Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 14:53:59.157 00:06:00.038 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 14:58:49.731 00:00:11.799 TCP 12.102.0.1:46790 -> 1.101.0.1:3000 11 1507 1 2025-10-30 14:59:51.573 00:00:11.816 TCP 12.102.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:00:13.395 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:00:13.420 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:00:13.726 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:00:13.789 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:00:13.646 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:00:14.048 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:00:13.405 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:00:53.426 00:00:11.798 TCP 12.102.0.1:49640 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:01:55.265 00:00:11.759 TCP 12.102.0.1:42052 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:02:57.070 00:00:11.801 TCP 12.102.0.1:57484 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:03:58.905 00:00:11.819 TCP 12.102.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-10-30 14:59:59.191 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-30 15:05:13.787 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:05:13.773 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:05:00.763 00:00:11.804 TCP 12.102.0.1:43292 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:05:13.810 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:05:13.724 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:05:13.775 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:05:13.670 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:05:13.702 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:00:59.160 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 15:06:02.602 00:00:11.806 TCP 12.102.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:07:04.440 00:00:11.757 TCP 12.102.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:08:06.251 00:00:11.802 TCP 12.102.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:09:08.091 00:00:11.799 TCP 12.102.0.1:60816 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:10:13.825 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:10:13.847 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:10:13.725 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:10:13.636 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:10:13.932 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:10:13.984 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:10:13.703 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:10:09.930 00:00:11.810 TCP 12.102.0.1:39490 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:11:11.779 00:00:11.798 TCP 12.102.0.1:50084 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:06:59.193 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-30 15:12:13.622 00:00:11.803 TCP 12.102.0.1:47500 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:07:59.161 00:06:00.039 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 15:13:15.463 00:00:11.798 TCP 12.102.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:14:17.304 00:00:11.806 TCP 12.102.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:15:13.686 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:15:13.964 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:15:14.043 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:15:13.726 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:15:13.874 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:15:13.919 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:15:13.943 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:15:19.144 00:00:11.815 TCP 12.102.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:16:20.996 00:00:11.799 TCP 12.102.0.1:45064 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:17:22.838 00:00:11.798 TCP 12.102.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:18:24.673 00:00:11.804 TCP 12.102.0.1:56382 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:13:59.199 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-30 15:19:26.515 00:00:11.826 TCP 12.102.0.1:39526 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:14:59.162 00:06:00.039 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 15:20:13.968 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:20:14.155 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:20:14.287 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:20:13.961 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:20:14.105 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:20:14.237 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:20:13.946 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:20:28.356 00:00:11.831 TCP 12.102.0.1:56712 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:21:30.226 00:00:11.807 TCP 12.102.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:22:32.080 00:00:11.800 TCP 12.102.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:23:33.919 00:00:12.261 TCP 12.102.0.1:53388 -> 1.101.0.1:3000 15 1926 1 2025-10-30 15:24:36.219 00:00:11.796 TCP 12.102.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:25:14.138 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:25:14.161 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:25:13.909 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:25:14.122 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:25:14.288 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:25:14.276 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:25:14.148 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:25:38.072 00:00:11.808 TCP 12.102.0.1:38022 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:20:59.199 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-30 15:26:39.918 00:00:11.817 TCP 12.102.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:21:59.164 00:06:00.039 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 15:27:41.773 00:00:11.802 TCP 12.102.0.1:36636 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:28:43.617 00:00:11.803 TCP 12.102.0.1:45290 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:29:45.460 00:00:11.800 TCP 12.102.0.1:44166 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:30:14.130 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:30:14.228 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:30:14.065 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:30:13.929 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:30:14.152 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:30:14.101 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:30:14.108 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:30:47.301 00:00:11.811 TCP 12.102.0.1:48496 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:31:49.147 00:00:11.932 TCP 12.102.0.1:34538 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:27:59.200 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-30 15:32:51.116 00:00:11.808 TCP 12.102.0.1:49268 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:28:59.166 00:06:00.039 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 15:33:52.961 00:00:11.765 TCP 12.102.0.1:33532 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:34:54.764 00:00:11.805 TCP 12.102.0.1:39718 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:35:14.084 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:35:14.107 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:35:14.346 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:35:14.352 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:35:14.241 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:35:14.339 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:35:14.002 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:35:56.611 00:00:11.822 TCP 12.102.0.1:50940 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:36:58.473 00:00:11.798 TCP 12.102.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:38:00.316 00:00:11.839 TCP 12.102.0.1:56942 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:39:02.194 00:00:12.307 TCP 12.102.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:34:59.202 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-30 15:40:04.537 00:00:11.808 TCP 12.102.0.1:43776 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:40:14.314 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:40:14.279 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:40:14.163 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:40:14.250 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:40:14.285 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:40:14.223 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:40:14.292 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:35:59.170 00:06:00.035 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 15:41:06.382 00:00:11.769 TCP 12.102.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:42:08.187 00:00:11.802 TCP 12.102.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:43:10.033 00:00:12.232 TCP 12.102.0.1:36038 -> 1.101.0.1:3000 15 1926 1 2025-10-30 15:44:12.303 00:00:11.797 TCP 12.102.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:45:14.561 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:45:14.585 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:45:14.550 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:45:14.326 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:45:14.425 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:45:14.560 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:45:14.187 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:45:14.138 00:00:11.821 TCP 12.102.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:46:15.996 00:00:11.809 TCP 12.102.0.1:45578 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:41:59.204 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-30 15:47:17.840 00:00:11.797 TCP 12.102.0.1:44506 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:42:59.172 00:06:00.035 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 15:48:19.679 00:00:11.812 TCP 12.102.0.1:56686 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:49:21.532 00:00:11.802 TCP 12.102.0.1:56882 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:50:14.849 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:50:14.873 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:50:14.865 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:50:14.884 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:50:14.763 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:50:14.868 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:50:14.741 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:50:23.377 00:00:11.810 TCP 12.102.0.1:49966 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:51:25.228 00:00:11.774 TCP 12.102.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:52:27.056 00:00:11.798 TCP 12.102.0.1:51888 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:53:28.893 00:00:11.802 TCP 12.102.0.1:56462 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:48:59.206 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-30 15:54:30.733 00:00:11.801 TCP 12.102.0.1:52464 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:49:59.175 00:06:00.034 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 15:55:14.670 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 15:55:14.692 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 15:55:14.591 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 15:55:14.807 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 15:55:14.763 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 15:55:14.617 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 15:55:14.823 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 15:55:32.572 00:00:11.769 TCP 12.102.0.1:37212 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:56:34.381 00:00:11.808 TCP 12.102.0.1:58624 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:57:36.227 00:00:11.806 TCP 12.102.0.1:34290 -> 1.101.0.1:3000 11 1507 1 2025-10-30 15:58:38.077 00:00:11.809 TCP 12.102.0.1:52826 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 122644, total packets: 1091, avg bps: 252, avg pps: 0, avg bpp: 112 Time window: 2025-10-30 14:53:59 - 2025-10-30 15:58:49 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0065s User: 0.0000s Wall: 0.0033s flows/second: 48265.9 Runtime: 0.0033s