Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 09:59:09.281 00:00:11.800 TCP 12.102.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-11-08 09:59:27.540 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 09:59:27.564 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 09:59:27.430 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 09:59:27.175 00:00:00.038 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 09:59:27.662 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 09:59:27.567 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 09:59:27.258 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:00:11.120 00:00:11.809 TCP 12.102.0.1:56684 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:01:12.964 00:00:11.808 TCP 12.102.0.1:43996 -> 1.101.0.1:3000 11 1507 1 2025-11-08 09:57:03.226 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:02:14.801 00:00:11.804 TCP 12.102.0.1:49230 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:03:16.646 00:00:11.902 TCP 12.102.0.1:53818 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:04:27.573 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:04:18.584 00:00:11.804 TCP 12.102.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:04:27.626 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:04:27.698 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:04:27.662 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:04:27.700 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:04:27.533 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:04:27.550 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:00:03.225 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 10:05:20.428 00:00:11.803 TCP 12.102.0.1:43874 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:06:22.269 00:00:12.144 TCP 12.102.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:07:24.452 00:00:11.802 TCP 12.102.0.1:36878 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:08:26.294 00:00:11.803 TCP 12.102.0.1:58100 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:04:03.227 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:09:27.594 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:09:27.796 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:09:27.734 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:09:27.425 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:09:27.839 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:09:27.402 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:09:27.570 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:09:28.138 00:00:11.811 TCP 12.102.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:10:29.988 00:00:12.286 TCP 12.102.0.1:58972 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:11:32.307 00:00:11.803 TCP 12.102.0.1:46016 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:07:03.225 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 10:12:34.147 00:00:11.774 TCP 12.102.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:13:35.955 00:00:11.771 TCP 12.102.0.1:48168 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:14:27.728 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:14:27.662 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:14:27.751 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:14:27.803 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:14:27.720 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:14:27.914 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:14:27.860 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:14:37.760 00:00:11.797 TCP 12.102.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:15:39.593 00:00:11.759 TCP 12.102.0.1:46992 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:11:03.229 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:16:41.393 00:00:11.757 TCP 12.102.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:17:43.193 00:00:11.853 TCP 12.102.0.1:53258 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:18:45.087 00:00:11.802 TCP 12.102.0.1:55024 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:14:03.230 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 10:19:27.703 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:19:27.954 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:19:27.889 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:19:27.791 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:19:27.891 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:19:27.589 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:19:27.681 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:19:46.929 00:00:22.989 TCP 12.102.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:20:59.955 00:00:11.802 TCP 12.102.0.1:44872 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:22:01.796 00:00:11.803 TCP 12.102.0.1:39094 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:18:03.232 00:06:00.165 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:23:03.635 00:00:11.811 TCP 12.102.0.1:46288 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:24:05.474 00:00:11.801 TCP 12.102.0.1:38680 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:24:27.930 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:24:28.038 00:00:00.053 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:24:27.750 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:24:27.885 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:24:28.016 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:24:27.880 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:24:27.907 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:25:07.313 00:00:11.803 TCP 12.102.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:21:03.230 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 10:26:09.165 00:00:11.759 TCP 12.102.0.1:40236 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:27:10.963 00:00:11.797 TCP 12.102.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:28:12.800 00:00:11.802 TCP 12.102.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:29:27.959 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:29:14.639 00:00:11.825 TCP 12.102.0.1:47712 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:29:27.981 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:29:28.330 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:29:27.981 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:29:27.981 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:29:28.196 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:29:28.382 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:25:03.233 00:06:00.165 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:30:16.517 00:00:11.819 TCP 12.102.0.1:39730 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:31:18.373 00:00:11.817 TCP 12.102.0.1:34882 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:32:20.230 00:00:11.784 TCP 12.102.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:28:03.232 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 10:33:22.061 00:00:11.804 TCP 12.102.0.1:58384 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:34:28.027 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:34:28.049 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:34:28.037 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:34:28.275 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:34:28.178 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:34:28.067 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:34:27.812 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:34:23.904 00:00:11.813 TCP 12.102.0.1:58018 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:35:25.750 00:00:11.819 TCP 12.102.0.1:46780 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:36:27.604 00:00:12.189 TCP 12.102.0.1:58312 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:32:03.234 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:37:29.829 00:00:12.247 TCP 12.102.0.1:52692 -> 1.101.0.1:3000 15 1926 1 2025-11-08 10:38:32.118 00:00:11.798 TCP 12.102.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:39:28.143 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:39:28.009 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:39:28.313 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:39:28.127 00:00:00.051 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:39:28.142 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:39:28.258 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:39:28.120 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:39:33.957 00:00:11.802 TCP 12.102.0.1:50710 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:35:03.233 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 10:40:35.795 00:00:11.854 TCP 12.102.0.1:54060 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:41:37.690 00:00:11.803 TCP 12.102.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:42:39.531 00:00:11.802 TCP 12.102.0.1:49936 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:43:41.374 00:00:11.805 TCP 12.102.0.1:52682 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:39:03.237 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:44:28.624 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:44:28.647 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:44:28.331 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:44:28.731 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:44:28.482 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:44:28.701 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:44:28.730 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:44:43.215 00:00:11.804 TCP 12.102.0.1:51322 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:45:45.074 00:00:13.811 TCP 12.102.0.1:50840 -> 1.101.0.1:3000 13 1611 1 2025-11-08 10:46:48.924 00:00:11.852 TCP 12.102.0.1:52988 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:42:03.235 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 10:47:50.810 00:00:11.801 TCP 12.102.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:48:52.648 00:00:11.821 TCP 12.102.0.1:36780 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:49:28.518 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:49:28.658 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:49:28.450 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:49:28.615 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:49:28.287 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:49:28.280 00:00:00.035 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:49:28.496 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:49:54.507 00:00:11.849 TCP 12.102.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:46:03.237 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:50:56.396 00:00:11.812 TCP 12.102.0.1:41684 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:51:58.247 00:00:11.799 TCP 12.102.0.1:50372 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:53:00.087 00:00:11.799 TCP 12.102.0.1:52604 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:49:03.236 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-08 10:54:01.927 00:00:11.816 TCP 12.102.0.1:58560 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:54:28.936 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-08 10:54:28.599 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:54:28.825 00:00:00.015 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-08 10:54:28.929 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-08 10:54:28.786 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-08 10:54:28.663 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-08 10:54:28.914 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-08 10:55:03.783 00:00:11.803 TCP 12.102.0.1:42812 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:56:05.627 00:00:11.767 TCP 12.102.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:57:07.433 00:00:11.814 TCP 12.102.0.1:40774 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:53:03.242 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-08 10:58:09.284 00:00:19.182 TCP 12.102.0.1:49542 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123734, total packets: 1134, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-11-08 09:57:03 - 2025-11-08 10:59:03 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0054s User: 0.0000s Wall: 0.0015s flows/second: 107011.3 Runtime: 0.0015s