Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 00:59:11.253 00:00:11.797 TCP 12.102.0.1:43392 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:00:13.084 00:00:12.184 TCP 12.102.0.1:38234 -> 1.101.0.1:3000 11 1507 1 2025-10-27 00:55:57.248 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 00:55:57.251 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:01:15.306 00:00:11.800 TCP 12.102.0.1:45828 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:02:17.142 00:00:11.780 TCP 12.102.0.1:53926 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:03:29.957 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:03:29.980 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:03:30.087 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:03:30.115 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:03:30.106 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:03:18.959 00:00:11.804 TCP 12.102.0.1:39452 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:03:29.829 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:03:30.072 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:04:20.802 00:00:11.797 TCP 12.102.0.1:33936 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:05:22.639 00:00:11.798 TCP 12.102.0.1:48436 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:06:24.474 00:00:11.805 TCP 12.102.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:07:26.317 00:00:11.802 TCP 12.102.0.1:34794 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:02:57.249 00:06:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 01:02:57.252 00:06:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:08:30.259 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:08:30.538 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:08:30.158 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:08:30.304 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:08:30.406 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:08:30.223 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:08:30.237 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:08:28.158 00:00:11.811 TCP 12.102.0.1:39456 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:09:30.004 00:00:11.760 TCP 12.102.0.1:57304 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:10:31.805 00:00:11.819 TCP 12.102.0.1:60236 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:11:33.659 00:00:11.812 TCP 12.102.0.1:57776 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:12:35.508 00:00:11.761 TCP 12.102.0.1:52804 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:13:30.465 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:13:30.668 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:13:30.672 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:13:30.480 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:13:30.355 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:13:30.345 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:13:30.441 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:13:37.302 00:00:11.800 TCP 12.102.0.1:43540 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:14:39.137 00:00:11.796 TCP 12.102.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:09:57.253 00:06:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:09:57.251 00:06:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 01:15:40.979 00:00:11.806 TCP 12.102.0.1:60828 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:16:42.823 00:00:11.805 TCP 12.102.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:17:44.665 00:00:11.762 TCP 12.102.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:18:30.277 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:18:30.299 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:18:30.413 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:18:30.442 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:18:30.214 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:18:30.507 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:18:30.383 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:18:46.465 00:00:11.835 TCP 12.102.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:19:48.349 00:00:12.405 TCP 12.102.0.1:56642 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:20:50.790 00:00:11.816 TCP 12.102.0.1:45226 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:16:57.254 00:06:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:16:57.251 00:06:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 01:21:52.643 00:00:11.824 TCP 12.102.0.1:42782 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:22:54.503 00:00:11.852 TCP 12.102.0.1:59606 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:23:31.338 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:23:31.054 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:23:30.769 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:23:30.844 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:23:30.587 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:23:30.458 00:00:00.029 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:23:31.315 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:23:56.398 00:00:11.760 TCP 12.102.0.1:44642 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:24:58.201 00:00:11.805 TCP 12.102.0.1:51232 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:26:00.075 00:00:11.801 TCP 12.102.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:27:01.916 00:00:12.261 TCP 12.102.0.1:37096 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:28:04.214 00:00:11.786 TCP 12.102.0.1:56548 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:28:30.643 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:28:30.508 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:28:30.641 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:28:30.592 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:28:30.695 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:28:30.743 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:28:30.622 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:23:57.257 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:23:57.255 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 01:29:06.072 00:00:11.766 TCP 12.102.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:30:07.888 00:00:11.798 TCP 12.102.0.1:54474 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:31:09.727 00:00:11.781 TCP 12.102.0.1:45864 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:32:11.547 00:00:11.801 TCP 12.102.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:33:13.383 00:00:11.777 TCP 12.102.0.1:34996 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:33:30.655 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:33:30.967 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:33:30.917 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:33:30.782 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:33:30.682 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:33:30.657 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:33:30.632 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:34:15.201 00:00:11.808 TCP 12.102.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:35:17.074 00:00:11.876 TCP 12.102.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:30:57.256 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 01:30:57.259 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:36:18.992 00:00:11.808 TCP 12.102.0.1:45626 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:37:20.840 00:00:11.771 TCP 12.102.0.1:55092 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:38:30.738 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:38:30.877 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:38:30.925 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:38:30.668 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:38:30.867 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:38:30.872 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:38:30.714 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:38:22.656 00:00:11.807 TCP 12.102.0.1:56976 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:39:24.503 00:00:11.809 TCP 12.102.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:40:26.347 00:00:11.760 TCP 12.102.0.1:34966 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:41:28.140 00:00:11.816 TCP 12.102.0.1:50276 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:42:29.995 00:00:11.803 TCP 12.102.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:37:57.257 00:06:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 01:37:57.260 00:06:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:43:31.166 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:43:31.066 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:43:31.250 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:43:31.222 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:43:31.269 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:43:31.178 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:43:31.142 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:43:31.833 00:00:11.809 TCP 12.102.0.1:42306 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:44:33.684 00:00:11.802 TCP 12.102.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:45:35.523 00:00:11.803 TCP 12.102.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:46:37.366 00:00:11.830 TCP 12.102.0.1:33830 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:47:39.233 00:00:11.758 TCP 12.102.0.1:39862 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:48:31.041 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:48:31.058 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:48:31.081 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:48:31.120 00:00:00.048 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:48:31.081 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:48:30.852 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:48:31.019 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:48:41.034 00:00:11.800 TCP 12.102.0.1:37534 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:49:42.873 00:00:11.802 TCP 12.102.0.1:37950 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:44:57.260 00:06:00.204 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:44:57.259 00:06:00.209 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 01:50:44.714 00:00:11.803 TCP 12.102.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:51:46.563 00:00:11.799 TCP 12.102.0.1:40350 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:52:48.407 00:00:11.808 TCP 12.102.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:53:31.043 00:00:00.042 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:53:31.275 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:53:31.162 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 01:53:31.065 00:00:00.041 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:53:30.988 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:53:31.126 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:53:31.193 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:53:50.254 00:00:11.780 TCP 12.102.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:54:52.082 00:00:11.813 TCP 12.102.0.1:46356 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:55:53.932 00:00:11.830 TCP 12.102.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:51:57.259 00:06:00.211 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 01:51:57.263 00:06:00.206 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:56:55.799 00:00:11.790 TCP 12.102.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:57:57.627 00:00:11.762 TCP 12.102.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-10-27 01:58:31.916 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:58:31.939 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 01:58:31.848 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 01:58:31.890 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 01:58:32.094 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 01:58:32.390 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 01:58:32.271 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 264, avg pps: 0, avg bpp: 108 Time window: 2025-10-27 00:55:57 - 2025-10-27 01:58:32 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0042s User: 0.0021s Wall: 0.0028s flows/second: 56341.9 Runtime: 0.0029s