Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 10:58:41.011 00:00:11.800 TCP 12.102.0.1:58576 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:59:42.854 00:00:11.802 TCP 12.102.0.1:47440 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:00:44.696 00:00:11.795 TCP 12.102.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:01:46.534 00:00:12.553 TCP 12.102.0.1:37212 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:02:49.124 00:00:11.799 TCP 12.102.0.1:47032 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:03:31.245 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:03:31.268 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:03:31.271 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:03:31.318 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:03:31.107 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:03:31.213 00:00:00.035 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:03:31.014 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:03:50.962 00:00:11.801 TCP 12.102.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:59:02.253 00:06:00.169 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 11:00:02.257 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 11:04:52.804 00:00:11.800 TCP 12.102.0.1:53620 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:05:54.652 00:00:11.816 TCP 12.102.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:06:56.512 00:00:11.805 TCP 12.102.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:07:58.354 00:00:11.806 TCP 12.102.0.1:48752 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:08:30.882 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:08:31.079 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:08:31.229 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:08:30.904 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:08:31.098 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:08:31.076 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:08:30.858 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:09:00.205 00:00:11.763 TCP 12.102.0.1:52632 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:10:02.007 00:00:11.793 TCP 12.102.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:06:02.285 00:06:00.141 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 11:11:03.837 00:00:11.850 TCP 12.102.0.1:53012 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:07:02.288 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 11:12:05.738 00:00:12.233 TCP 12.102.0.1:48752 -> 1.101.0.1:3000 15 1926 1 2025-11-06 11:13:08.023 00:00:11.758 TCP 12.102.0.1:60620 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:13:30.905 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:13:30.928 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:13:30.968 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:13:31.280 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:13:30.929 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:13:31.276 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:13:31.046 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:14:09.813 00:00:11.799 TCP 12.102.0.1:47848 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:15:11.648 00:00:12.128 TCP 12.102.0.1:43652 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:16:13.815 00:00:11.771 TCP 12.102.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:17:15.627 00:00:11.802 TCP 12.102.0.1:46696 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:13:02.287 00:06:00.139 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 11:18:17.471 00:00:11.804 TCP 12.102.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:18:31.231 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:18:31.197 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:18:31.212 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:18:31.087 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:18:31.418 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:18:31.317 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:18:31.207 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:14:02.289 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 11:19:19.312 00:00:11.836 TCP 12.102.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:20:21.185 00:00:11.810 TCP 12.102.0.1:47868 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:21:23.058 00:00:11.822 TCP 12.102.0.1:36784 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:22:24.928 00:00:12.210 TCP 12.102.0.1:60814 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:23:31.393 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:23:31.577 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:23:31.454 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:23:31.336 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:23:31.421 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:23:31.313 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:23:31.370 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:23:27.180 00:00:11.794 TCP 12.102.0.1:46556 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:24:29.026 00:00:11.771 TCP 12.102.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:20:02.291 00:06:00.140 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 11:25:30.834 00:00:11.804 TCP 12.102.0.1:60396 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:21:02.294 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 11:26:32.682 00:00:11.973 TCP 12.102.0.1:45908 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:27:34.679 00:00:11.809 TCP 12.102.0.1:53636 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:28:31.367 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:28:31.389 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:28:31.802 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:28:31.959 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:28:31.801 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:28:31.524 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:28:31.880 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:28:36.525 00:00:11.803 TCP 12.102.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:29:38.367 00:00:11.825 TCP 12.102.0.1:34734 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:30:40.243 00:00:11.764 TCP 12.102.0.1:35172 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:31:42.060 00:00:11.866 TCP 12.102.0.1:51758 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:27:02.293 00:06:00.139 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 11:32:43.965 00:00:11.806 TCP 12.102.0.1:55346 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:28:02.297 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 11:33:31.759 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:33:31.636 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:33:31.738 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:33:31.436 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:33:31.546 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:33:31.500 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:33:31.736 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:33:45.809 00:00:14.551 TCP 12.102.0.1:48668 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:34:50.411 00:00:11.813 TCP 12.102.0.1:37180 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:35:52.258 00:00:11.808 TCP 12.102.0.1:33984 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:36:54.102 00:00:11.862 TCP 12.102.0.1:60894 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:37:56.022 00:00:12.335 TCP 12.102.0.1:38316 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:38:31.967 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:38:31.720 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:38:31.608 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:38:31.820 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:38:31.929 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:38:31.877 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:38:31.945 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:34:02.295 00:06:00.141 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 11:38:58.373 00:00:11.833 TCP 12.102.0.1:43152 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:35:02.298 00:06:00.136 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 11:40:00.237 00:00:11.810 TCP 12.102.0.1:58628 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:41:02.089 00:00:11.805 TCP 12.102.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:42:03.934 00:00:11.812 TCP 12.102.0.1:40852 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:43:05.787 00:00:11.865 TCP 12.102.0.1:33798 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:43:31.783 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:43:31.805 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:43:31.906 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:43:31.837 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:43:31.906 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:43:31.712 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:43:32.017 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:44:07.695 00:00:11.804 TCP 12.102.0.1:44668 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:45:09.542 00:00:11.806 TCP 12.102.0.1:33466 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:41:02.296 00:06:00.142 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 11:46:11.391 00:00:11.800 TCP 12.102.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:42:02.299 00:06:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 11:47:13.232 00:00:11.805 TCP 12.102.0.1:48752 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:48:15.081 00:00:11.801 TCP 12.102.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:48:31.946 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:48:31.923 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:48:31.919 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:48:31.816 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:48:31.924 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:48:32.016 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:48:31.992 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:49:16.923 00:00:11.834 TCP 12.102.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:50:18.800 00:00:11.800 TCP 12.102.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:51:20.640 00:00:11.830 TCP 12.102.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:52:22.509 00:00:11.803 TCP 12.102.0.1:40342 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:48:02.297 00:06:00.143 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 11:53:31.958 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:53:31.834 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:53:31.836 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:53:31.985 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:53:32.009 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:53:32.039 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:53:32.001 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:53:24.350 00:00:11.801 TCP 12.102.0.1:55256 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:49:02.302 00:06:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 11:54:26.190 00:00:11.773 TCP 12.102.0.1:39220 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:55:28.001 00:00:11.806 TCP 12.102.0.1:50486 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:56:29.839 00:00:11.755 TCP 12.102.0.1:44342 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:57:31.635 00:00:11.812 TCP 12.102.0.1:53442 -> 1.101.0.1:3000 11 1507 1 2025-11-06 11:58:32.314 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 11:58:32.337 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 11:58:32.354 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 11:58:32.385 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 11:58:32.125 00:00:00.028 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 11:58:32.340 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 11:58:32.448 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 11:58:33.484 00:00:11.811 TCP 12.102.0.1:52052 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124276, total packets: 1129, avg bps: 275, avg pps: 0, avg bpp: 110 Time window: 2025-11-06 10:58:41 - 2025-11-06 11:58:45 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0018s User: 0.0037s Wall: 0.0028s flows/second: 56703.9 Runtime: 0.0028s