Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 07:58:54.514 00:00:11.801 TCP 12.102.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:59:56.352 00:00:11.824 TCP 12.102.0.1:37674 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:56:00.834 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:00:58.217 00:00:11.801 TCP 12.102.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:02:00.645 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:02:00.667 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:02:00.868 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:02:00.805 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:02:00.704 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:02:00.553 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:02:00.492 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:02:00.079 00:00:11.805 TCP 12.102.0.1:38488 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:03:01.925 00:00:11.814 TCP 12.102.0.1:60914 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:04:03.778 00:00:11.797 TCP 12.102.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:00:00.831 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-03 08:05:05.611 00:00:11.774 TCP 12.102.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:06:07.409 00:00:11.806 TCP 12.102.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:07:00.815 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:07:00.625 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:07:00.944 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:07:00.854 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:07:01.000 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:07:00.964 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:07:00.793 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:07:09.250 00:00:11.801 TCP 12.102.0.1:60566 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:03:00.835 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:08:11.093 00:00:11.803 TCP 12.102.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:09:12.936 00:00:11.773 TCP 12.102.0.1:36056 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:10:14.746 00:00:11.804 TCP 12.102.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:11:16.588 00:00:11.811 TCP 12.102.0.1:42580 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:12:01.027 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:07:00.833 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-03 08:12:01.046 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:12:01.027 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:12:00.851 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:12:01.034 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:12:00.709 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:12:01.006 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:12:18.445 00:00:11.808 TCP 12.102.0.1:54392 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:13:20.299 00:00:11.812 TCP 12.102.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:14:22.152 00:00:11.807 TCP 12.102.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:10:00.837 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:15:24.000 00:00:11.803 TCP 12.102.0.1:39296 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:16:25.846 00:00:11.804 TCP 12.102.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:17:00.791 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:17:00.814 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:17:01.012 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:17:01.090 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:17:00.915 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:17:01.002 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:17:00.897 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:17:27.692 00:00:11.949 TCP 12.102.0.1:45256 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:18:29.682 00:00:11.803 TCP 12.102.0.1:56822 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:14:00.835 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-03 08:19:31.525 00:00:11.803 TCP 12.102.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:20:33.368 00:00:12.248 TCP 12.102.0.1:58778 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:21:35.656 00:00:11.813 TCP 12.102.0.1:48818 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:22:01.167 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:22:01.114 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:22:01.294 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:22:01.377 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:22:01.158 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:22:01.154 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:22:01.144 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:17:00.838 00:06:00.048 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:22:37.503 00:00:11.773 TCP 12.102.0.1:38710 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:23:39.323 00:00:12.428 TCP 12.102.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:24:41.788 00:00:11.800 TCP 12.102.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:25:43.626 00:00:11.807 TCP 12.102.0.1:38414 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:21:00.837 00:06:00.053 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-03 08:27:01.100 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:26:45.475 00:00:11.768 TCP 12.102.0.1:50924 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:27:01.122 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:27:01.304 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:27:01.321 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:27:01.223 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:27:01.123 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:27:00.976 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:27:47.282 00:00:11.806 TCP 12.102.0.1:47540 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:24:00.840 00:06:00.048 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:28:49.126 00:00:11.772 TCP 12.102.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:29:50.932 00:00:12.226 TCP 12.102.0.1:57726 -> 1.101.0.1:3000 15 1926 1 2025-11-03 08:30:53.194 00:00:11.803 TCP 12.102.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:32:01.396 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:32:01.196 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:32:01.101 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:32:01.101 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:32:01.404 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:32:01.350 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:32:01.373 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:31:55.046 00:00:11.765 TCP 12.102.0.1:56720 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:28:00.839 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-03 08:32:56.853 00:00:11.808 TCP 12.102.0.1:38976 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:33:58.697 00:00:11.773 TCP 12.102.0.1:34448 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:35:00.505 00:00:11.815 TCP 12.102.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:31:00.842 00:06:00.047 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:36:02.360 00:00:11.804 TCP 12.102.0.1:41340 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:37:01.822 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:37:01.700 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:37:01.816 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:37:01.776 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:37:01.761 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:37:01.831 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:37:01.801 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:37:04.202 00:00:11.810 TCP 12.102.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:38:06.081 00:00:11.809 TCP 12.102.0.1:55996 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:39:07.921 00:00:11.839 TCP 12.102.0.1:54086 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:35:00.841 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-03 08:40:09.802 00:00:11.820 TCP 12.102.0.1:41600 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:41:11.671 00:00:11.861 TCP 12.102.0.1:34346 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:42:01.375 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:42:01.398 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:42:01.634 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:42:01.609 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:42:01.571 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:42:01.555 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:42:01.674 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:42:13.571 00:00:11.804 TCP 12.102.0.1:39080 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:38:00.843 00:06:00.047 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:43:15.415 00:00:11.782 TCP 12.102.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:44:17.220 00:00:11.816 TCP 12.102.0.1:53354 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:45:19.078 00:00:12.214 TCP 12.102.0.1:46244 -> 1.101.0.1:3000 15 1926 1 2025-11-03 08:46:21.333 00:00:11.803 TCP 12.102.0.1:46844 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:47:01.645 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:47:01.668 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:42:00.841 00:06:00.053 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-03 08:47:01.622 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:47:01.688 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:47:01.653 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:47:01.804 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:47:01.425 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:47:23.178 00:00:11.807 TCP 12.102.0.1:43986 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:48:25.035 00:00:11.796 TCP 12.102.0.1:32984 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:49:26.873 00:00:11.820 TCP 12.102.0.1:48226 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:45:00.844 00:06:00.049 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:50:28.732 00:00:11.798 TCP 12.102.0.1:38448 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:51:30.567 00:00:11.812 TCP 12.102.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:52:01.966 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:52:02.352 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:52:02.376 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:52:02.475 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:52:02.250 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:52:02.206 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:52:02.291 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:52:32.418 00:00:11.770 TCP 12.102.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:53:34.224 00:00:12.290 TCP 12.102.0.1:47768 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:49:00.842 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-03 08:54:36.553 00:00:11.798 TCP 12.102.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:55:38.391 00:00:11.805 TCP 12.102.0.1:36702 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:56:40.232 00:00:11.756 TCP 12.102.0.1:51866 -> 1.101.0.1:3000 11 1507 1 2025-11-03 08:57:01.829 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-03 08:57:01.891 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-03 08:57:01.945 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-03 08:57:01.946 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-03 08:57:01.805 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-03 08:52:00.848 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-03 08:57:02.017 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 08:57:02.018 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-03 08:57:42.032 00:00:11.812 TCP 12.102.0.1:40790 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-11-03 07:56:00 - 2025-11-03 08:58:00 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0033s User: 0.0017s Wall: 0.0021s flows/second: 75680.2 Runtime: 0.0021s