Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 11:59:01.046 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 11:59:01.005 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 11:59:01.381 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 11:59:00.869 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 11:59:01.162 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 11:59:01.020 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 11:59:01.022 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 11:59:39.955 00:00:11.806 TCP 12.102.0.1:51674 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:00:41.797 00:00:11.757 TCP 12.102.0.1:40922 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:01:43.596 00:00:12.232 TCP 12.102.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-11-07 11:57:02.739 00:06:00.154 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:02:45.867 00:00:11.798 TCP 12.102.0.1:35550 -> 1.101.0.1:3000 11 1507 1 2025-11-07 11:58:02.742 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-07 12:04:00.826 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:03:47.707 00:00:11.805 TCP 12.102.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:04:00.848 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:04:01.052 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:04:01.075 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:04:00.883 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:04:01.026 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:04:01.163 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:04:49.550 00:00:11.806 TCP 12.102.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:05:51.395 00:00:11.804 TCP 12.102.0.1:59748 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:06:53.233 00:00:11.795 TCP 12.102.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:07:55.078 00:00:11.810 TCP 12.102.0.1:48152 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:09:01.160 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:09:01.183 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:09:01.356 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:09:01.324 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:09:01.294 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:09:01.378 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:09:01.097 00:00:00.041 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:04:02.742 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:08:56.930 00:00:11.814 TCP 12.102.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:05:02.744 00:06:00.147 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-07 12:09:58.777 00:00:11.798 TCP 12.102.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:11:00.616 00:00:11.801 TCP 12.102.0.1:38558 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:12:02.454 00:00:11.806 TCP 12.102.0.1:49946 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:13:04.307 00:00:11.813 TCP 12.102.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:14:01.221 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:14:01.243 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:14:01.335 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:14:01.413 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:14:01.172 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:14:01.352 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:14:01.251 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:14:06.160 00:00:11.802 TCP 12.102.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:15:08.000 00:00:11.803 TCP 12.102.0.1:37274 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:11:02.743 00:06:00.154 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:16:09.838 00:00:11.855 TCP 12.102.0.1:33098 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:12:02.745 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-07 12:17:11.735 00:00:11.805 TCP 12.102.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:18:13.578 00:00:11.800 TCP 12.102.0.1:53542 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:19:01.373 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:19:01.397 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:19:01.492 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:19:01.458 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:19:01.440 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:19:01.485 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:19:01.276 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:19:15.416 00:00:11.839 TCP 12.102.0.1:47382 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:20:17.296 00:00:11.811 TCP 12.102.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:21:19.150 00:00:11.817 TCP 12.102.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:22:21.008 00:00:11.806 TCP 12.102.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:18:02.759 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:23:22.846 00:00:11.761 TCP 12.102.0.1:57470 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:24:01.614 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:24:01.638 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:24:01.759 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:24:01.585 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:24:01.736 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:24:01.862 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:24:01.627 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:19:02.760 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-07 12:24:24.645 00:00:11.799 TCP 12.102.0.1:56638 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:25:26.483 00:00:11.776 TCP 12.102.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:26:28.295 00:00:11.811 TCP 12.102.0.1:44772 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:27:30.141 00:00:11.774 TCP 12.102.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:28:31.945 00:00:11.943 TCP 12.102.0.1:40050 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:29:01.450 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:29:01.472 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:29:01.615 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:29:01.732 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:29:01.579 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:29:01.602 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:29:01.560 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:29:33.927 00:00:11.777 TCP 12.102.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:25:02.760 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:30:35.740 00:00:11.799 TCP 12.102.0.1:45314 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:26:02.763 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-07 12:31:37.579 00:00:11.770 TCP 12.102.0.1:59494 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:32:39.391 00:00:11.809 TCP 12.102.0.1:55468 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:33:41.240 00:00:11.810 TCP 12.102.0.1:44576 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:34:01.584 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:34:01.606 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:34:01.645 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:34:01.937 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:34:01.620 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:34:01.731 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:34:01.507 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:34:43.082 00:00:11.806 TCP 12.102.0.1:55694 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:35:44.930 00:00:11.814 TCP 12.102.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:36:46.782 00:00:11.813 TCP 12.102.0.1:46134 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:32:02.762 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:37:48.634 00:00:11.805 TCP 12.102.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:33:02.763 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-07 12:39:01.734 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:39:01.783 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:39:01.811 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:39:01.828 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:39:01.701 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:39:01.906 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:39:01.711 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:38:50.478 00:00:11.809 TCP 12.102.0.1:35862 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:39:52.325 00:00:11.806 TCP 12.102.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:40:54.168 00:00:11.802 TCP 12.102.0.1:59456 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:41:56.011 00:00:11.800 TCP 12.102.0.1:35486 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:42:57.858 00:00:11.812 TCP 12.102.0.1:37786 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:44:01.866 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:44:01.952 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:44:01.849 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:44:01.976 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:44:01.855 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:44:01.843 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:39:02.761 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:44:02.115 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:43:59.712 00:00:11.796 TCP 12.102.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:40:02.764 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-07 12:45:01.550 00:00:11.883 TCP 12.102.0.1:43938 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:46:03.483 00:00:11.801 TCP 12.102.0.1:60278 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:47:05.326 00:00:11.800 TCP 12.102.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:48:07.166 00:00:12.041 TCP 12.102.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:49:02.646 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:49:02.748 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:49:02.607 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:49:02.559 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:49:02.478 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:49:02.446 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:49:02.625 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:49:09.248 00:00:11.803 TCP 12.102.0.1:44482 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:50:11.092 00:00:11.807 TCP 12.102.0.1:39820 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:46:02.763 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:51:12.944 00:00:11.810 TCP 12.102.0.1:50836 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:47:02.767 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-07 12:52:14.796 00:00:11.800 TCP 12.102.0.1:51874 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:53:16.640 00:00:11.767 TCP 12.102.0.1:54962 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:54:01.923 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 12:54:02.001 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-07 12:54:02.023 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-07 12:54:02.001 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-07 12:54:02.126 00:00:00.044 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-07 12:54:02.210 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-07 12:54:02.028 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-07 12:54:18.448 00:00:11.809 TCP 12.102.0.1:60600 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:55:20.297 00:00:11.758 TCP 12.102.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:56:22.095 00:00:11.757 TCP 12.102.0.1:35494 -> 1.101.0.1:3000 11 1507 1 2025-11-07 12:57:23.892 00:00:23.506 TCP 12.102.0.1:35970 -> 1.101.0.1:3000 15 1926 1 2025-11-07 12:53:02.765 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-07 12:58:37.440 00:00:11.806 TCP 12.102.0.1:41416 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-11-07 11:57:02 - 2025-11-07 12:59:02 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0036s User: 0.0018s Wall: 0.0024s flows/second: 65678.0 Runtime: 0.0024s