Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 09:59:26.581 00:00:11.819 TCP 12.102.0.1:48462 -> 1.101.0.1:3000 11 1507 1 2025-11-09 09:59:56.425 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.544 00:00:00.039 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.583 00:00:00.010 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.236 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.356 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.382 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.401 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 09:55:03.748 00:06:00.099 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:00:28.436 00:00:11.811 TCP 12.102.0.1:60252 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:01:30.283 00:00:11.811 TCP 12.102.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:02:32.130 00:00:11.795 TCP 12.102.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:03:33.970 00:00:11.815 TCP 12.102.0.1:43658 -> 1.101.0.1:3000 11 1507 1 2025-11-09 09:59:03.749 00:06:00.095 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 10:04:35.825 00:00:11.817 TCP 12.102.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:04:56.449 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:04:56.474 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.416 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.355 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.332 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.506 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.215 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:05:37.675 00:00:11.814 TCP 12.102.0.1:37714 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:06:39.525 00:00:11.815 TCP 12.102.0.1:39718 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:02:03.749 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:07:41.379 00:00:11.823 TCP 12.102.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:08:43.266 00:00:11.866 TCP 12.102.0.1:58346 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:09:56.397 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:09:56.517 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:09:56.632 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:09:56.325 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:09:45.173 00:00:11.777 TCP 12.102.0.1:36710 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:09:56.421 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:09:56.731 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:09:56.730 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:10:46.995 00:00:11.762 TCP 12.102.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:06:03.751 00:06:00.094 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 10:11:48.796 00:00:11.802 TCP 12.102.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:12:50.634 00:00:11.803 TCP 12.102.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:13:52.472 00:00:11.810 TCP 12.102.0.1:55480 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:09:03.749 00:06:00.099 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:14:56.755 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.590 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.707 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.657 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.756 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.769 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.733 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:14:54.321 00:00:11.803 TCP 12.102.0.1:32990 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:15:56.159 00:00:11.805 TCP 12.102.0.1:45848 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:16:58.003 00:00:11.756 TCP 12.102.0.1:37322 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:13:03.752 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 10:17:59.800 00:00:11.800 TCP 12.102.0.1:43242 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:19:01.643 00:00:11.770 TCP 12.102.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:19:56.540 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:19:56.562 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:19:56.908 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:19:56.874 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:19:56.754 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:19:56.764 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:19:56.649 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:20:03.444 00:00:11.807 TCP 12.102.0.1:54020 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:16:03.751 00:06:00.102 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:21:05.287 00:00:11.817 TCP 12.102.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:22:07.125 00:00:11.768 TCP 12.102.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:23:08.930 00:00:11.775 TCP 12.102.0.1:56230 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:24:10.738 00:00:11.829 TCP 12.102.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:24:56.838 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:24:56.861 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.948 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.928 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.949 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.765 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.816 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:20:03.754 00:06:00.098 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 10:25:12.607 00:00:11.801 TCP 12.102.0.1:44312 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:26:14.449 00:00:11.761 TCP 12.102.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:27:16.251 00:00:11.816 TCP 12.102.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:23:03.753 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:28:18.102 00:00:11.802 TCP 12.102.0.1:60404 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:29:19.942 00:00:11.770 TCP 12.102.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:29:57.130 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:29:57.008 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:29:57.023 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:29:57.099 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:29:57.138 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:29:57.013 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:29:57.108 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:30:21.752 00:00:11.757 TCP 12.102.0.1:37404 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:31:23.546 00:00:11.759 TCP 12.102.0.1:49348 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:27:03.758 00:06:00.095 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 10:32:25.349 00:00:11.798 TCP 12.102.0.1:42854 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:33:27.188 00:00:12.366 TCP 12.102.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:34:29.595 00:00:11.796 TCP 12.102.0.1:42452 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:34:56.961 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:34:56.858 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:34:56.895 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:34:56.876 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:34:56.944 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:34:56.984 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:34:57.001 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:30:03.757 00:06:00.100 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:35:31.433 00:00:11.762 TCP 12.102.0.1:58102 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:36:33.234 00:00:11.799 TCP 12.102.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:37:35.078 00:00:12.296 TCP 12.102.0.1:36114 -> 1.101.0.1:3000 15 1926 1 2025-11-09 10:38:37.407 00:00:11.811 TCP 12.102.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:34:03.758 00:06:00.095 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 10:39:39.260 00:00:11.811 TCP 12.102.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:39:57.226 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.446 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.049 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.322 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.300 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.119 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.205 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:40:41.111 00:00:11.773 TCP 12.102.0.1:56250 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:41:42.923 00:00:11.833 TCP 12.102.0.1:34918 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:37:03.757 00:06:00.100 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:42:44.795 00:00:11.802 TCP 12.102.0.1:52402 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:43:46.638 00:00:11.800 TCP 12.102.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:44:57.278 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:44:48.482 00:00:11.767 TCP 12.102.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:44:57.301 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:44:57.217 00:00:00.047 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:44:57.428 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:44:57.387 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:44:57.412 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:44:57.209 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:45:50.289 00:00:11.766 TCP 12.102.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:41:03.761 00:06:00.094 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 10:46:52.109 00:00:11.808 TCP 12.102.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:47:53.957 00:00:11.821 TCP 12.102.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:44:03.759 00:06:00.099 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:48:55.816 00:00:11.799 TCP 12.102.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:49:57.317 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.384 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.282 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.446 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.209 00:00:00.048 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.229 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.293 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:49:57.653 00:00:11.761 TCP 12.102.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:50:59.452 00:00:11.812 TCP 12.102.0.1:37558 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:52:01.305 00:00:11.818 TCP 12.102.0.1:37040 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:48:03.762 00:06:00.099 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 10:53:03.148 00:00:11.759 TCP 12.102.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:54:04.944 00:00:11.804 TCP 12.102.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:54:57.255 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 10:54:57.278 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 10:54:57.501 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:54:57.327 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 10:54:57.180 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 10:54:57.542 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 10:54:57.112 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 10:55:06.788 00:00:11.807 TCP 12.102.0.1:36392 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:51:03.761 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 10:56:08.634 00:00:11.802 TCP 12.102.0.1:40722 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:57:10.474 00:00:11.765 TCP 12.102.0.1:39342 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:58:12.278 00:00:11.782 TCP 12.102.0.1:34034 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-11-09 09:55:03 - 2025-11-09 10:58:24 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0047s User: 0.0012s Wall: 0.0034s flows/second: 46113.6 Runtime: 0.0035s