Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 17:59:02.701 00:00:11.803 TCP 12.102.0.1:60054 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:00:06.185 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 17:55:03.894 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 18:00:06.208 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:00:06.344 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:00:06.445 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:00:06.520 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:00:06.619 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:00:06.410 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:00:04.549 00:00:11.764 TCP 12.102.0.1:38336 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:01:06.352 00:00:11.820 TCP 12.102.0.1:35092 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:02:08.213 00:00:11.807 TCP 12.102.0.1:49150 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:58:03.891 00:06:00.101 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 18:03:10.064 00:00:11.762 TCP 12.102.0.1:45246 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:04:11.865 00:00:11.801 TCP 12.102.0.1:44738 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:05:06.090 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:05:06.113 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:05:06.312 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:05:06.147 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:05:05.938 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:05:06.149 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:05:06.180 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:05:13.720 00:00:11.797 TCP 12.102.0.1:45816 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:06:15.556 00:00:11.782 TCP 12.102.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:02:03.895 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 18:07:17.373 00:00:11.814 TCP 12.102.0.1:38034 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:08:19.222 00:00:11.813 TCP 12.102.0.1:39204 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:09:21.079 00:00:11.757 TCP 12.102.0.1:35834 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:10:06.222 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:05:03.893 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 18:10:06.048 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:10:06.506 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:10:06.563 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:10:06.430 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:10:06.107 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:10:06.201 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:10:22.878 00:00:11.808 TCP 12.102.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:11:24.725 00:00:11.800 TCP 12.102.0.1:33462 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:12:26.560 00:00:11.766 TCP 12.102.0.1:33734 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:13:28.370 00:00:12.269 TCP 12.102.0.1:51162 -> 1.101.0.1:3000 15 1926 1 2025-11-09 18:09:03.898 00:06:00.099 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 18:14:30.680 00:00:11.762 TCP 12.102.0.1:50796 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:15:06.317 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:15:06.398 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:15:06.332 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:15:06.365 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:15:06.461 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:15:06.325 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:15:06.295 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:15:32.478 00:00:11.767 TCP 12.102.0.1:34532 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:16:34.286 00:00:11.802 TCP 12.102.0.1:45436 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:12:03.895 00:06:00.106 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-09 18:17:36.130 00:00:11.780 TCP 12.102.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:18:37.936 00:00:11.862 TCP 12.102.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:19:39.835 00:00:11.803 TCP 12.102.0.1:39450 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:20:06.368 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:20:06.389 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:20:06.486 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:20:06.516 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:20:06.538 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:20:06.380 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:20:06.342 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:20:41.678 00:00:11.814 TCP 12.102.0.1:55560 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:16:03.902 00:06:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 18:21:43.530 00:00:11.799 TCP 12.102.0.1:34888 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:22:45.370 00:00:12.264 TCP 12.102.0.1:51558 -> 1.101.0.1:3000 15 1926 1 2025-11-09 18:19:03.900 00:05:00.101 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 18:23:47.670 00:00:11.811 TCP 12.102.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:25:06.607 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:24:49.515 00:00:11.799 TCP 12.102.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:25:06.632 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:25:06.657 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:25:06.574 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:25:06.676 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:25:06.234 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:25:06.402 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:25:51.360 00:00:11.824 TCP 12.102.0.1:51288 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:26:53.216 00:00:11.800 TCP 12.102.0.1:53252 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:23:03.905 00:06:00.093 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-09 18:27:55.077 00:00:12.213 TCP 12.102.0.1:44604 -> 1.101.0.1:3000 15 1926 1 2025-11-09 18:25:03.901 00:05:00.101 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 18:28:57.315 00:00:12.208 TCP 12.102.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:30:06.573 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:30:06.682 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:30:06.755 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:30:06.828 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:30:06.604 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:30:06.385 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:30:06.552 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:29:59.562 00:00:11.812 TCP 12.102.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:31:01.412 00:00:11.813 TCP 12.102.0.1:34996 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:32:03.263 00:00:11.809 TCP 12.102.0.1:40086 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:33:05.113 00:00:11.801 TCP 12.102.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:30:03.904 00:05:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 18:34:06.950 00:00:11.807 TCP 12.102.0.1:33382 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:31:03.901 00:05:00.102 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 18:35:06.912 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:35:06.900 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:35:07.050 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:35:07.237 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:35:07.096 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:35:07.163 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:35:07.027 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:35:08.793 00:00:11.810 TCP 12.102.0.1:58228 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:36:10.640 00:00:11.802 TCP 12.102.0.1:42894 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:37:12.483 00:00:11.770 TCP 12.102.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:38:14.293 00:00:11.801 TCP 12.102.0.1:42936 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:39:16.139 00:00:11.813 TCP 12.102.0.1:49936 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:40:06.736 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:36:03.906 00:05:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 18:40:06.759 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:40:06.718 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:40:06.888 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:40:06.793 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:40:06.827 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:40:06.996 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:40:17.988 00:00:11.805 TCP 12.102.0.1:58476 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:37:03.903 00:05:00.117 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 18:41:19.828 00:00:11.804 TCP 12.102.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:42:21.669 00:00:11.814 TCP 12.102.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:43:23.522 00:00:11.800 TCP 12.102.0.1:51666 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:44:25.357 00:00:11.819 TCP 12.102.0.1:45248 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:45:06.900 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:45:06.952 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:45:06.765 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:45:07.230 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:45:07.284 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:45:07.418 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:45:07.262 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:45:27.215 00:00:11.768 TCP 12.102.0.1:53858 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:42:03.907 00:05:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 18:46:29.042 00:00:11.804 TCP 12.102.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:43:03.904 00:05:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 18:47:30.888 00:00:11.813 TCP 12.102.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:48:32.739 00:00:11.809 TCP 12.102.0.1:49044 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:49:34.584 00:00:11.829 TCP 12.102.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:50:06.795 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:50:06.959 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:50:06.983 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:50:07.232 00:00:00.040 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:50:07.164 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:50:07.126 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:50:07.120 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:50:36.448 00:00:11.763 TCP 12.102.0.1:55040 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:51:38.251 00:00:11.806 TCP 12.102.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:48:03.907 00:05:00.126 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 18:52:40.096 00:00:11.799 TCP 12.102.0.1:42904 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:49:03.905 00:05:00.132 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 18:53:41.936 00:00:11.810 TCP 12.102.0.1:53876 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:54:43.785 00:00:11.799 TCP 12.102.0.1:43480 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:55:07.131 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 18:55:07.154 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 18:55:07.297 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 18:55:07.186 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 18:55:07.179 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 18:55:07.168 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 18:55:07.163 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 18:55:45.620 00:00:11.799 TCP 12.102.0.1:51740 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:56:47.459 00:00:11.800 TCP 12.102.0.1:32852 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:57:49.295 00:00:11.805 TCP 12.102.0.1:54892 -> 1.101.0.1:3000 11 1507 1 2025-11-09 18:54:03.910 00:05:00.124 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 Summary: total flows: 161, total bytes: 124837, total packets: 1146, avg bps: 260, avg pps: 0, avg bpp: 108 Time window: 2025-11-09 17:55:03 - 2025-11-09 18:59:04 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0057s User: 0.0000s Wall: 0.0022s flows/second: 71587.3 Runtime: 0.0023s