Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 15:59:24.509 00:00:11.762 TCP 12.102.0.1:34012 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:00:26.307 00:00:12.009 TCP 12.102.0.1:48568 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:01:28.350 00:00:11.827 TCP 12.102.0.1:39530 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:58:01.899 00:05:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 15:58:01.902 00:05:00.166 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:02:30.219 00:00:11.812 TCP 12.102.0.1:59608 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:03:08.201 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:03:08.224 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:03:08.215 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:03:08.317 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:03:08.236 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:03:08.069 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:03:08.139 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:03:32.074 00:00:11.810 TCP 12.102.0.1:38676 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:04:33.926 00:00:11.783 TCP 12.102.0.1:47038 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:05:35.757 00:00:11.797 TCP 12.102.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:06:37.597 00:00:11.808 TCP 12.102.0.1:53248 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:07:39.446 00:00:11.813 TCP 12.102.0.1:44288 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:04:01.902 00:05:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:04:01.904 00:05:00.165 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:08:08.175 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:08:08.052 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:08:08.242 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:08:08.178 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:08:08.075 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:08:08.178 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:08:08.152 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:08:41.298 00:00:11.804 TCP 12.102.0.1:48282 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:09:43.137 00:00:11.827 TCP 12.102.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:10:45.003 00:00:11.809 TCP 12.102.0.1:52372 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:11:46.848 00:00:11.805 TCP 12.102.0.1:46722 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:12:48.690 00:00:11.856 TCP 12.102.0.1:56086 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:13:08.407 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:13:08.303 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:13:08.380 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:13:08.548 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:13:08.177 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:13:08.415 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:13:08.392 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:10:01.904 00:05:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:13:50.584 00:00:11.802 TCP 12.102.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:10:01.906 00:05:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:14:52.421 00:00:11.804 TCP 12.102.0.1:38982 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:15:54.269 00:00:11.802 TCP 12.102.0.1:49648 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:16:56.106 00:00:12.383 TCP 12.102.0.1:55242 -> 1.101.0.1:3000 15 1926 1 2025-11-05 16:18:08.404 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:17:58.527 00:00:11.815 TCP 12.102.0.1:48622 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:18:08.430 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:18:08.514 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:18:08.424 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:18:08.530 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:18:08.381 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:18:08.382 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:19:00.383 00:00:11.804 TCP 12.102.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:16:01.912 00:05:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:16:01.915 00:05:00.157 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:20:02.229 00:00:12.047 TCP 12.102.0.1:55720 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:21:04.316 00:00:11.764 TCP 12.102.0.1:54674 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:22:06.118 00:00:11.810 TCP 12.102.0.1:51740 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:23:09.577 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:23:09.844 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:23:09.623 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:23:09.684 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:23:09.700 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:23:09.571 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:23:09.555 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:23:07.968 00:00:11.796 TCP 12.102.0.1:42354 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:24:09.806 00:00:11.802 TCP 12.102.0.1:52316 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:25:11.647 00:00:11.758 TCP 12.102.0.1:46458 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:22:01.916 00:05:00.156 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:22:01.915 00:05:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:26:13.448 00:00:11.753 TCP 12.102.0.1:33020 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:27:15.243 00:00:11.809 TCP 12.102.0.1:52196 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:28:08.590 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:28:08.613 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:28:08.905 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:28:08.943 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:28:08.727 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:28:08.748 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:28:08.767 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:28:17.089 00:00:11.773 TCP 12.102.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:29:18.904 00:00:11.802 TCP 12.102.0.1:40416 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:30:20.748 00:00:11.801 TCP 12.102.0.1:54272 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:31:22.586 00:00:11.809 TCP 12.102.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:28:01.922 00:05:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:28:01.919 00:05:00.156 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:32:24.429 00:00:12.152 TCP 12.102.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:33:08.684 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:33:08.677 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:33:08.621 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:33:08.777 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:33:08.856 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:33:08.745 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:33:08.661 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:33:26.612 00:00:11.803 TCP 12.102.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:34:28.455 00:00:11.769 TCP 12.102.0.1:57788 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:35:30.261 00:00:11.802 TCP 12.102.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:36:32.104 00:00:11.761 TCP 12.102.0.1:43978 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:37:33.903 00:00:11.826 TCP 12.102.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:34:01.922 00:05:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:34:01.920 00:05:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:38:08.896 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:38:09.006 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:38:08.860 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:38:08.824 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:38:08.799 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:38:08.894 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:38:08.873 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:38:35.760 00:00:11.763 TCP 12.102.0.1:59906 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:39:37.562 00:00:11.807 TCP 12.102.0.1:57584 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:40:39.412 00:00:11.795 TCP 12.102.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:41:41.244 00:00:12.233 TCP 12.102.0.1:40664 -> 1.101.0.1:3000 15 1926 1 2025-11-05 16:42:43.517 00:00:11.817 TCP 12.102.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:43:08.890 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:43:08.913 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:43:09.087 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:43:08.792 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:43:08.764 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:43:09.041 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:43:08.961 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:43:45.366 00:00:11.816 TCP 12.102.0.1:59206 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:40:01.926 00:05:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:40:01.923 00:05:00.154 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:44:47.219 00:00:11.802 TCP 12.102.0.1:50102 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:45:49.080 00:00:11.797 TCP 12.102.0.1:36534 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:46:50.919 00:00:11.823 TCP 12.102.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:47:52.778 00:00:11.803 TCP 12.102.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:48:09.246 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:48:09.269 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:48:08.936 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:48:09.050 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:48:09.315 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:48:08.924 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:48:09.097 00:00:00.036 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:48:54.620 00:00:11.800 TCP 12.102.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:46:01.924 00:05:00.154 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:46:01.927 00:05:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:49:56.455 00:00:11.807 TCP 12.102.0.1:37114 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:50:58.300 00:00:11.804 TCP 12.102.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:52:00.146 00:00:11.816 TCP 12.102.0.1:36552 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:53:09.083 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:53:09.338 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:53:09.153 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:53:09.019 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:53:08.907 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:53:09.093 00:00:00.041 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:53:09.060 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:53:01.996 00:00:11.766 TCP 12.102.0.1:52862 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:54:03.795 00:00:11.851 TCP 12.102.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:55:05.688 00:00:11.816 TCP 12.102.0.1:46494 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:52:01.927 00:05:00.152 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-05 16:52:01.929 00:05:00.147 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-05 16:56:07.552 00:00:11.806 TCP 12.102.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:57:09.403 00:00:11.762 TCP 12.102.0.1:49252 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:58:09.236 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 16:58:09.259 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 16:58:08.991 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:58:09.371 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 16:58:09.278 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 16:58:09.173 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 16:58:09.263 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 16:58:11.212 00:00:11.768 TCP 12.102.0.1:50794 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 274, avg pps: 0, avg bpp: 109 Time window: 2025-11-05 15:58:01 - 2025-11-05 16:58:22 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0030s User: 0.0010s Wall: 0.0015s flows/second: 111098.3 Runtime: 0.0015s