Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 13:59:28.590 00:00:11.813 TCP 12.102.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:00:30.444 00:00:11.806 TCP 12.102.0.1:33300 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:01:32.286 00:00:11.810 TCP 12.102.0.1:59678 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:02:34.125 00:00:11.851 TCP 12.102.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:03:45.704 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:03:45.727 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:03:45.910 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:03:45.950 00:00:00.018 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:03:45.911 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:03:46.004 00:00:00.019 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:03:45.881 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:03:36.026 00:00:11.762 TCP 12.102.0.1:42424 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:04:37.829 00:00:11.759 TCP 12.102.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-10-27 13:59:57.514 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 13:59:57.511 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 14:05:39.630 00:00:11.801 TCP 12.102.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:06:41.465 00:00:11.799 TCP 12.102.0.1:57298 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:07:43.303 00:00:11.813 TCP 12.102.0.1:46372 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:08:45.873 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:08:45.863 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:08:46.058 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:08:46.058 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:08:45.808 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:08:45.929 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:08:45.840 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:08:45.153 00:00:11.814 TCP 12.102.0.1:47118 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:09:47.010 00:00:11.799 TCP 12.102.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:10:48.849 00:00:11.808 TCP 12.102.0.1:36310 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:06:57.515 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 14:06:57.512 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 14:11:50.693 00:00:11.812 TCP 12.102.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:12:52.546 00:00:11.848 TCP 12.102.0.1:51028 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:13:46.021 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:13:46.340 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:13:46.063 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:13:46.204 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:13:46.207 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:13:46.018 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:13:45.998 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:13:54.434 00:00:11.804 TCP 12.102.0.1:32930 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:14:56.280 00:00:11.755 TCP 12.102.0.1:40304 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:15:58.082 00:00:11.802 TCP 12.102.0.1:53754 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:16:59.927 00:00:11.816 TCP 12.102.0.1:48352 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:18:01.783 00:00:11.814 TCP 12.102.0.1:53646 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:18:46.132 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:18:46.099 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:18:46.165 00:00:00.045 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:18:46.029 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:18:46.397 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:18:46.135 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:18:46.110 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:13:57.516 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 14:13:57.514 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 14:19:03.639 00:00:11.806 TCP 12.102.0.1:36904 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:20:05.483 00:00:11.823 TCP 12.102.0.1:59384 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:21:07.347 00:00:11.807 TCP 12.102.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:22:09.191 00:00:11.854 TCP 12.102.0.1:56618 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:23:11.083 00:00:11.811 TCP 12.102.0.1:48762 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:23:46.042 00:00:00.054 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:23:46.065 00:00:00.054 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:23:46.206 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:23:46.293 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:23:46.270 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:23:46.358 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:23:46.055 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:24:12.928 00:00:11.777 TCP 12.102.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:25:14.741 00:00:11.802 TCP 12.102.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:20:57.517 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 14:20:57.518 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 14:26:16.579 00:00:11.817 TCP 12.102.0.1:49764 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:27:18.433 00:00:11.868 TCP 12.102.0.1:38784 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:28:20.348 00:00:11.782 TCP 12.102.0.1:41448 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:28:46.332 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:28:46.448 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:28:46.472 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:28:46.388 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:28:46.467 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:28:46.136 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:28:46.309 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:29:22.171 00:00:11.961 TCP 12.102.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:30:24.171 00:00:11.797 TCP 12.102.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:31:26.008 00:00:12.246 TCP 12.102.0.1:37566 -> 1.101.0.1:3000 15 1926 1 2025-10-27 14:32:28.290 00:00:11.806 TCP 12.102.0.1:48648 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:27:57.517 00:06:00.179 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 14:27:57.520 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 14:33:30.130 00:00:11.802 TCP 12.102.0.1:58932 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:33:46.362 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:33:46.306 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:33:46.626 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:33:46.489 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:33:46.170 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:33:46.308 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:33:46.339 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:34:31.968 00:00:11.760 TCP 12.102.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:35:33.761 00:00:11.762 TCP 12.102.0.1:46950 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:36:35.556 00:00:11.867 TCP 12.102.0.1:35244 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:37:37.464 00:00:11.780 TCP 12.102.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:38:46.306 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:38:46.329 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:38:46.603 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:38:46.635 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:38:46.523 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:38:46.636 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:38:46.578 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:38:39.288 00:00:11.769 TCP 12.102.0.1:34450 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:39:41.105 00:00:11.809 TCP 12.102.0.1:39102 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:34:57.521 00:06:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 14:34:57.526 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 14:40:42.963 00:00:11.807 TCP 12.102.0.1:59152 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:41:44.809 00:00:11.807 TCP 12.102.0.1:60016 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:42:46.650 00:00:11.813 TCP 12.102.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:43:46.711 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:43:46.733 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:43:46.578 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:43:46.808 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:43:46.764 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:43:46.687 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:43:46.648 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:43:48.505 00:00:11.814 TCP 12.102.0.1:40638 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:44:50.360 00:00:11.791 TCP 12.102.0.1:38790 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:45:52.187 00:00:11.811 TCP 12.102.0.1:34182 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:41:57.520 00:06:00.178 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 14:41:57.523 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 14:46:54.042 00:00:11.801 TCP 12.102.0.1:55544 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:47:55.884 00:00:11.802 TCP 12.102.0.1:43288 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:48:46.788 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:48:46.810 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:48:46.835 00:00:00.019 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:48:46.616 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:48:46.790 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:48:46.800 00:00:00.019 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:48:46.676 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:48:57.725 00:00:11.804 TCP 12.102.0.1:52282 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:49:59.565 00:00:11.808 TCP 12.102.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:51:01.419 00:00:11.894 TCP 12.102.0.1:44302 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:52:03.353 00:00:11.815 TCP 12.102.0.1:38372 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:53:05.203 00:00:13.237 TCP 12.102.0.1:59998 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:53:46.823 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:53:46.942 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:53:46.778 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:53:46.829 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 14:53:46.801 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:53:47.009 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:53:47.027 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:48:57.524 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 14:48:57.521 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 14:54:08.501 00:00:11.805 TCP 12.102.0.1:35272 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:55:10.354 00:00:11.812 TCP 12.102.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:56:12.218 00:00:12.242 TCP 12.102.0.1:33050 -> 1.101.0.1:3000 15 1926 1 2025-10-27 14:57:14.499 00:00:11.812 TCP 12.102.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:58:16.354 00:00:11.818 TCP 12.102.0.1:38968 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:58:46.946 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 14:58:46.923 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 14:58:47.150 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 14:58:47.183 00:00:00.044 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 14:58:47.078 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 14:58:47.285 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 14:58:47.171 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 276, avg pps: 0, avg bpp: 109 Time window: 2025-10-27 13:59:28 - 2025-10-27 14:58:47 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0033s User: 0.0011s Wall: 0.0015s flows/second: 103952.9 Runtime: 0.0015s