Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 04:58:47.864 00:00:12.240 TCP 12.102.0.1:55130 -> 1.101.0.1:3000 15 1926 1 2025-11-01 04:59:50.144 00:00:11.806 TCP 12.102.0.1:40306 -> 1.101.0.1:3000 11 1507 1 2025-11-01 04:54:59.854 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:00:59.202 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 04:55:59.856 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:00:59.225 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:00:59.425 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:00:59.287 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:00:59.260 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:00:59.489 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:00:59.316 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:00:51.986 00:00:11.800 TCP 12.102.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:01:53.822 00:00:11.877 TCP 12.102.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:02:55.736 00:00:11.770 TCP 12.102.0.1:35356 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:03:57.543 00:00:11.764 TCP 12.102.0.1:46678 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:04:59.342 00:00:19.311 TCP 12.102.0.1:55992 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:05:59.511 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:05:59.534 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:05:59.558 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:05:59.523 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:05:59.339 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:05:59.350 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:05:59.511 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:06:08.694 00:00:11.815 TCP 12.102.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:01:59.854 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:07:10.545 00:00:11.774 TCP 12.102.0.1:57096 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:02:59.859 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:08:12.347 00:00:11.796 TCP 12.102.0.1:50006 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:09:14.185 00:00:11.797 TCP 12.102.0.1:49666 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:10:16.024 00:00:11.798 TCP 12.102.0.1:46616 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:10:59.413 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:10:59.612 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:10:59.594 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:10:59.680 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:10:59.448 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:10:59.322 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:10:59.391 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:11:17.865 00:00:11.799 TCP 12.102.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:12:19.707 00:00:11.800 TCP 12.102.0.1:52940 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:13:21.545 00:00:11.799 TCP 12.102.0.1:35370 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:08:59.855 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:14:23.381 00:00:11.808 TCP 12.102.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:09:59.859 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:15:25.231 00:00:11.801 TCP 12.102.0.1:50816 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:15:59.514 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.609 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.576 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.672 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.541 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.596 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.490 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:16:27.092 00:00:11.814 TCP 12.102.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:17:28.933 00:00:11.863 TCP 12.102.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:18:30.833 00:00:11.803 TCP 12.102.0.1:58520 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:19:32.671 00:00:11.805 TCP 12.102.0.1:42524 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:20:34.518 00:00:11.811 TCP 12.102.0.1:52036 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:20:59.503 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.857 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:20:59.738 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:20:59.538 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:20:59.637 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:20:59.948 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:20:59.613 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:20:59.481 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:21:36.368 00:00:11.819 TCP 12.102.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:16:59.860 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:22:38.232 00:00:11.803 TCP 12.102.0.1:34306 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:23:40.086 00:00:11.861 TCP 12.102.0.1:58774 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:24:41.987 00:00:11.810 TCP 12.102.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:25:43.837 00:00:11.990 TCP 12.102.0.1:55480 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:26:00.029 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:26:00.039 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:26:00.084 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:26:00.111 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:26:00.152 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:26:00.039 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:26:00.008 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:26:45.868 00:00:11.816 TCP 12.102.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:27:47.725 00:00:11.805 TCP 12.102.0.1:40180 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:22:59.860 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:23:59.862 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:28:49.573 00:00:11.808 TCP 12.102.0.1:35114 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:29:51.418 00:00:11.805 TCP 12.102.0.1:57850 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:31:00.062 00:00:00.044 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:31:00.110 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:31:00.115 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:31:00.115 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:31:00.110 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:31:00.080 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:31:00.039 00:00:00.044 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:30:53.268 00:00:11.756 TCP 12.102.0.1:49272 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:31:55.079 00:00:11.816 TCP 12.102.0.1:55320 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:32:56.938 00:00:11.815 TCP 12.102.0.1:54028 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:33:58.792 00:00:11.764 TCP 12.102.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:29:59.862 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:35:00.591 00:00:11.807 TCP 12.102.0.1:38566 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:36:00.159 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:30:59.869 00:06:00.071 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:36:00.182 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:36:00.292 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:36:00.171 00:00:00.046 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:36:00.204 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:36:00.160 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:36:00.176 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:36:02.429 00:00:11.799 TCP 12.102.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:37:04.267 00:00:11.799 TCP 12.102.0.1:35342 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:38:06.106 00:00:11.808 TCP 12.102.0.1:57980 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:39:07.952 00:00:11.809 TCP 12.102.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:40:09.796 00:00:11.805 TCP 12.102.0.1:50654 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:41:00.421 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:41:00.398 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:41:00.133 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:40:59.975 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:41:00.407 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:41:00.098 00:00:00.041 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:41:00.398 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:41:11.640 00:00:11.759 TCP 12.102.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:36:59.870 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:42:13.442 00:00:11.803 TCP 12.102.0.1:35170 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:37:59.872 00:06:00.070 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:43:15.289 00:00:11.802 TCP 12.102.0.1:43954 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:44:17.129 00:00:12.199 TCP 12.102.0.1:37288 -> 1.101.0.1:3000 15 1926 1 2025-11-01 05:45:19.369 00:00:11.809 TCP 12.102.0.1:45094 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:46:00.180 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:46:00.376 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:46:00.111 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:46:00.183 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:46:00.198 00:00:00.050 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:46:00.059 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:46:00.157 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:46:21.217 00:00:11.802 TCP 12.102.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:47:23.106 00:00:11.808 TCP 12.102.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:48:24.947 00:00:11.806 TCP 12.102.0.1:51160 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:43:59.870 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:49:26.794 00:00:11.806 TCP 12.102.0.1:51172 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:44:59.874 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:50:28.638 00:00:11.801 TCP 12.102.0.1:50070 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:51:00.323 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:51:00.156 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:51:00.084 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:51:00.377 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:51:00.147 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:51:00.161 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:51:00.300 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:51:30.477 00:00:11.809 TCP 12.102.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:52:32.319 00:00:11.766 TCP 12.102.0.1:52416 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:53:34.120 00:00:11.805 TCP 12.102.0.1:42472 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:54:35.962 00:00:11.764 TCP 12.102.0.1:49480 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:55:37.762 00:00:11.804 TCP 12.102.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:56:00.371 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 05:56:00.394 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 05:50:59.872 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 05:56:00.460 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:56:00.552 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 05:56:00.359 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 05:56:00.460 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 05:56:00.345 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 05:56:39.604 00:00:11.854 TCP 12.102.0.1:58198 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:51:59.877 00:06:00.069 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 05:57:41.500 00:00:11.767 TCP 12.102.0.1:45206 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 264, avg pps: 0, avg bpp: 108 Time window: 2025-11-01 04:54:59 - 2025-11-01 05:57:59 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0051s User: 0.0010s Wall: 0.0025s flows/second: 64465.8 Runtime: 0.0025s