Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 13:54:02.330 00:06:00.139 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 13:59:13.963 00:00:11.808 TCP 12.102.0.1:39406 -> 1.101.0.1:3000 11 1507 1 2025-11-06 13:55:02.333 00:06:00.135 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:00:15.811 00:00:11.800 TCP 12.102.0.1:36406 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:01:17.647 00:00:11.812 TCP 12.102.0.1:35138 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:02:19.499 00:00:11.764 TCP 12.102.0.1:45146 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:03:21.300 00:00:11.801 TCP 12.102.0.1:49444 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:03:34.808 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:03:34.538 00:00:00.034 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:03:34.566 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:03:35.043 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:03:35.012 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:03:34.971 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:03:34.785 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:04:23.139 00:00:11.814 TCP 12.102.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:05:24.993 00:00:11.802 TCP 12.102.0.1:40164 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:01:02.331 00:06:00.141 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 14:06:26.834 00:00:12.088 TCP 12.102.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:02:02.336 00:06:00.136 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:07:28.969 00:00:11.808 TCP 12.102.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:08:34.735 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:08:34.757 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:08:34.749 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:08:34.933 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:08:34.637 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:08:34.880 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:08:34.703 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:08:30.818 00:00:11.760 TCP 12.102.0.1:55338 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:09:32.617 00:00:11.805 TCP 12.102.0.1:48512 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:10:34.462 00:00:11.756 TCP 12.102.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:11:36.260 00:00:11.801 TCP 12.102.0.1:41610 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:12:38.098 00:00:12.239 TCP 12.102.0.1:51762 -> 1.101.0.1:3000 15 1926 1 2025-11-06 14:08:02.333 00:06:00.143 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 14:13:34.818 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:13:34.876 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:13:34.871 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:13:34.906 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:13:34.655 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:13:34.734 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:13:34.795 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:13:40.385 00:00:11.768 TCP 12.102.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:09:02.336 00:06:00.138 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:14:42.192 00:00:11.800 TCP 12.102.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:15:44.073 00:00:11.810 TCP 12.102.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:16:45.923 00:00:11.842 TCP 12.102.0.1:45858 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:17:47.784 00:00:11.806 TCP 12.102.0.1:46920 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:18:34.805 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:18:34.827 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:18:35.042 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:18:34.850 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:18:34.947 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:18:34.957 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:18:34.928 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:18:49.636 00:00:11.808 TCP 12.102.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:19:51.483 00:00:11.803 TCP 12.102.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:15:02.336 00:06:00.142 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 14:16:02.339 00:06:00.137 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:20:53.325 00:00:11.805 TCP 12.102.0.1:54950 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:21:55.174 00:00:11.818 TCP 12.102.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:22:57.035 00:00:11.763 TCP 12.102.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:23:35.153 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:23:35.140 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:23:35.280 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:23:35.231 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:23:35.270 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:23:35.260 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:23:35.130 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:23:58.835 00:00:11.758 TCP 12.102.0.1:38764 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:25:00.630 00:00:11.798 TCP 12.102.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:26:02.468 00:00:11.803 TCP 12.102.0.1:33018 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:22:02.337 00:06:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 14:27:04.308 00:00:11.795 TCP 12.102.0.1:59018 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:23:02.339 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:28:06.140 00:00:11.811 TCP 12.102.0.1:60688 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:28:35.062 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:28:35.085 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:28:35.449 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:28:35.310 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:28:35.280 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:28:35.472 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:28:35.196 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:29:07.994 00:00:11.800 TCP 12.102.0.1:47070 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:30:09.838 00:00:11.800 TCP 12.102.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:31:11.673 00:00:11.808 TCP 12.102.0.1:39662 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:32:13.527 00:00:11.805 TCP 12.102.0.1:48892 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:33:15.372 00:00:11.822 TCP 12.102.0.1:53884 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:33:35.223 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:33:35.208 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:33:35.345 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:33:35.235 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:33:35.273 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:33:35.129 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:33:35.200 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:29:02.338 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 14:34:17.230 00:00:11.804 TCP 12.102.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:30:02.341 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:35:19.087 00:00:11.766 TCP 12.102.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:36:20.902 00:00:11.805 TCP 12.102.0.1:55362 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:37:22.746 00:00:11.803 TCP 12.102.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:38:35.345 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:38:35.342 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:38:24.586 00:00:11.812 TCP 12.102.0.1:58846 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:38:35.469 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:38:35.318 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:38:35.296 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:38:35.466 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:38:35.318 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:39:26.433 00:00:11.801 TCP 12.102.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:40:28.271 00:00:11.812 TCP 12.102.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:36:02.340 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 14:41:30.125 00:00:11.799 TCP 12.102.0.1:43950 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:37:02.344 00:06:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:42:31.964 00:00:12.236 TCP 12.102.0.1:36730 -> 1.101.0.1:3000 15 1926 1 2025-11-06 14:43:35.348 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:43:35.172 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:43:35.424 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:43:35.384 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:43:35.340 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:43:35.465 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:43:35.324 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:43:34.237 00:00:11.811 TCP 12.102.0.1:50452 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:44:36.088 00:00:11.800 TCP 12.102.0.1:45108 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:45:37.932 00:00:11.782 TCP 12.102.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:46:39.744 00:00:11.758 TCP 12.102.0.1:35560 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:47:41.549 00:00:11.801 TCP 12.102.0.1:60046 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:43:02.342 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 14:48:35.723 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:48:35.502 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:48:35.681 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:48:35.838 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:48:35.643 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:48:35.804 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:48:35.701 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:48:43.387 00:00:11.784 TCP 12.102.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:44:02.345 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:49:45.195 00:00:11.764 TCP 12.102.0.1:36332 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:50:46.996 00:00:11.803 TCP 12.102.0.1:44210 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:51:48.836 00:00:11.816 TCP 12.102.0.1:46368 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:52:50.694 00:00:11.799 TCP 12.102.0.1:58374 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:53:35.455 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:53:35.476 00:00:00.032 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:53:35.856 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:53:35.742 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:53:35.793 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:53:35.709 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 14:53:35.433 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:53:52.534 00:00:11.800 TCP 12.102.0.1:41286 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:54:54.374 00:00:11.824 TCP 12.102.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:50:02.346 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 14:51:02.348 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 14:55:56.235 00:00:11.798 TCP 12.102.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:56:58.080 00:00:11.758 TCP 12.102.0.1:49846 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:57:59.882 00:00:11.810 TCP 12.102.0.1:48860 -> 1.101.0.1:3000 11 1507 1 2025-11-06 14:58:35.719 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 14:58:35.742 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 14:58:35.681 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 14:58:35.740 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 14:58:35.715 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 14:58:35.722 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 14:58:35.748 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 257, avg pps: 0, avg bpp: 108 Time window: 2025-11-06 13:54:02 - 2025-11-06 14:58:35 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0021s User: 0.0035s Wall: 0.0032s flows/second: 50537.6 Runtime: 0.0032s