00:11.801 TCP 12.102.0.1:36876 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:34:25.665 00:00:11.808 TCP 12.102.0.1:45042 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:35:27.509 00:00:11.764 TCP 12.102.0.1:38980 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:36:29.311 00:00:11.802 TCP 12.102.0.1:37728 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:37:31.146 00:00:11.809 TCP 12.102.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:38:12.808 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:38:12.833 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:38:12.967 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:38:12.592 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:38:12.867 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:38:12.957 00:00:00.010 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:38:12.728 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:38:32.991 00:00:11.803 TCP 12.102.0.1:50716 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:34:56.933 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:34:56.931 00:05:00.198 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:39:34.831 00:00:11.800 TCP 12.102.0.1:60818 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:40:36.668 00:00:11.807 TCP 12.102.0.1:57162 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:41:38.510 00:00:11.820 TCP 12.102.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:42:40.397 00:00:11.801 TCP 12.102.0.1:35560 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:43:13.014 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:43:12.942 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:43:13.167 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:43:12.980 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:43:13.147 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:43:13.027 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:43:12.990 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:43:42.240 00:00:11.813 TCP 12.102.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:44:44.091 00:00:11.800 TCP 12.102.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:40:56.934 00:05:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:40:56.932 00:05:00.198 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:45:45.934 00:00:11.811 TCP 12.102.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:46:47.787 00:00:11.759 TCP 12.102.0.1:56342 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:47:49.583 00:00:11.818 TCP 12.102.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:48:12.822 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:48:12.988 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:48:13.063 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:48:12.872 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:48:12.791 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:48:12.935 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:48:12.845 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:48:51.439 00:00:11.807 TCP 12.102.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:49:53.281 00:00:11.763 TCP 12.102.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:46:56.937 00:05:00.192 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:46:56.935 00:05:00.197 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:50:55.093 00:00:11.800 TCP 12.102.0.1:34152 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:51:56.940 00:00:11.822 TCP 12.102.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:52:58.786 00:00:11.807 TCP 12.102.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:53:12.971 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:53:13.322 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:53:13.310 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:53:13.182 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:53:13.097 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:53:13.061 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:53:12.946 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:54:00.638 00:00:11.853 TCP 12.102.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:55:02.532 00:00:11.803 TCP 12.102.0.1:46550 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:56:04.374 00:00:11.835 TCP 12.102.0.1:43132 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:52:56.937 00:05:00.208 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-26 10:52:56.940 00:05:00.203 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-26 10:57:06.249 00:00:11.814 TCP 12.102.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-10-26 10:58:13.080 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-26 10:58:13.103 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-26 10:58:13.400 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 10:58:13.115 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-26 10:58:13.225 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-26 10:58:13.125 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-26 10:58:13.084 00:00:00.043 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-26 10:58:08.102 00:00:11.821 TCP 12.102.0.1:36684 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 277, avg pps: 0, avg bpp: 109 Time window: 2025-10-26 09:58:56 - 2025-10-26 10:58:19 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0048s User: 0.0010s Wall: 0.0021s flows/second: 75556.2 Runtime: 0.0022s