Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 06:58:48.807 00:00:11.760 TCP 12.102.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-10-31 06:59:50.617 00:00:11.797 TCP 12.102.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:00:32.691 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:00:32.835 00:00:00.028 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:00:32.826 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:00:32.736 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:00:32.705 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:00:32.714 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:00:32.885 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:00:52.451 00:00:11.812 TCP 12.102.0.1:42268 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:01:54.292 00:00:11.812 TCP 12.102.0.1:47512 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:02:56.146 00:00:11.783 TCP 12.102.0.1:48382 -> 1.101.0.1:3000 11 1507 1 2025-10-31 06:58:59.495 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-31 07:03:57.967 00:00:11.802 TCP 12.102.0.1:40662 -> 1.101.0.1:3000 11 1507 1 2025-10-31 06:59:59.495 00:06:00.004 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-31 07:04:59.806 00:00:11.801 TCP 12.102.0.1:47354 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:05:32.857 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:05:32.778 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:05:32.876 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:05:32.715 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:05:33.009 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:05:32.907 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:05:32.754 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:06:01.650 00:00:11.795 TCP 12.102.0.1:45646 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:07:03.486 00:00:11.802 TCP 12.102.0.1:43948 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:08:05.323 00:00:11.809 TCP 12.102.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:09:07.168 00:00:11.776 TCP 12.102.0.1:56244 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:10:08.988 00:00:11.762 TCP 12.102.0.1:55796 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:10:32.801 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:10:32.824 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:10:33.034 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:10:33.103 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:10:33.069 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:10:33.078 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:10:33.213 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:05:59.496 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-31 07:11:10.791 00:00:11.803 TCP 12.102.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:06:59.495 00:06:00.005 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-31 07:12:12.631 00:00:11.798 TCP 12.102.0.1:53180 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:13:14.476 00:00:11.799 TCP 12.102.0.1:52106 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:14:16.312 00:00:11.801 TCP 12.102.0.1:56804 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:15:18.150 00:00:11.804 TCP 12.102.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:15:33.036 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:15:33.152 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:15:33.070 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:15:33.186 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:15:32.984 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:15:33.154 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:15:33.015 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:16:20.001 00:00:11.799 TCP 12.102.0.1:54470 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:17:21.838 00:00:11.800 TCP 12.102.0.1:54552 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:12:59.498 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-31 07:18:23.673 00:00:11.764 TCP 12.102.0.1:58978 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:13:59.499 00:06:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-31 07:19:25.482 00:00:11.802 TCP 12.102.0.1:54770 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:20:33.296 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:20:33.010 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:20:33.375 00:00:00.032 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:20:33.028 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:20:33.340 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:20:32.990 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:20:33.274 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:20:27.322 00:00:11.806 TCP 12.102.0.1:34716 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:21:29.163 00:00:11.762 TCP 12.102.0.1:58682 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:22:30.960 00:00:11.870 TCP 12.102.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:23:32.867 00:00:11.811 TCP 12.102.0.1:58286 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:24:34.716 00:00:11.796 TCP 12.102.0.1:59610 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:19:59.500 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-31 07:25:33.466 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:25:33.188 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:25:33.336 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:25:33.075 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:25:33.407 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:25:33.274 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:25:33.444 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:25:36.548 00:00:12.239 TCP 12.102.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:20:59.499 00:06:00.004 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-31 07:26:38.826 00:00:11.800 TCP 12.102.0.1:59770 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:27:40.666 00:00:11.809 TCP 12.102.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:28:42.514 00:00:11.801 TCP 12.102.0.1:36300 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:29:44.363 00:00:11.835 TCP 12.102.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:30:33.128 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:30:33.151 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:30:33.725 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:30:33.519 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:30:33.127 00:00:00.042 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:30:33.571 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:30:33.240 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:30:46.236 00:00:11.809 TCP 12.102.0.1:41432 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:26:59.500 00:06:00.006 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-31 07:31:48.085 00:00:11.806 TCP 12.102.0.1:33644 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:32:49.934 00:00:11.822 TCP 12.102.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:27:59.502 00:06:00.004 TCP 179.10.12.10:179 -> 179.10.12.12:58070 13 809 1 2025-10-31 07:33:51.791 00:00:11.804 TCP 12.102.0.1:33472 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:34:53.627 00:00:11.776 TCP 12.102.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:35:33.397 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:35:33.420 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:35:33.615 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:35:33.388 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:35:33.611 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:35:33.720 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:35:33.434 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:35:55.444 00:00:11.802 TCP 12.102.0.1:51942 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:36:57.283 00:00:12.338 TCP 12.102.0.1:33752 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:37:59.662 00:00:11.811 TCP 12.102.0.1:47314 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:33:59.502 00:06:00.006 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-31 07:39:01.510 00:00:11.800 TCP 12.102.0.1:57904 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:34:59.505 00:06:00.001 TCP 179.10.12.10:179 -> 179.10.12.12:58070 11 705 1 2025-10-31 07:40:03.350 00:00:11.813 TCP 12.102.0.1:37378 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:40:33.623 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:40:33.657 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:40:33.776 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:40:33.603 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:40:33.660 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:40:33.664 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:40:33.645 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:41:05.199 00:00:11.802 TCP 12.102.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:42:07.065 00:00:11.761 TCP 12.102.0.1:34232 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:43:08.866 00:00:11.800 TCP 12.102.0.1:38576 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:44:10.706 00:00:12.272 TCP 12.102.0.1:46160 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:45:13.026 00:00:11.798 TCP 12.102.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:45:33.604 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:45:33.626 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:45:33.858 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:45:33.662 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:45:33.657 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:45:33.845 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:45:33.536 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:40:59.504 00:06:00.006 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-31 07:46:14.862 00:00:11.757 TCP 12.102.0.1:58642 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:41:59.505 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-31 07:47:16.661 00:00:11.810 TCP 12.102.0.1:59864 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:48:18.507 00:00:12.253 TCP 12.102.0.1:49278 -> 1.101.0.1:3000 15 1926 1 2025-10-31 07:49:20.802 00:00:11.801 TCP 12.102.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:50:22.641 00:00:11.804 TCP 12.102.0.1:38212 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:50:33.925 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:50:33.715 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:50:33.758 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:50:33.921 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:50:33.825 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:50:33.715 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:50:33.902 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:51:24.483 00:00:11.771 TCP 12.102.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:52:26.287 00:00:11.811 TCP 12.102.0.1:43922 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:47:59.505 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-31 07:53:28.135 00:00:11.800 TCP 12.102.0.1:60144 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:48:59.507 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-31 07:54:29.971 00:00:11.806 TCP 12.102.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:55:33.959 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-31 07:55:34.161 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 07:55:34.036 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-31 07:55:34.175 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-31 07:55:34.089 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-31 07:55:33.977 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-31 07:55:33.936 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-31 07:55:31.816 00:00:11.804 TCP 12.102.0.1:36772 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:56:33.656 00:00:11.809 TCP 12.102.0.1:40322 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:57:35.511 00:00:11.810 TCP 12.102.0.1:32900 -> 1.101.0.1:3000 11 1507 1 2025-10-31 07:58:37.360 00:00:11.820 TCP 12.102.0.1:46340 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124068, total packets: 1125, avg bps: 275, avg pps: 0, avg bpp: 110 Time window: 2025-10-31 06:58:48 - 2025-10-31 07:58:49 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0032s User: 0.0032s Wall: 0.0027s flows/second: 59752.2 Runtime: 0.0027s