Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 12:58:51.157 00:00:11.807 TCP 12.102.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-11-02 12:55:00.468 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 12:59:53.005 00:00:11.799 TCP 12.102.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:00:54.868 00:00:11.852 TCP 12.102.0.1:44772 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:01:37.619 00:00:00.031 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:01:37.784 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:01:37.880 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:01:37.660 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:01:37.945 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:01:37.745 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:01:37.597 00:00:00.031 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:01:56.763 00:00:11.800 TCP 12.102.0.1:58324 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:02:58.603 00:00:11.822 TCP 12.102.0.1:51410 -> 1.101.0.1:3000 11 1507 1 2025-11-02 12:59:00.467 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 13:04:00.459 00:00:11.802 TCP 12.102.0.1:56426 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:05:02.296 00:00:11.806 TCP 12.102.0.1:43392 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:06:04.143 00:00:11.774 TCP 12.102.0.1:32866 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:06:38.049 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:06:38.110 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:06:38.274 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:06:38.134 00:00:00.041 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:06:38.289 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:06:38.158 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:06:38.027 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:02:00.470 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 13:07:05.958 00:00:11.808 TCP 12.102.0.1:52352 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:08:07.809 00:00:11.758 TCP 12.102.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:09:09.600 00:00:11.778 TCP 12.102.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:10:11.418 00:00:11.760 TCP 12.102.0.1:55030 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:06:00.469 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 13:11:13.221 00:00:11.806 TCP 12.102.0.1:47080 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:11:38.574 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:11:38.595 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:11:38.395 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:11:38.652 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:11:38.512 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:11:38.260 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:11:38.331 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:12:15.084 00:00:11.799 TCP 12.102.0.1:39666 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:13:16.922 00:00:11.811 TCP 12.102.0.1:39590 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:09:00.472 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 13:14:18.772 00:00:11.805 TCP 12.102.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:15:20.615 00:00:11.800 TCP 12.102.0.1:35700 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:16:22.455 00:00:11.834 TCP 12.102.0.1:49914 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:16:38.582 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:16:38.583 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:16:38.504 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:16:38.678 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:16:38.571 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:16:38.545 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:16:38.560 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:17:24.326 00:00:11.805 TCP 12.102.0.1:54160 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:13:00.471 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 13:18:26.167 00:00:11.801 TCP 12.102.0.1:34748 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:19:28.011 00:00:11.758 TCP 12.102.0.1:36052 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:20:29.808 00:00:11.800 TCP 12.102.0.1:52310 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:16:00.475 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 13:21:37.961 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:21:37.982 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:21:38.198 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:21:37.930 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:21:38.227 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:21:38.427 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:21:38.090 00:00:00.052 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:21:31.642 00:00:11.851 TCP 12.102.0.1:35314 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:22:33.531 00:00:11.759 TCP 12.102.0.1:50898 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:23:35.330 00:00:11.798 TCP 12.102.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:24:37.170 00:00:11.768 TCP 12.102.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:20:00.473 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 13:25:38.974 00:00:11.756 TCP 12.102.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:26:38.453 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:26:38.370 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:26:38.529 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:26:38.341 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:26:38.474 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:26:38.236 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:26:38.432 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:26:40.775 00:00:11.808 TCP 12.102.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:27:42.621 00:00:11.805 TCP 12.102.0.1:57244 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:23:00.478 00:06:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 13:28:44.463 00:00:11.810 TCP 12.102.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:29:46.311 00:00:11.824 TCP 12.102.0.1:34626 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:30:48.175 00:00:11.802 TCP 12.102.0.1:46688 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:31:38.533 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:31:38.909 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:31:38.781 00:00:00.016 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:31:38.844 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:31:38.658 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:31:38.702 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:31:38.511 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:27:00.475 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 13:31:50.024 00:00:11.764 TCP 12.102.0.1:44232 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:32:51.822 00:00:11.806 TCP 12.102.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:33:53.667 00:00:11.811 TCP 12.102.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:30:00.485 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 13:34:55.511 00:00:11.988 TCP 12.102.0.1:39836 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:35:57.539 00:00:11.802 TCP 12.102.0.1:50468 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:36:38.502 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:36:38.664 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:36:38.805 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:36:38.619 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:36:38.767 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:36:38.725 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:36:38.480 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:36:59.382 00:00:11.802 TCP 12.102.0.1:48468 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:38:01.223 00:00:12.276 TCP 12.102.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:34:00.482 00:06:00.087 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 13:39:03.540 00:00:11.804 TCP 12.102.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:40:05.386 00:00:11.807 TCP 12.102.0.1:57512 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:41:07.237 00:00:11.804 TCP 12.102.0.1:39986 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:41:38.685 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:41:38.782 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:41:38.670 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:41:38.645 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:41:38.808 00:00:00.034 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:41:38.712 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:41:38.662 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:37:00.485 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 13:42:09.083 00:00:11.810 TCP 12.102.0.1:40106 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:43:10.933 00:00:11.865 TCP 12.102.0.1:59742 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:44:12.840 00:00:11.802 TCP 12.102.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:45:14.683 00:00:12.195 TCP 12.102.0.1:50704 -> 1.101.0.1:3000 15 1926 1 2025-11-02 13:41:00.483 00:06:00.089 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 13:46:16.915 00:00:11.827 TCP 12.102.0.1:45108 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:46:38.797 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:46:38.820 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:46:38.749 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:46:38.755 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:46:38.924 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:46:38.837 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:46:38.819 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:47:18.779 00:00:11.765 TCP 12.102.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:48:20.583 00:00:11.809 TCP 12.102.0.1:52394 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:44:00.487 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 13:49:22.437 00:00:11.766 TCP 12.102.0.1:41004 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:50:24.242 00:00:11.766 TCP 12.102.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:51:38.888 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:51:26.070 00:00:11.764 TCP 12.102.0.1:39798 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:51:38.911 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:51:39.115 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:51:39.024 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:51:39.013 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:51:39.121 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:51:39.006 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:52:27.870 00:00:11.798 TCP 12.102.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:48:00.486 00:06:00.088 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 13:53:29.711 00:00:11.808 TCP 12.102.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:54:31.558 00:00:11.762 TCP 12.102.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:55:33.360 00:00:12.439 TCP 12.102.0.1:57426 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:51:00.490 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 13:56:38.985 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 13:56:38.775 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 13:56:39.026 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 13:56:38.870 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 13:56:38.847 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 13:56:38.930 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 13:56:38.963 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 13:56:35.839 00:00:11.822 TCP 12.102.0.1:48770 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:57:37.704 00:00:11.814 TCP 12.102.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-11-02 13:58:39.560 00:00:11.803 TCP 12.102.0.1:46538 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 261, avg pps: 0, avg bpp: 109 Time window: 2025-11-02 12:55:00 - 2025-11-02 13:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0042s User: 0.0008s Wall: 0.0014s flows/second: 111662.0 Runtime: 0.0015s