Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 01:58:59.428 00:00:11.812 TCP 12.102.0.1:43982 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:00:01.280 00:00:11.796 TCP 12.102.0.1:52226 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:01:03.116 00:00:12.357 TCP 12.102.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:02:05.512 00:00:11.797 TCP 12.102.0.1:40360 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:03:07.351 00:00:11.811 TCP 12.102.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:03:31.329 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:03:31.395 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:03:31.398 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:03:31.274 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:03:31.378 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:03:31.165 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:03:31.309 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 01:58:57.263 00:06:00.206 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 01:58:57.260 00:06:00.212 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 02:04:09.199 00:00:11.802 TCP 12.102.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:05:11.061 00:00:11.800 TCP 12.102.0.1:47812 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:06:12.903 00:00:12.272 TCP 12.102.0.1:36382 -> 1.101.0.1:3000 15 1926 1 2025-10-27 02:07:15.206 00:00:11.754 TCP 12.102.0.1:42092 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:08:31.215 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:08:31.239 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:08:31.575 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:08:17.004 00:00:11.807 TCP 12.102.0.1:39790 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:08:31.542 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:08:31.435 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:08:31.473 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:08:31.401 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:09:18.849 00:00:11.805 TCP 12.102.0.1:59496 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:10:20.686 00:00:11.779 TCP 12.102.0.1:60470 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:05:57.263 00:06:00.213 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 02:05:57.266 00:06:00.209 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 02:11:22.504 00:00:11.796 TCP 12.102.0.1:44384 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:12:24.336 00:00:11.800 TCP 12.102.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:13:31.336 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:13:31.360 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:13:31.581 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:13:31.715 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:13:31.564 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:13:31.690 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:13:31.534 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:13:26.177 00:00:11.801 TCP 12.102.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:14:28.013 00:00:11.801 TCP 12.102.0.1:39340 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:15:29.849 00:00:11.761 TCP 12.102.0.1:58050 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:16:31.651 00:00:11.817 TCP 12.102.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:17:33.508 00:00:11.798 TCP 12.102.0.1:57062 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:12:57.266 00:06:00.211 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 02:12:57.269 00:06:00.206 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 02:18:31.707 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:18:31.925 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:18:31.930 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:18:31.971 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:18:31.953 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:18:31.684 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:18:32.007 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:18:35.350 00:00:11.806 TCP 12.102.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:19:37.194 00:00:11.801 TCP 12.102.0.1:33850 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:20:39.044 00:00:11.803 TCP 12.102.0.1:32944 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:21:40.882 00:00:11.808 TCP 12.102.0.1:60532 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:22:42.726 00:00:11.876 TCP 12.102.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:23:31.657 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:23:31.686 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:23:31.876 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:23:31.774 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:23:31.706 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:23:31.755 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:23:31.635 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:23:44.641 00:00:11.802 TCP 12.102.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:24:46.497 00:00:11.783 TCP 12.102.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:19:57.271 00:06:00.206 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 02:19:57.269 00:06:00.210 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 02:25:48.296 00:00:11.805 TCP 12.102.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:26:50.138 00:00:11.816 TCP 12.102.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:27:51.989 00:00:11.759 TCP 12.102.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:28:31.810 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:28:31.833 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:28:31.620 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:28:31.907 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:28:32.032 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:28:31.984 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:28:31.997 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:28:53.788 00:00:11.815 TCP 12.102.0.1:41880 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:29:55.637 00:00:11.805 TCP 12.102.0.1:44704 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:30:57.481 00:00:12.228 TCP 12.102.0.1:55286 -> 1.101.0.1:3000 15 1926 1 2025-10-27 02:26:57.274 00:06:00.204 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 02:26:57.271 00:06:00.211 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 02:31:59.752 00:00:11.802 TCP 12.102.0.1:51180 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:33:01.593 00:00:11.766 TCP 12.102.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:33:31.758 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:33:31.933 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:33:31.918 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:33:31.797 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:33:31.766 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:33:31.737 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:33:32.003 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:34:03.400 00:00:11.804 TCP 12.102.0.1:42164 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:35:05.242 00:00:11.802 TCP 12.102.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:36:07.086 00:00:11.805 TCP 12.102.0.1:47236 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:37:08.928 00:00:11.817 TCP 12.102.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:38:10.785 00:00:11.773 TCP 12.102.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:38:31.955 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:38:32.019 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:38:32.083 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:38:32.110 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:38:32.144 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:38:32.023 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:38:31.996 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:33:57.277 00:06:00.203 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 02:33:57.275 00:06:00.208 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 02:39:12.594 00:00:11.804 TCP 12.102.0.1:59058 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:40:14.435 00:00:11.817 TCP 12.102.0.1:55524 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:41:16.282 00:00:11.803 TCP 12.102.0.1:56268 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:42:18.125 00:00:11.802 TCP 12.102.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:43:19.961 00:00:11.814 TCP 12.102.0.1:36240 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:43:32.620 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:43:32.413 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:43:32.342 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:43:32.479 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:43:31.973 00:00:00.031 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:43:32.311 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:43:32.596 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:44:21.810 00:00:11.801 TCP 12.102.0.1:35914 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:45:23.654 00:00:11.816 TCP 12.102.0.1:50196 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:40:57.278 00:06:00.202 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 02:40:57.276 00:06:00.208 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 02:46:25.509 00:00:12.249 TCP 12.102.0.1:45146 -> 1.101.0.1:3000 15 1926 1 2025-10-27 02:47:27.789 00:00:11.811 TCP 12.102.0.1:57110 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:48:32.280 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:48:32.419 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:48:32.281 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:48:32.054 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:48:32.411 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:48:32.226 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:48:32.258 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:48:29.635 00:00:11.804 TCP 12.102.0.1:40782 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:49:31.474 00:00:11.797 TCP 12.102.0.1:40702 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:50:33.310 00:00:11.807 TCP 12.102.0.1:48118 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:51:35.152 00:00:11.810 TCP 12.102.0.1:56636 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:52:37.005 00:00:11.795 TCP 12.102.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:47:57.279 00:06:00.203 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 02:47:57.276 00:06:00.208 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 02:53:32.288 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:53:32.311 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:53:32.368 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:53:32.381 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:53:32.412 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:53:32.507 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:53:32.226 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 02:53:38.847 00:00:11.806 TCP 12.102.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:54:40.693 00:00:11.812 TCP 12.102.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:55:42.541 00:00:11.776 TCP 12.102.0.1:56326 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:56:44.366 00:00:12.212 TCP 12.102.0.1:53738 -> 1.101.0.1:3000 15 1926 1 2025-10-27 02:57:46.621 00:00:11.805 TCP 12.102.0.1:44778 -> 1.101.0.1:3000 11 1507 1 2025-10-27 02:58:32.431 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 02:58:32.453 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 02:58:32.580 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 02:58:32.691 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 02:58:32.304 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 02:58:32.480 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 02:58:32.453 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 158, total bytes: 124026, total packets: 1130, avg bps: 277, avg pps: 0, avg bpp: 109 Time window: 2025-10-27 01:58:57 - 2025-10-27 02:58:32 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0047s User: 0.0000s Wall: 0.0019s flows/second: 84625.2 Runtime: 0.0019s