Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 17:58:42.470 00:00:11.814 TCP 12.102.0.1:48692 -> 1.101.0.1:3000 11 1507 1 2025-10-28 17:53:58.144 00:06:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 17:59:19.163 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 17:59:19.526 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 17:59:19.390 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 17:59:19.353 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 17:59:19.386 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 17:59:19.252 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 17:59:19.141 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 17:59:44.318 00:00:11.825 TCP 12.102.0.1:51094 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:00:46.187 00:00:11.798 TCP 12.102.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:01:48.035 00:00:11.804 TCP 12.102.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:02:49.878 00:00:11.800 TCP 12.102.0.1:43248 -> 1.101.0.1:3000 11 1507 1 2025-10-28 17:58:58.144 00:06:00.098 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 18:03:51.715 00:00:11.767 TCP 12.102.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:04:19.532 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:04:19.555 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:04:19.697 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:04:19.462 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:04:19.520 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:04:19.551 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:04:19.517 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:04:53.513 00:00:12.736 TCP 12.102.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:00:58.148 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 18:05:56.303 00:00:11.820 TCP 12.102.0.1:43240 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:06:58.169 00:00:11.814 TCP 12.102.0.1:49820 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:08:00.032 00:00:11.805 TCP 12.102.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:09:01.874 00:00:11.814 TCP 12.102.0.1:48268 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:09:20.004 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:09:20.028 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:09:20.117 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:09:19.664 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:09:20.250 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:09:20.217 00:00:00.034 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:09:19.872 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:10:03.726 00:00:11.803 TCP 12.102.0.1:56898 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:05:58.146 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 18:11:05.562 00:00:11.810 TCP 12.102.0.1:37408 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:12:07.412 00:00:11.797 TCP 12.102.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:07:58.150 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 18:13:09.248 00:00:11.801 TCP 12.102.0.1:43700 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:14:19.785 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:14:19.806 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:14:19.900 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:14:19.875 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:14:19.719 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:14:19.652 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:14:19.429 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:14:11.088 00:00:11.804 TCP 12.102.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:15:12.926 00:00:11.820 TCP 12.102.0.1:47204 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:16:14.783 00:00:11.802 TCP 12.102.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:17:16.624 00:00:11.802 TCP 12.102.0.1:59212 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:12:58.148 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 18:18:18.462 00:00:11.803 TCP 12.102.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:19:20.321 00:00:00.032 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:19:20.516 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:19:20.458 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:19:20.416 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:19:20.673 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:19:20.343 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:19:20.297 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:19:20.304 00:00:11.800 TCP 12.102.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:14:58.150 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 18:20:22.147 00:00:11.811 TCP 12.102.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:21:24.001 00:00:12.070 TCP 12.102.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:22:26.107 00:00:11.766 TCP 12.102.0.1:53216 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:23:27.914 00:00:11.780 TCP 12.102.0.1:37236 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:24:19.805 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:24:19.965 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:24:19.918 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:24:19.832 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:24:19.930 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:24:19.688 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:24:19.783 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:24:29.732 00:00:12.051 TCP 12.102.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:19:58.149 00:06:00.098 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 18:25:31.821 00:00:11.759 TCP 12.102.0.1:58512 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:26:33.618 00:00:11.759 TCP 12.102.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:21:58.151 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 18:27:35.415 00:00:11.803 TCP 12.102.0.1:50780 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:28:37.255 00:00:11.797 TCP 12.102.0.1:35544 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:29:20.030 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:29:20.112 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:29:19.772 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:29:20.107 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:29:20.108 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:29:20.032 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:29:20.006 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:29:39.090 00:00:11.801 TCP 12.102.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:30:40.929 00:00:11.820 TCP 12.102.0.1:43772 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:31:42.788 00:00:11.756 TCP 12.102.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:26:58.152 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 18:32:44.581 00:00:12.067 TCP 12.102.0.1:44608 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:28:58.152 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 18:33:46.683 00:00:11.813 TCP 12.102.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:34:20.029 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:34:20.165 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:34:20.166 00:00:00.049 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:34:20.055 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:34:20.319 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:34:20.028 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:34:20.007 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:34:48.533 00:00:11.800 TCP 12.102.0.1:49224 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:35:50.378 00:00:11.815 TCP 12.102.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:36:52.234 00:00:11.803 TCP 12.102.0.1:56132 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:37:54.085 00:00:11.799 TCP 12.102.0.1:50818 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:33:58.151 00:06:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 18:38:55.924 00:00:11.817 TCP 12.102.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:39:20.346 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:39:20.346 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:39:20.143 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:39:20.304 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:39:20.114 00:00:00.019 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:39:20.087 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:39:20.325 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:39:57.778 00:00:11.804 TCP 12.102.0.1:49652 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:35:58.155 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 18:40:59.627 00:00:11.805 TCP 12.102.0.1:34856 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:42:01.465 00:00:12.250 TCP 12.102.0.1:40202 -> 1.101.0.1:3000 15 1926 1 2025-10-28 18:43:03.753 00:00:11.804 TCP 12.102.0.1:55194 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:44:05.592 00:00:11.761 TCP 12.102.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:44:20.280 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:44:20.305 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:44:20.407 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:44:20.087 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:44:20.508 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:44:20.204 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:44:20.256 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:45:07.392 00:00:11.856 TCP 12.102.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:40:58.157 00:06:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 18:46:09.287 00:00:11.811 TCP 12.102.0.1:56462 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:47:11.137 00:00:11.824 TCP 12.102.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:42:58.160 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 18:48:13.005 00:00:11.797 TCP 12.102.0.1:58978 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:49:20.363 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:49:20.371 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:49:20.575 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:49:20.617 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:49:20.358 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:49:20.384 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:49:20.386 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:49:14.845 00:00:11.753 TCP 12.102.0.1:52142 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:50:16.634 00:00:11.824 TCP 12.102.0.1:49680 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:51:18.493 00:00:11.942 TCP 12.102.0.1:36728 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:52:20.470 00:00:11.769 TCP 12.102.0.1:57182 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:47:58.160 00:06:00.108 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 18:53:22.277 00:00:11.810 TCP 12.102.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:54:20.455 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 18:54:20.785 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 18:54:20.257 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 18:54:20.268 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 18:54:20.721 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 18:54:20.700 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 18:54:20.433 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 18:54:24.123 00:00:11.798 TCP 12.102.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:49:58.162 00:06:00.106 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 18:55:25.957 00:00:11.813 TCP 12.102.0.1:60270 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:56:27.811 00:00:11.800 TCP 12.102.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:57:29.651 00:00:11.761 TCP 12.102.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-10-28 18:58:31.451 00:00:11.803 TCP 12.102.0.1:53506 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-10-28 17:53:58 - 2025-10-28 18:58:43 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0028s User: 0.0038s Wall: 0.0027s flows/second: 59367.4 Runtime: 0.0027s