Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 00:59:10.650 00:00:11.826 TCP 12.102.0.1:52422 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:00:14.542 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:00:14.563 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.627 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.548 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.317 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.555 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.497 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:00:12.520 00:00:11.803 TCP 12.102.0.1:58752 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:01:14.363 00:00:11.817 TCP 12.102.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:57:04.039 00:06:00.108 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:02:16.215 00:00:11.763 TCP 12.102.0.1:34434 -> 1.101.0.1:3000 11 1507 1 2025-11-10 00:58:04.041 00:06:00.104 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 01:03:18.023 00:00:11.813 TCP 12.102.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:04:19.876 00:00:11.810 TCP 12.102.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:05:14.634 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.574 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.405 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.498 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.501 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.283 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.611 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:05:21.724 00:00:11.807 TCP 12.102.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:06:23.594 00:00:11.813 TCP 12.102.0.1:43164 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:07:25.446 00:00:11.805 TCP 12.102.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:08:27.290 00:00:11.808 TCP 12.102.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:04:04.041 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:09:29.128 00:00:11.754 TCP 12.102.0.1:46962 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:05:04.047 00:06:00.100 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 01:10:14.568 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:10:14.590 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.680 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.641 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.820 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.536 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.510 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:10:30.924 00:00:11.812 TCP 12.102.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:11:32.772 00:00:11.802 TCP 12.102.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:12:34.608 00:00:11.801 TCP 12.102.0.1:34818 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:13:36.448 00:00:11.803 TCP 12.102.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:14:38.289 00:00:11.805 TCP 12.102.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:15:14.694 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.824 00:00:00.031 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.865 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.777 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.652 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.508 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.672 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:15:40.132 00:00:11.761 TCP 12.102.0.1:46750 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:11:04.048 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:16:41.931 00:00:11.819 TCP 12.102.0.1:49150 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:12:04.050 00:06:00.099 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 01:17:43.794 00:00:11.814 TCP 12.102.0.1:51194 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:18:45.655 00:00:11.815 TCP 12.102.0.1:40064 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:19:47.513 00:00:11.822 TCP 12.102.0.1:47794 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:20:14.867 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:20:14.890 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:20:15.018 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:20:15.100 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:20:14.979 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:20:14.937 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:20:14.881 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:20:49.370 00:00:11.808 TCP 12.102.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:21:51.214 00:00:11.796 TCP 12.102.0.1:58538 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:18:04.049 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:22:53.069 00:00:11.796 TCP 12.102.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:19:04.051 00:06:00.098 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 01:23:54.913 00:00:11.827 TCP 12.102.0.1:56758 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:24:56.776 00:00:11.825 TCP 12.102.0.1:60736 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:25:14.712 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:25:14.895 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:25:14.923 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:25:14.708 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:25:15.009 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:25:14.949 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:25:14.689 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:25:58.645 00:00:11.799 TCP 12.102.0.1:34620 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:27:00.484 00:00:11.804 TCP 12.102.0.1:39452 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:28:02.356 00:00:11.821 TCP 12.102.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:29:04.210 00:00:11.810 TCP 12.102.0.1:60708 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:25:04.051 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:30:15.014 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:30:15.036 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:30:15.174 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:30:15.178 00:00:00.041 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:30:14.964 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:30:15.342 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:30:15.032 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:30:06.080 00:00:11.805 TCP 12.102.0.1:35736 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:26:04.052 00:06:00.100 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 01:31:07.921 00:00:11.815 TCP 12.102.0.1:32822 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:32:09.772 00:00:11.806 TCP 12.102.0.1:43402 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:33:11.616 00:00:11.800 TCP 12.102.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:34:13.459 00:00:11.796 TCP 12.102.0.1:33724 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:35:15.207 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:35:15.231 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.328 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.018 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.340 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.145 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:35:14.997 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.294 00:00:11.800 TCP 12.102.0.1:56688 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:36:17.128 00:00:11.799 TCP 12.102.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:32:04.053 00:06:00.102 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:37:18.968 00:00:11.758 TCP 12.102.0.1:34690 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:33:04.055 00:06:00.098 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 01:38:20.765 00:00:11.808 TCP 12.102.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:39:22.617 00:00:11.763 TCP 12.102.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:40:15.119 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.306 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.122 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.317 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.207 00:00:00.042 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.079 00:00:00.036 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.095 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:40:24.423 00:00:11.808 TCP 12.102.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:41:26.278 00:00:11.762 TCP 12.102.0.1:55118 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:42:28.083 00:00:11.808 TCP 12.102.0.1:52530 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:43:29.932 00:00:11.813 TCP 12.102.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:39:04.054 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:44:31.787 00:00:11.792 TCP 12.102.0.1:49838 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:40:04.058 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 01:45:15.596 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.601 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.439 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.419 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.727 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.502 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.574 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:45:33.619 00:00:11.807 TCP 12.102.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:46:35.469 00:00:11.800 TCP 12.102.0.1:50768 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:47:37.307 00:00:11.797 TCP 12.102.0.1:45392 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:48:39.143 00:00:11.822 TCP 12.102.0.1:35260 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:49:41.002 00:00:11.803 TCP 12.102.0.1:47162 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:50:15.703 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:50:15.727 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.674 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.669 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.733 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.814 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.695 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:50:42.841 00:00:11.798 TCP 12.102.0.1:51080 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:46:04.055 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:51:44.678 00:00:11.807 TCP 12.102.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:47:04.059 00:06:00.098 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 01:52:46.523 00:00:12.195 TCP 12.102.0.1:55954 -> 1.101.0.1:3000 15 1926 1 2025-11-10 01:53:48.753 00:00:11.797 TCP 12.102.0.1:42948 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:54:50.586 00:00:11.802 TCP 12.102.0.1:51724 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:55:15.532 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 01:55:15.555 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.618 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.612 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.567 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.530 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.400 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 01:55:52.429 00:00:11.760 TCP 12.102.0.1:57722 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:56:54.229 00:00:11.768 TCP 12.102.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:53:04.057 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 01:57:56.033 00:00:11.812 TCP 12.102.0.1:34382 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-11-10 00:57:04 - 2025-11-10 01:59:04 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0009s User: 0.0044s Wall: 0.0023s flows/second: 69956.4 Runtime: 0.0023s