Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 23:55:03.990 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 23:59:22.365 00:00:11.820 TCP 12.102.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:00:13.166 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:00:13.191 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:00:13.321 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:00:13.331 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:00:12.869 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:00:13.354 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:00:13.197 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:00:24.220 00:00:11.800 TCP 12.102.0.1:58234 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:01:26.075 00:00:11.797 TCP 12.102.0.1:55856 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:02:27.911 00:00:11.783 TCP 12.102.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:03:29.729 00:00:11.801 TCP 12.102.0.1:39524 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:00:03.992 00:05:00.144 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-10 00:04:31.570 00:00:11.804 TCP 12.102.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:01:03.991 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-10 00:05:13.310 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:05:13.332 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:05:13.463 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:05:13.402 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:05:13.456 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:05:13.529 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:05:13.198 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:05:33.412 00:00:11.812 TCP 12.102.0.1:42596 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:06:35.263 00:00:11.812 TCP 12.102.0.1:48890 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:07:37.111 00:00:11.760 TCP 12.102.0.1:58022 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:08:38.910 00:00:11.832 TCP 12.102.0.1:51870 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:09:40.781 00:00:11.799 TCP 12.102.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:06:03.993 00:05:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-10 00:10:13.308 00:00:00.019 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:10:13.445 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:10:13.444 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:10:13.144 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:10:13.119 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:10:13.250 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:10:13.285 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:10:42.620 00:00:11.804 TCP 12.102.0.1:49670 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:07:03.992 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-10 00:11:44.462 00:00:11.806 TCP 12.102.0.1:41762 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:12:46.299 00:00:11.802 TCP 12.102.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:13:48.166 00:00:11.762 TCP 12.102.0.1:34134 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:14:49.964 00:00:11.800 TCP 12.102.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:15:13.557 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:15:13.579 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:15:13.725 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:15:13.707 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:15:13.712 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:15:13.844 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:15:13.672 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:12:03.995 00:05:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-10 00:15:51.805 00:00:11.804 TCP 12.102.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:16:53.650 00:00:11.756 TCP 12.102.0.1:46062 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:13:03.993 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-10 00:17:55.449 00:00:11.765 TCP 12.102.0.1:35436 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:18:57.252 00:00:11.798 TCP 12.102.0.1:58726 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:20:13.636 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:19:59.093 00:00:11.797 TCP 12.102.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:20:13.658 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:20:13.870 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:20:13.588 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:20:13.672 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:20:13.864 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:20:13.840 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:21:00.930 00:00:11.771 TCP 12.102.0.1:59916 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:18:03.997 00:05:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-10 00:22:02.738 00:00:11.816 TCP 12.102.0.1:44130 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:19:03.996 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-10 00:23:04.590 00:00:11.809 TCP 12.102.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:24:06.436 00:00:11.810 TCP 12.102.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:25:13.770 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:25:13.768 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:25:13.752 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:25:13.660 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:25:13.746 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:25:13.698 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:25:13.748 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:25:08.278 00:00:11.812 TCP 12.102.0.1:52678 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:26:10.120 00:00:11.804 TCP 12.102.0.1:44386 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:27:11.968 00:00:11.805 TCP 12.102.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:24:03.999 00:05:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-10 00:28:13.811 00:00:11.852 TCP 12.102.0.1:37508 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:25:03.997 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-10 00:29:15.706 00:00:12.362 TCP 12.102.0.1:56996 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:30:13.795 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:30:13.906 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:30:13.840 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:30:13.933 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:30:13.939 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:30:13.865 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:30:13.773 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:30:18.102 00:00:11.806 TCP 12.102.0.1:45216 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:31:19.949 00:00:11.806 TCP 12.102.0.1:42760 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:32:21.786 00:00:12.475 TCP 12.102.0.1:51272 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:33:24.301 00:00:11.801 TCP 12.102.0.1:51528 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:34:26.140 00:00:11.813 TCP 12.102.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:31:03.997 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-10 00:30:04.000 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 00:35:14.326 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:35:14.349 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:35:14.370 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:35:14.563 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:35:14.453 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:35:14.563 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:35:14.426 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:35:27.991 00:00:11.800 TCP 12.102.0.1:34348 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:36:29.833 00:00:11.797 TCP 12.102.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:37:31.668 00:00:12.139 TCP 12.102.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:38:33.848 00:00:11.802 TCP 12.102.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:39:35.687 00:00:11.797 TCP 12.102.0.1:35290 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:40:13.889 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:40:13.912 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:40:13.875 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:40:13.974 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:40:13.965 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:40:13.777 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:40:14.043 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:40:37.518 00:00:11.803 TCP 12.102.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:37:03.997 00:05:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-10 00:41:39.357 00:00:11.831 TCP 12.102.0.1:44234 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:37:04.002 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 00:42:41.229 00:00:11.760 TCP 12.102.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:43:43.039 00:00:11.799 TCP 12.102.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:44:44.876 00:00:11.804 TCP 12.102.0.1:39190 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:45:14.119 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:45:14.141 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:45:14.274 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:45:14.037 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:45:14.280 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:45:14.050 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:45:14.153 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:45:46.719 00:00:11.810 TCP 12.102.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:46:48.565 00:00:11.760 TCP 12.102.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:43:04.037 00:06:00.111 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 00:47:50.364 00:00:11.823 TCP 12.102.0.1:40616 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:44:04.037 00:06:00.106 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 00:48:52.225 00:00:11.793 TCP 12.102.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:49:54.077 00:00:11.798 TCP 12.102.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:50:14.134 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:50:14.156 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:50:14.296 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:50:14.360 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:50:14.189 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:50:14.367 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:50:14.244 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:50:55.916 00:00:11.834 TCP 12.102.0.1:42610 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:51:57.787 00:00:11.800 TCP 12.102.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:52:59.623 00:00:11.800 TCP 12.102.0.1:35472 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:54:01.465 00:00:11.826 TCP 12.102.0.1:48122 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:50:04.037 00:06:00.109 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 00:55:03.316 00:00:11.803 TCP 12.102.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:55:14.569 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 00:55:14.696 00:00:00.031 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 00:55:14.804 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 00:55:14.680 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 00:55:14.455 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 00:55:14.723 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 00:55:14.545 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 00:51:04.039 00:06:00.106 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 00:56:05.154 00:00:11.808 TCP 12.102.0.1:42770 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:57:07.005 00:00:11.801 TCP 12.102.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:58:08.840 00:00:11.764 TCP 12.102.0.1:51954 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 123334, total packets: 1130, avg bps: 259, avg pps: 0, avg bpp: 109 Time window: 2025-11-09 23:55:03 - 2025-11-10 00:58:20 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0050s User: 0.0010s Wall: 0.0014s flows/second: 115492.2 Runtime: 0.0014s