Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 16:58:54.422 00:00:11.806 TCP 12.102.0.1:41334 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:54:57.564 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 16:54:57.562 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 16:59:56.268 00:00:11.807 TCP 12.102.0.1:52794 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:00:58.107 00:00:11.800 TCP 12.102.0.1:59224 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:01:59.944 00:00:11.812 TCP 12.102.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:03:01.791 00:00:11.798 TCP 12.102.0.1:47938 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:03:49.503 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:03:49.525 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:03:49.477 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:03:49.639 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:03:49.605 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:03:49.484 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:03:49.251 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:04:03.659 00:00:11.804 TCP 12.102.0.1:38192 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:05:05.504 00:00:11.830 TCP 12.102.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:06:07.368 00:00:11.830 TCP 12.102.0.1:35452 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:01:57.565 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 17:01:57.563 00:06:00.181 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 17:07:09.237 00:00:11.809 TCP 12.102.0.1:40960 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:08:11.085 00:00:11.768 TCP 12.102.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:08:49.748 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:08:49.590 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:08:49.772 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:08:49.728 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:08:49.653 00:00:00.034 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:08:49.599 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:08:49.710 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:09:12.889 00:00:11.813 TCP 12.102.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:10:14.736 00:00:11.797 TCP 12.102.0.1:37282 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:11:16.571 00:00:11.803 TCP 12.102.0.1:35830 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:12:18.412 00:00:11.802 TCP 12.102.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:13:20.261 00:00:11.816 TCP 12.102.0.1:59222 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:13:49.786 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:13:49.869 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:13:49.911 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:13:49.816 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:13:49.896 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:13:49.781 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:13:49.763 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:08:57.567 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 17:08:57.564 00:06:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 17:14:22.119 00:00:11.805 TCP 12.102.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:15:23.963 00:00:11.773 TCP 12.102.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:16:25.774 00:00:11.801 TCP 12.102.0.1:41896 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:17:27.622 00:00:11.804 TCP 12.102.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:18:29.458 00:00:11.808 TCP 12.102.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:18:49.891 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:18:49.766 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:18:49.906 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:18:49.942 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:18:49.828 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:18:49.798 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:18:49.884 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:19:31.304 00:00:11.812 TCP 12.102.0.1:33424 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:20:33.156 00:00:11.809 TCP 12.102.0.1:35842 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:15:57.567 00:06:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 17:15:57.570 00:06:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 17:21:35.000 00:00:12.261 TCP 12.102.0.1:46758 -> 1.101.0.1:3000 15 1926 1 2025-10-27 17:22:37.298 00:00:11.808 TCP 12.102.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:23:50.050 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:23:50.004 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:23:49.809 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:23:50.016 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:23:49.871 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:23:39.146 00:00:11.820 TCP 12.102.0.1:55124 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:23:49.872 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:23:49.849 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:24:41.007 00:00:11.801 TCP 12.102.0.1:59532 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:25:42.841 00:00:11.817 TCP 12.102.0.1:36238 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:26:44.697 00:00:11.810 TCP 12.102.0.1:58896 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:22:57.571 00:06:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 17:27:46.543 00:00:11.805 TCP 12.102.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:22:57.568 00:06:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 17:28:50.277 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:28:50.300 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:28:50.170 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:28:50.276 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:28:50.336 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:28:49.980 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:28:50.301 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:28:48.383 00:00:11.813 TCP 12.102.0.1:43104 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:29:50.228 00:00:11.806 TCP 12.102.0.1:49518 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:30:52.080 00:00:11.801 TCP 12.102.0.1:46464 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:31:53.925 00:00:12.250 TCP 12.102.0.1:35640 -> 1.101.0.1:3000 15 1926 1 2025-10-27 17:32:56.213 00:00:11.903 TCP 12.102.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:33:50.171 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:33:50.323 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:33:50.249 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:33:50.193 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:33:50.220 00:00:00.032 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:33:50.259 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:33:50.109 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:33:58.152 00:00:11.773 TCP 12.102.0.1:51418 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:29:57.569 00:06:00.187 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 17:29:57.571 00:06:00.183 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 17:34:59.963 00:00:11.803 TCP 12.102.0.1:58256 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:36:01.803 00:00:12.248 TCP 12.102.0.1:55794 -> 1.101.0.1:3000 15 1926 1 2025-10-27 17:37:04.092 00:00:11.769 TCP 12.102.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:38:05.901 00:00:11.804 TCP 12.102.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:38:50.169 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:38:50.163 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:38:50.365 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:38:50.337 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:38:50.386 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:38:50.177 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:38:50.147 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:39:07.744 00:00:11.805 TCP 12.102.0.1:37560 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:40:09.587 00:00:11.766 TCP 12.102.0.1:57490 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:41:11.390 00:00:11.804 TCP 12.102.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:36:57.570 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 17:36:57.573 00:06:00.183 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 17:42:13.229 00:00:11.800 TCP 12.102.0.1:60354 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:43:15.077 00:00:12.206 TCP 12.102.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:43:50.241 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:43:50.174 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:43:50.180 00:00:00.037 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:43:50.287 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:43:50.050 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:43:50.256 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:43:50.218 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:44:17.323 00:00:11.799 TCP 12.102.0.1:37478 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:45:19.158 00:00:11.816 TCP 12.102.0.1:55730 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:46:21.022 00:00:11.800 TCP 12.102.0.1:33442 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:47:22.863 00:00:11.814 TCP 12.102.0.1:48852 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:48:24.713 00:00:11.798 TCP 12.102.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:48:50.348 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:48:50.272 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:48:50.389 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:48:50.373 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:48:50.468 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:48:50.405 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:48:50.325 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:43:57.576 00:06:00.185 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 17:43:57.578 00:06:00.180 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 17:49:26.546 00:00:11.794 TCP 12.102.0.1:51894 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:50:28.380 00:00:11.778 TCP 12.102.0.1:52764 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:51:30.197 00:00:12.280 TCP 12.102.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:52:32.516 00:00:11.770 TCP 12.102.0.1:41338 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:53:34.322 00:00:11.799 TCP 12.102.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:53:50.479 00:00:00.028 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:53:50.707 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:53:50.498 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:53:50.763 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:53:50.669 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:53:50.476 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:53:50.458 00:00:00.028 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 17:54:36.163 00:00:11.768 TCP 12.102.0.1:33534 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:55:37.965 00:00:11.802 TCP 12.102.0.1:54346 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:50:57.578 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 17:50:57.582 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 17:56:39.806 00:00:11.807 TCP 12.102.0.1:60592 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:57:41.650 00:00:11.819 TCP 12.102.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:58:50.491 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:58:50.330 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 17:58:50.569 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 17:58:50.538 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 17:58:50.342 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 17:58:50.501 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 17:58:50.467 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 Summary: total flows: 160, total bytes: 125329, total packets: 1154, avg bps: 261, avg pps: 0, avg bpp: 108 Time window: 2025-10-27 16:54:57 - 2025-10-27 17:58:50 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0028s User: 0.0019s Wall: 0.0028s flows/second: 56920.2 Runtime: 0.0028s