Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 15:58:51.096 00:00:11.806 TCP 12.102.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-11-06 15:54:02.362 00:06:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 15:59:52.940 00:00:11.812 TCP 12.102.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:00:54.793 00:00:11.808 TCP 12.102.0.1:39156 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:01:56.645 00:00:12.220 TCP 12.102.0.1:50862 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:02:58.904 00:00:11.801 TCP 12.102.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:03:36.853 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:03:36.875 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:03:36.890 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:03:37.006 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:03:37.044 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:03:37.126 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:03:37.043 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:04:00.762 00:00:11.805 TCP 12.102.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:00:02.360 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 16:05:02.611 00:00:11.808 TCP 12.102.0.1:42174 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:01:02.364 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 16:06:04.463 00:00:11.806 TCP 12.102.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:07:06.300 00:00:11.806 TCP 12.102.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:08:08.143 00:00:11.784 TCP 12.102.0.1:34234 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:08:37.172 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:08:37.030 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:08:37.126 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:08:37.069 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:08:37.024 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:08:37.178 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:08:37.151 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:09:09.967 00:00:11.805 TCP 12.102.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:10:11.810 00:00:11.775 TCP 12.102.0.1:54526 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:11:13.617 00:00:11.766 TCP 12.102.0.1:45676 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:07:02.366 00:06:00.140 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 16:12:15.420 00:00:12.234 TCP 12.102.0.1:47644 -> 1.101.0.1:3000 15 1926 1 2025-11-06 16:08:02.369 00:06:00.136 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 16:13:17.698 00:00:12.281 TCP 12.102.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:13:37.272 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:13:37.293 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:13:37.498 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:13:37.404 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:13:37.402 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:13:37.543 00:00:00.050 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:13:37.370 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:14:20.029 00:00:11.800 TCP 12.102.0.1:57704 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:15:21.870 00:00:11.826 TCP 12.102.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:16:23.736 00:00:11.767 TCP 12.102.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:17:25.544 00:00:12.167 TCP 12.102.0.1:46652 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:18:37.261 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:18:27.748 00:00:11.798 TCP 12.102.0.1:60430 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:18:37.284 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:18:37.458 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:18:37.395 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:18:37.442 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:18:37.408 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:18:37.405 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:14:02.367 00:06:00.141 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 16:19:29.582 00:00:11.811 TCP 12.102.0.1:34266 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:15:02.372 00:06:00.135 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 16:20:31.439 00:00:11.811 TCP 12.102.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:21:33.287 00:00:11.813 TCP 12.102.0.1:46110 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:22:35.127 00:00:11.812 TCP 12.102.0.1:51934 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:23:37.332 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:23:37.355 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:23:37.474 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:23:37.327 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:23:37.565 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:23:37.539 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:23:37.413 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:23:36.969 00:00:11.805 TCP 12.102.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:24:38.811 00:00:11.835 TCP 12.102.0.1:38644 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:25:40.687 00:00:11.818 TCP 12.102.0.1:59132 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:21:02.369 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 16:26:42.540 00:00:11.803 TCP 12.102.0.1:33262 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:22:02.372 00:06:00.146 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 16:27:44.385 00:00:11.820 TCP 12.102.0.1:38544 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:28:37.397 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:28:37.419 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:28:37.529 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:28:37.611 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:28:37.427 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:28:37.344 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:28:37.487 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:28:46.243 00:00:11.802 TCP 12.102.0.1:33220 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:29:48.084 00:00:11.762 TCP 12.102.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:30:49.893 00:00:11.803 TCP 12.102.0.1:50548 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:31:51.735 00:00:11.802 TCP 12.102.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:32:53.569 00:00:11.862 TCP 12.102.0.1:36240 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:28:02.375 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 16:33:37.722 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:33:37.745 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:33:37.822 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:33:37.753 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:33:37.728 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:33:37.814 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:33:37.761 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:29:02.377 00:06:00.145 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 16:33:55.459 00:00:11.802 TCP 12.102.0.1:59186 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:34:57.298 00:00:11.800 TCP 12.102.0.1:39710 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:35:59.136 00:00:11.808 TCP 12.102.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:37:00.983 00:00:11.760 TCP 12.102.0.1:60536 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:38:02.783 00:00:11.823 TCP 12.102.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:38:38.029 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:38:37.773 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:38:37.937 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:38:37.887 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:38:37.788 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:38:37.776 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:38:38.006 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:39:04.641 00:00:11.803 TCP 12.102.0.1:33952 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:35:02.376 00:06:00.150 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 16:40:06.481 00:00:11.802 TCP 12.102.0.1:57800 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:36:02.379 00:06:00.145 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 16:41:08.328 00:00:11.819 TCP 12.102.0.1:46898 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:42:10.175 00:00:11.821 TCP 12.102.0.1:41946 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:43:12.030 00:00:11.803 TCP 12.102.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:43:37.778 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:43:37.802 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:43:37.899 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:43:37.864 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:43:37.732 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:43:37.768 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:43:37.697 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:44:13.872 00:00:11.805 TCP 12.102.0.1:50516 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:45:15.720 00:00:11.803 TCP 12.102.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:46:17.558 00:00:11.805 TCP 12.102.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:42:02.376 00:06:00.151 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 16:47:19.402 00:00:11.807 TCP 12.102.0.1:56214 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:43:02.379 00:06:00.146 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 16:48:21.249 00:00:11.801 TCP 12.102.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:48:38.027 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:48:37.968 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:48:38.299 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:48:37.960 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:48:37.959 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:48:38.148 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:48:38.005 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:49:23.088 00:00:11.799 TCP 12.102.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:50:24.926 00:00:11.817 TCP 12.102.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:51:26.779 00:00:12.152 TCP 12.102.0.1:47704 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:52:28.964 00:00:11.762 TCP 12.102.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:53:38.131 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:53:38.153 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:53:38.206 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:53:38.106 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:53:38.023 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:53:38.123 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:53:38.073 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:53:30.763 00:00:11.806 TCP 12.102.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:49:02.377 00:06:00.152 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 16:54:32.603 00:00:11.805 TCP 12.102.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:50:02.380 00:06:00.148 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 16:55:34.441 00:00:11.804 TCP 12.102.0.1:59540 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:56:36.293 00:00:11.804 TCP 12.102.0.1:46432 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:57:38.134 00:00:11.825 TCP 12.102.0.1:43446 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:58:37.995 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 16:58:38.019 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 16:58:38.190 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 16:58:38.069 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 16:58:38.252 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 16:58:38.023 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 16:58:38.085 00:00:00.044 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 16:58:39.994 00:00:11.755 TCP 12.102.0.1:48704 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-11-06 15:54:02 - 2025-11-06 16:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0040s User: 0.0010s Wall: 0.0020s flows/second: 81020.0 Runtime: 0.0020s