Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 05:59:04.176 00:00:11.807 TCP 12.102.0.1:53470 -> 1.101.0.1:3000 11 1507 1 2025-11-08 05:59:22.648 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 05:59:22.671 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 05:59:22.729 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 05:59:22.607 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 05:59:22.673 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 05:59:22.810 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 05:59:22.451 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 05:55:03.158 00:06:00.169 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:00:06.036 00:00:13.327 TCP 12.102.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:01:09.402 00:00:11.764 TCP 12.102.0.1:37492 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:02:11.207 00:00:11.804 TCP 12.102.0.1:36536 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:03:13.073 00:00:11.965 TCP 12.102.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-11-08 05:59:03.163 00:06:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 06:04:15.082 00:00:11.804 TCP 12.102.0.1:36018 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:04:22.799 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:04:22.863 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:04:23.043 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:04:22.765 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:04:22.937 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:04:22.862 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:04:22.777 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:05:16.927 00:00:13.995 TCP 12.102.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:06:20.957 00:00:11.770 TCP 12.102.0.1:35702 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:02:03.160 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:07:22.765 00:00:12.230 TCP 12.102.0.1:34646 -> 1.101.0.1:3000 15 1926 1 2025-11-08 06:08:25.045 00:00:11.824 TCP 12.102.0.1:34274 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:09:22.986 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:09:23.011 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:09:23.066 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:09:22.950 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:09:22.919 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:09:22.839 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:09:22.905 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:09:26.890 00:00:11.814 TCP 12.102.0.1:36272 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:10:28.742 00:00:11.761 TCP 12.102.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:06:03.164 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 06:11:30.546 00:00:11.757 TCP 12.102.0.1:34382 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:12:32.340 00:00:11.831 TCP 12.102.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:13:34.207 00:00:11.799 TCP 12.102.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:09:03.163 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:14:22.995 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:14:22.971 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:14:22.964 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:14:22.951 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:14:22.768 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:14:23.007 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:14:22.973 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:14:36.073 00:00:22.663 TCP 12.102.0.1:51688 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:15:48.785 00:00:11.806 TCP 12.102.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:16:50.639 00:00:11.799 TCP 12.102.0.1:36804 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:17:52.480 00:00:11.776 TCP 12.102.0.1:47240 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:13:03.166 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 06:18:54.294 00:00:11.828 TCP 12.102.0.1:56710 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:19:23.012 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:19:23.034 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:19:22.958 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:19:23.159 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:19:22.966 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:19:23.085 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:19:23.141 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:19:56.139 00:00:11.817 TCP 12.102.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:16:03.162 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:20:57.996 00:00:11.764 TCP 12.102.0.1:57598 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:21:59.798 00:00:11.803 TCP 12.102.0.1:56940 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:23:01.638 00:00:11.800 TCP 12.102.0.1:46720 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:24:03.481 00:00:12.405 TCP 12.102.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:24:23.785 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:24:23.450 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:24:23.812 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:24:23.819 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:24:23.972 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:24:23.896 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:24:23.763 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:20:03.166 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 06:25:05.925 00:00:11.814 TCP 12.102.0.1:43510 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:26:07.778 00:00:11.803 TCP 12.102.0.1:48292 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:27:09.613 00:00:12.933 TCP 12.102.0.1:39804 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:23:03.164 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:28:12.598 00:00:11.760 TCP 12.102.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:29:14.427 00:00:11.763 TCP 12.102.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:29:22.902 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:29:23.278 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:29:23.274 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:29:23.243 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:29:23.042 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:29:23.124 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:29:22.879 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:30:16.247 00:00:11.799 TCP 12.102.0.1:42134 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:31:18.095 00:00:11.802 TCP 12.102.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:27:03.167 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 06:32:19.945 00:00:11.817 TCP 12.102.0.1:44564 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:33:21.831 00:00:11.820 TCP 12.102.0.1:50268 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:34:23.270 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:34:23.486 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:34:23.422 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:34:23.445 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:34:23.537 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:34:23.353 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:34:23.248 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:34:23.691 00:00:11.780 TCP 12.102.0.1:47818 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:30:03.166 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:35:25.511 00:00:11.772 TCP 12.102.0.1:35194 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:36:27.316 00:00:11.800 TCP 12.102.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:37:29.159 00:00:11.815 TCP 12.102.0.1:41054 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:38:31.010 00:00:11.800 TCP 12.102.0.1:38612 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:34:03.169 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 06:39:23.453 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:39:23.526 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:39:23.543 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:39:23.372 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:39:23.531 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:39:23.424 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:39:23.431 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:39:32.848 00:00:11.796 TCP 12.102.0.1:56024 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:40:34.683 00:00:11.819 TCP 12.102.0.1:36054 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:41:36.535 00:00:11.763 TCP 12.102.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:37:03.168 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:42:38.336 00:00:11.807 TCP 12.102.0.1:33370 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:43:40.184 00:00:11.762 TCP 12.102.0.1:44166 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:44:23.432 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:44:23.453 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:44:23.576 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:44:23.739 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:44:23.564 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:44:23.765 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:44:23.609 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:44:41.987 00:00:11.800 TCP 12.102.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:45:43.821 00:00:11.806 TCP 12.102.0.1:48982 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:41:03.173 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 06:46:45.661 00:00:11.815 TCP 12.102.0.1:45280 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:47:47.520 00:00:11.800 TCP 12.102.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:44:03.170 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:48:49.360 00:00:17.260 TCP 12.102.0.1:46842 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:49:23.950 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:49:23.790 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:49:23.890 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:49:24.007 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:49:24.033 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:49:23.922 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:49:23.929 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:49:56.662 00:00:11.810 TCP 12.102.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:50:58.514 00:00:11.806 TCP 12.102.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:52:00.356 00:00:11.822 TCP 12.102.0.1:50316 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:48:03.173 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 06:53:02.215 00:00:13.684 TCP 12.102.0.1:38456 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:54:05.961 00:00:11.803 TCP 12.102.0.1:53848 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:54:23.623 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 06:54:23.865 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:54:23.739 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 06:54:23.703 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 06:54:23.619 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 06:54:23.591 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 06:54:23.601 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 06:55:07.808 00:00:11.803 TCP 12.102.0.1:54640 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:51:03.172 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 06:56:09.652 00:00:11.820 TCP 12.102.0.1:33994 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:57:11.511 00:00:11.771 TCP 12.102.0.1:49560 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:58:13.323 00:00:11.803 TCP 12.102.0.1:37856 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-11-08 05:55:03 - 2025-11-08 06:58:25 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0026s User: 0.0026s Wall: 0.0028s flows/second: 56027.4 Runtime: 0.0029s