Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 18:54:00.133 00:06:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 18:59:03.408 00:00:11.765 TCP 12.102.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:00:05.213 00:00:11.777 TCP 12.102.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:01:15.853 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.393 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.431 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.234 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.208 00:00:00.036 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.372 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:01:15.829 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:01:07.033 00:00:11.985 TCP 12.102.0.1:55868 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:57:00.136 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:02:09.080 00:00:11.817 TCP 12.102.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:03:10.932 00:00:11.811 TCP 12.102.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:04:12.781 00:00:11.763 TCP 12.102.0.1:42716 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:05:14.587 00:00:11.809 TCP 12.102.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:01:00.133 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:06:16.455 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.432 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.628 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.548 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.516 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.466 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.431 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:06:16.432 00:00:11.809 TCP 12.102.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:07:18.282 00:00:11.801 TCP 12.102.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:08:20.115 00:00:11.812 TCP 12.102.0.1:43534 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:04:00.138 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:09:21.967 00:00:11.799 TCP 12.102.0.1:58462 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:10:23.803 00:00:11.813 TCP 12.102.0.1:50452 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:11:16.411 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.415 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.488 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.388 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.396 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.417 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.389 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:11:25.657 00:00:12.409 TCP 12.102.0.1:56642 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:12:28.106 00:00:11.810 TCP 12.102.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:08:00.135 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:13:29.950 00:00:11.760 TCP 12.102.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:14:31.754 00:00:11.795 TCP 12.102.0.1:35388 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:15:33.595 00:00:11.799 TCP 12.102.0.1:45710 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:11:00.140 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:16:16.260 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.477 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.465 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.455 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.543 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.514 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.237 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:16:35.434 00:00:11.814 TCP 12.102.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:17:37.290 00:00:11.831 TCP 12.102.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:18:39.160 00:00:11.813 TCP 12.102.0.1:40604 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:19:41.012 00:00:11.803 TCP 12.102.0.1:51138 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:15:00.141 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:20:42.853 00:00:11.796 TCP 12.102.0.1:35674 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:21:16.678 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:21:16.701 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.806 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.544 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.676 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.612 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.640 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:21:44.689 00:00:11.800 TCP 12.102.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:22:46.526 00:00:11.805 TCP 12.102.0.1:34854 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:18:00.145 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:23:48.372 00:00:11.813 TCP 12.102.0.1:47194 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:24:50.225 00:00:12.248 TCP 12.102.0.1:49654 -> 1.101.0.1:3000 15 1926 1 2025-11-01 19:25:52.513 00:00:11.803 TCP 12.102.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:26:16.637 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.590 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.691 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.746 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.688 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.643 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.616 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:22:00.143 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:26:54.358 00:00:11.815 TCP 12.102.0.1:46654 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:27:56.211 00:00:11.759 TCP 12.102.0.1:56998 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:28:58.025 00:00:11.815 TCP 12.102.0.1:51756 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:25:00.146 00:06:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:29:59.879 00:00:11.810 TCP 12.102.0.1:54818 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:31:01.724 00:00:11.807 TCP 12.102.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:31:16.893 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.905 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.965 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.821 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.973 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.712 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.871 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:32:03.569 00:00:11.761 TCP 12.102.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:33:05.371 00:00:11.822 TCP 12.102.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:29:00.147 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:34:07.235 00:00:11.812 TCP 12.102.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:35:09.094 00:00:12.485 TCP 12.102.0.1:40002 -> 1.101.0.1:3000 15 1926 1 2025-11-01 19:36:16.940 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.888 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.723 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.863 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.775 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.917 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:36:17.026 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:36:11.621 00:00:11.764 TCP 12.102.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:32:00.150 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:37:13.423 00:00:11.764 TCP 12.102.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:38:15.223 00:00:11.806 TCP 12.102.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:39:17.081 00:00:11.800 TCP 12.102.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:40:18.920 00:00:11.829 TCP 12.102.0.1:42786 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:36:00.148 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:41:16.826 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:41:16.802 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:41:17.279 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:41:17.029 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:41:17.284 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:41:17.254 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:41:17.134 00:00:00.044 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:41:20.793 00:00:11.805 TCP 12.102.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:42:22.636 00:00:11.808 TCP 12.102.0.1:38412 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:43:24.485 00:00:11.815 TCP 12.102.0.1:46592 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:39:00.151 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:44:26.369 00:00:11.841 TCP 12.102.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:45:28.251 00:00:11.960 TCP 12.102.0.1:57318 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:46:16.967 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:46:16.944 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:46:17.291 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:46:17.271 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:46:17.004 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:46:17.090 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:46:17.252 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:46:30.248 00:00:11.809 TCP 12.102.0.1:51222 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:47:32.096 00:00:11.804 TCP 12.102.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:43:00.150 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:48:33.942 00:00:11.773 TCP 12.102.0.1:33732 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:49:35.751 00:00:11.813 TCP 12.102.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:50:37.603 00:00:11.760 TCP 12.102.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:46:00.152 00:06:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:51:16.898 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:51:16.875 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:51:17.219 00:00:00.046 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:51:17.261 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:51:17.233 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:51:17.157 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:51:17.133 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:51:39.396 00:00:11.808 TCP 12.102.0.1:60634 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:52:41.239 00:00:11.759 TCP 12.102.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:53:43.070 00:00:11.799 TCP 12.102.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:54:44.906 00:00:11.820 TCP 12.102.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:50:00.151 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:55:46.762 00:00:11.797 TCP 12.102.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:56:17.260 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:56:17.283 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.290 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.401 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.208 00:00:00.010 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.275 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.346 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:56:48.599 00:00:11.807 TCP 12.102.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:53:00.154 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:57:50.446 00:00:11.809 TCP 12.102.0.1:34514 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 256, avg pps: 0, avg bpp: 108 Time window: 2025-11-01 18:54:00 - 2025-11-01 19:59:00 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0019s Wall: 0.0024s flows/second: 66948.2 Runtime: 0.0024s