Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 00:53:58.810 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 00:58:50.536 00:00:11.800 TCP 12.102.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:59:56.786 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 00:59:56.809 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 00:59:56.700 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:59:56.812 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 00:59:56.782 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 00:59:56.865 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 00:59:56.993 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 00:59:52.377 00:00:11.805 TCP 12.102.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:55:58.812 00:06:00.073 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:00:54.232 00:00:11.808 TCP 12.102.0.1:45294 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:01:56.087 00:00:11.767 TCP 12.102.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:02:57.907 00:00:11.793 TCP 12.102.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:03:59.743 00:00:11.810 TCP 12.102.0.1:39920 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:04:56.662 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:04:56.685 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:04:56.888 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:04:56.731 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:04:56.599 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:04:56.732 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:04:56.764 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:05:01.591 00:00:11.775 TCP 12.102.0.1:51594 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:00:58.811 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 01:06:03.402 00:00:11.819 TCP 12.102.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:07:05.265 00:00:11.804 TCP 12.102.0.1:46386 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:02:58.815 00:06:00.073 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:08:07.107 00:00:11.803 TCP 12.102.0.1:43086 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:09:08.948 00:00:11.802 TCP 12.102.0.1:58824 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:09:56.942 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:09:56.831 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:09:56.966 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:09:56.949 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:09:56.920 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:09:57.025 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:09:57.092 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:10:10.791 00:00:11.780 TCP 12.102.0.1:49844 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:11:12.606 00:00:11.863 TCP 12.102.0.1:41818 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:12:14.516 00:00:11.801 TCP 12.102.0.1:36692 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:07:58.815 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 01:13:16.355 00:00:12.272 TCP 12.102.0.1:49894 -> 1.101.0.1:3000 15 1926 1 2025-10-30 01:14:18.667 00:00:11.806 TCP 12.102.0.1:33580 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:14:56.970 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:14:56.854 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:14:56.939 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:14:57.122 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:14:57.146 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:09:58.818 00:06:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:14:57.063 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:14:57.056 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:15:20.516 00:00:11.800 TCP 12.102.0.1:60270 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:16:22.360 00:00:11.791 TCP 12.102.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:17:24.185 00:00:11.804 TCP 12.102.0.1:42178 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:18:26.030 00:00:11.803 TCP 12.102.0.1:39360 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:19:27.874 00:00:11.761 TCP 12.102.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:19:57.008 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:19:57.276 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:19:57.145 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:19:57.100 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:19:57.282 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:19:57.151 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:19:56.987 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:14:58.818 00:06:00.075 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 01:20:29.671 00:00:11.759 TCP 12.102.0.1:45452 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:21:31.466 00:00:12.232 TCP 12.102.0.1:57990 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:16:58.820 00:06:00.070 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:22:33.737 00:00:11.804 TCP 12.102.0.1:42804 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:23:35.577 00:00:12.280 TCP 12.102.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:24:37.895 00:00:11.832 TCP 12.102.0.1:35120 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:24:56.968 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:24:56.957 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:24:56.979 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:24:57.180 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:24:57.253 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:24:57.215 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:24:57.196 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:25:39.769 00:00:11.808 TCP 12.102.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:26:41.616 00:00:11.757 TCP 12.102.0.1:50506 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:21:58.818 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 01:27:43.413 00:00:12.244 TCP 12.102.0.1:35854 -> 1.101.0.1:3000 15 1926 1 2025-10-30 01:23:58.821 00:06:00.069 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:28:45.698 00:00:11.804 TCP 12.102.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:29:57.262 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:29:47.541 00:00:11.797 TCP 12.102.0.1:53926 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:29:57.285 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:29:57.558 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:29:57.356 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:29:57.385 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:29:57.184 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:29:57.084 00:00:00.041 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:30:49.380 00:00:11.772 TCP 12.102.0.1:44414 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:31:51.196 00:00:11.806 TCP 12.102.0.1:48278 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:32:53.060 00:00:11.803 TCP 12.102.0.1:57936 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:28:58.820 00:06:00.075 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 01:33:54.899 00:00:11.802 TCP 12.102.0.1:42208 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:34:57.593 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:34:57.599 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:34:57.510 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:34:57.732 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:34:57.503 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:34:57.601 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:34:57.571 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:34:56.742 00:00:11.795 TCP 12.102.0.1:59224 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:30:58.825 00:06:00.068 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:35:58.573 00:00:11.815 TCP 12.102.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:37:00.429 00:00:12.061 TCP 12.102.0.1:47006 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:38:02.530 00:00:11.805 TCP 12.102.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:39:04.371 00:00:11.814 TCP 12.102.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:39:57.227 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:39:57.570 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:39:57.566 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:39:57.616 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:39:57.831 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:39:57.338 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:39:57.204 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:40:06.234 00:00:11.805 TCP 12.102.0.1:37834 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:35:58.823 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 01:41:08.080 00:00:11.806 TCP 12.102.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:42:09.927 00:00:11.818 TCP 12.102.0.1:41278 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:37:58.827 00:06:00.068 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:43:11.781 00:00:11.863 TCP 12.102.0.1:34384 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:44:13.684 00:00:11.798 TCP 12.102.0.1:56246 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:44:57.292 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:44:57.421 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:44:57.624 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:44:57.322 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:44:57.606 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:44:57.565 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:44:57.269 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:45:15.524 00:00:11.795 TCP 12.102.0.1:36258 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:46:17.353 00:00:11.825 TCP 12.102.0.1:42802 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:47:19.216 00:00:11.923 TCP 12.102.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:42:58.825 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 01:48:21.178 00:00:11.801 TCP 12.102.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:49:23.028 00:00:11.824 TCP 12.102.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:49:57.898 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:49:57.922 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:44:58.829 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:49:58.103 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:49:58.043 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:49:58.009 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:49:57.940 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:49:57.984 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:50:24.889 00:00:11.815 TCP 12.102.0.1:54408 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:51:26.747 00:00:11.806 TCP 12.102.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:52:28.592 00:00:11.817 TCP 12.102.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:53:30.452 00:00:11.809 TCP 12.102.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:54:32.300 00:00:11.812 TCP 12.102.0.1:40640 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:54:58.039 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 01:54:58.036 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 01:54:57.835 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 01:54:57.921 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 01:54:57.778 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 01:54:57.971 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 01:54:57.898 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 01:49:58.828 00:06:00.071 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 01:55:34.150 00:00:11.808 TCP 12.102.0.1:45068 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:56:35.992 00:00:11.802 TCP 12.102.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:51:58.831 00:06:00.065 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 01:57:37.842 00:00:11.812 TCP 12.102.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-10-30 01:58:39.685 00:00:11.801 TCP 12.102.0.1:37808 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 126417, total packets: 1161, avg bps: 259, avg pps: 0, avg bpp: 108 Time window: 2025-10-30 00:53:58 - 2025-10-30 01:58:51 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0056s User: 0.0009s Wall: 0.0051s flows/second: 31599.6 Runtime: 0.0052s