Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 16:59:41.788 00:00:11.799 TCP 12.102.0.1:51668 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:00:43.632 00:00:11.802 TCP 12.102.0.1:46450 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:56:02.380 00:06:00.152 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:01:45.476 00:00:11.809 TCP 12.102.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-11-06 16:57:02.385 00:06:00.145 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:02:47.318 00:00:11.822 TCP 12.102.0.1:44754 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:03:38.375 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:03:38.473 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:03:38.182 00:00:00.036 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:03:38.416 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:03:38.297 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:03:38.056 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:03:38.354 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:03:49.179 00:00:11.814 TCP 12.102.0.1:39248 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:04:51.040 00:00:11.763 TCP 12.102.0.1:38150 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:05:52.845 00:00:11.817 TCP 12.102.0.1:49484 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:06:54.696 00:00:11.800 TCP 12.102.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:03:02.381 00:06:00.152 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:07:56.535 00:00:12.147 TCP 12.102.0.1:43964 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:08:38.191 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:08:38.214 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:08:38.426 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:08:38.278 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:08:38.376 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:08:38.343 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:08:38.363 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:04:02.383 00:06:00.148 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:08:58.728 00:00:11.801 TCP 12.102.0.1:58838 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:10:00.565 00:00:11.798 TCP 12.102.0.1:43868 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:11:02.402 00:00:11.781 TCP 12.102.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:12:04.217 00:00:11.823 TCP 12.102.0.1:52780 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:13:06.078 00:00:11.805 TCP 12.102.0.1:44502 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:13:38.342 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:13:38.595 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:13:38.540 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:13:38.552 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:13:38.283 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:13:38.346 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:13:38.319 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:14:07.924 00:00:11.816 TCP 12.102.0.1:59382 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:10:02.387 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:15:09.780 00:00:12.041 TCP 12.102.0.1:51966 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:11:02.389 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:16:11.857 00:00:11.801 TCP 12.102.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:17:13.698 00:00:12.245 TCP 12.102.0.1:43822 -> 1.101.0.1:3000 15 1926 1 2025-11-06 17:18:15.978 00:00:11.808 TCP 12.102.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:18:38.690 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:18:38.456 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:18:38.562 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:18:38.527 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:18:38.572 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:18:38.331 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:18:38.669 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:19:17.826 00:00:11.810 TCP 12.102.0.1:59686 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:20:19.675 00:00:11.856 TCP 12.102.0.1:40364 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:21:21.568 00:00:11.764 TCP 12.102.0.1:39622 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:17:02.390 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:22:23.365 00:00:12.258 TCP 12.102.0.1:57748 -> 1.101.0.1:3000 15 1926 1 2025-11-06 17:18:02.391 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:23:38.730 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:23:25.655 00:00:11.811 TCP 12.102.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:23:38.753 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:23:38.783 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:23:38.541 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:23:38.493 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:23:38.659 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:23:38.330 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:24:27.505 00:00:11.811 TCP 12.102.0.1:54628 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:25:29.348 00:00:12.413 TCP 12.102.0.1:45544 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:26:31.802 00:00:11.818 TCP 12.102.0.1:45950 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:27:33.655 00:00:11.759 TCP 12.102.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:28:38.650 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:28:38.672 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:28:38.722 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:28:38.801 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:28:38.775 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:28:38.709 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:28:38.673 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:28:35.451 00:00:11.854 TCP 12.102.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:24:02.390 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:29:37.348 00:00:11.803 TCP 12.102.0.1:50198 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:25:02.392 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:30:39.193 00:00:11.801 TCP 12.102.0.1:57816 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:31:41.038 00:00:11.804 TCP 12.102.0.1:52134 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:32:42.878 00:00:11.803 TCP 12.102.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:33:38.783 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:33:38.926 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:33:38.933 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:33:38.927 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:33:38.828 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:33:38.710 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:33:38.760 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:33:44.758 00:00:11.809 TCP 12.102.0.1:55144 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:34:46.603 00:00:11.810 TCP 12.102.0.1:37292 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:35:48.453 00:00:11.859 TCP 12.102.0.1:60890 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:31:02.391 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:36:50.351 00:00:11.803 TCP 12.102.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:32:02.394 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:37:52.193 00:00:11.767 TCP 12.102.0.1:49480 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:38:39.251 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:38:39.070 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:38:39.099 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:38:39.192 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:38:39.162 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:38:39.233 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:38:39.227 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:38:54.002 00:00:11.758 TCP 12.102.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:39:55.796 00:00:11.799 TCP 12.102.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:40:57.641 00:00:11.802 TCP 12.102.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:41:59.480 00:00:11.777 TCP 12.102.0.1:40118 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:38:02.393 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:43:01.298 00:00:11.803 TCP 12.102.0.1:37370 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:43:38.665 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:43:39.089 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:43:39.044 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:43:38.688 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:43:39.079 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:43:39.028 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:43:38.987 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:39:02.396 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:44:03.138 00:00:11.776 TCP 12.102.0.1:47136 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:45:04.950 00:00:11.799 TCP 12.102.0.1:52524 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:46:06.790 00:00:11.800 TCP 12.102.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:47:08.638 00:00:11.801 TCP 12.102.0.1:36102 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:48:10.479 00:00:11.811 TCP 12.102.0.1:40792 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:48:39.297 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:48:39.320 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:48:39.545 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:48:39.537 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:48:39.308 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:48:39.542 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:48:39.532 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:49:12.328 00:00:11.808 TCP 12.102.0.1:60126 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:45:02.395 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:50:14.177 00:00:11.802 TCP 12.102.0.1:45518 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:46:02.397 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:51:16.037 00:00:11.800 TCP 12.102.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:52:17.875 00:00:11.806 TCP 12.102.0.1:56760 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:53:19.723 00:00:11.786 TCP 12.102.0.1:40852 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:53:39.224 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-06 17:53:39.248 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:53:39.392 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:53:39.366 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:53:39.219 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:53:39.265 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:53:39.262 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:54:21.547 00:00:11.755 TCP 12.102.0.1:40600 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:55:23.345 00:00:13.121 TCP 12.102.0.1:45992 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:56:26.496 00:00:11.804 TCP 12.102.0.1:45802 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:52:02.397 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-06 17:57:28.342 00:00:11.802 TCP 12.102.0.1:32814 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:53:02.400 00:06:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-06 17:58:39.397 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-06 17:58:39.366 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-06 17:58:39.288 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-06 17:58:39.167 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-06 17:58:30.189 00:00:11.759 TCP 12.102.0.1:39222 -> 1.101.0.1:3000 11 1507 1 2025-11-06 17:58:39.258 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-06 17:58:39.285 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 17:58:39.233 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 264, avg pps: 0, avg bpp: 108 Time window: 2025-11-06 16:56:02 - 2025-11-06 17:59:02 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0024s Wall: 0.0023s flows/second: 70418.5 Runtime: 0.0023s