Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 11:59:21.285 00:00:11.821 TCP 12.102.0.1:51096 -> 1.101.0.1:3000 11 1507 1 2025-11-10 11:55:04.248 00:06:00.113 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:00:27.698 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:00:27.674 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:00:27.787 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:00:27.573 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:00:27.791 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:00:27.562 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:00:27.721 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:00:23.138 00:00:11.818 TCP 12.102.0.1:56350 -> 1.101.0.1:3000 11 1507 1 2025-11-10 11:56:04.249 00:06:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:01:24.989 00:00:11.770 TCP 12.102.0.1:49016 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:02:26.797 00:00:11.825 TCP 12.102.0.1:54674 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:03:28.663 00:00:11.841 TCP 12.102.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:04:30.545 00:00:11.807 TCP 12.102.0.1:47612 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:05:27.543 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:05:27.747 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:05:27.774 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:05:27.804 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:05:27.840 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:05:27.729 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:05:27.520 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:05:32.394 00:00:11.778 TCP 12.102.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:06:34.231 00:00:11.807 TCP 12.102.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:02:04.249 00:06:00.111 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:07:36.085 00:00:11.805 TCP 12.102.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:03:04.250 00:06:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:08:37.935 00:00:11.768 TCP 12.102.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:09:39.761 00:00:11.771 TCP 12.102.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:10:27.778 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:10:27.801 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:10:27.898 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:10:27.935 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:10:27.903 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:10:27.923 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:10:27.699 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:10:41.589 00:00:11.835 TCP 12.102.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:11:43.440 00:00:11.760 TCP 12.102.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:12:45.241 00:00:11.802 TCP 12.102.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:13:47.082 00:00:11.811 TCP 12.102.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:09:04.250 00:06:00.111 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:14:48.930 00:00:11.819 TCP 12.102.0.1:49706 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:10:04.252 00:06:00.106 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:15:27.873 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:15:27.757 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:15:27.917 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:15:27.875 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:15:27.870 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:15:27.946 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:15:27.851 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:15:50.783 00:00:11.773 TCP 12.102.0.1:53030 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:16:52.586 00:00:11.762 TCP 12.102.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:17:54.386 00:00:11.782 TCP 12.102.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:18:56.206 00:00:11.800 TCP 12.102.0.1:41150 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:19:58.068 00:00:11.798 TCP 12.102.0.1:54004 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:20:28.220 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:20:28.244 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:20:28.456 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:20:28.382 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:20:28.417 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:20:28.438 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:20:28.314 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:16:04.254 00:06:00.109 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:20:59.908 00:00:11.829 TCP 12.102.0.1:45470 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:17:04.257 00:06:00.103 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:22:01.779 00:00:11.804 TCP 12.102.0.1:48220 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:23:03.626 00:00:11.801 TCP 12.102.0.1:33400 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:24:05.469 00:00:11.806 TCP 12.102.0.1:59726 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:25:07.310 00:00:11.798 TCP 12.102.0.1:52982 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:25:28.342 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:25:28.485 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:25:28.475 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:25:28.051 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:25:28.199 00:00:00.044 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:25:28.248 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:25:28.320 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:26:09.148 00:00:11.768 TCP 12.102.0.1:46238 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:27:10.951 00:00:11.855 TCP 12.102.0.1:57618 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:23:04.268 00:06:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:28:12.846 00:00:12.199 TCP 12.102.0.1:33066 -> 1.101.0.1:3000 15 1926 1 2025-11-10 12:24:04.271 00:06:00.093 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:29:15.083 00:00:11.819 TCP 12.102.0.1:49792 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:30:28.142 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:30:16.930 00:00:11.812 TCP 12.102.0.1:44486 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:30:28.165 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:30:28.164 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:30:28.375 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:30:28.200 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:30:28.379 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:30:28.177 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:31:18.776 00:00:11.798 TCP 12.102.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:32:20.611 00:00:11.803 TCP 12.102.0.1:52934 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:33:22.455 00:00:12.327 TCP 12.102.0.1:38916 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:34:24.818 00:00:11.802 TCP 12.102.0.1:44234 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:30:04.274 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:35:28.484 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:35:28.394 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:35:28.463 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:35:28.368 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:35:28.285 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:35:28.453 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:35:28.462 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:35:26.662 00:00:11.809 TCP 12.102.0.1:48216 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:31:04.276 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:36:28.507 00:00:11.805 TCP 12.102.0.1:54352 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:37:30.349 00:00:11.761 TCP 12.102.0.1:35578 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:38:32.145 00:00:12.609 TCP 12.102.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:39:34.788 00:00:11.803 TCP 12.102.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:40:28.414 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:40:28.437 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:40:28.582 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:40:28.571 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:40:28.588 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:40:28.375 00:00:00.018 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:40:28.515 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:40:36.630 00:00:11.823 TCP 12.102.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:41:38.473 00:00:11.802 TCP 12.102.0.1:48126 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:37:04.274 00:06:00.095 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:42:40.313 00:00:11.808 TCP 12.102.0.1:47430 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:38:04.277 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:43:42.158 00:00:11.804 TCP 12.102.0.1:43318 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:44:44.002 00:00:11.799 TCP 12.102.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:45:28.625 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:45:28.335 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:45:28.649 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:45:28.564 00:00:00.015 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:45:28.490 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:45:28.447 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:45:28.693 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:45:45.832 00:00:11.799 TCP 12.102.0.1:59548 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:46:47.669 00:00:11.817 TCP 12.102.0.1:38284 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:47:49.529 00:00:11.768 TCP 12.102.0.1:34310 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:44:04.274 00:06:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:48:51.335 00:00:11.799 TCP 12.102.0.1:57016 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:45:04.277 00:06:00.092 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:49:53.210 00:00:11.804 TCP 12.102.0.1:39558 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:50:28.595 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:50:28.619 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:50:28.631 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:50:28.803 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:50:28.425 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:50:28.738 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:50:28.625 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:50:55.072 00:00:11.763 TCP 12.102.0.1:46852 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:51:56.873 00:00:11.802 TCP 12.102.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:52:58.711 00:00:11.801 TCP 12.102.0.1:58176 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:54:00.550 00:00:11.805 TCP 12.102.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:55:02.391 00:00:11.801 TCP 12.102.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:55:28.692 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 12:55:28.715 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 12:55:28.634 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 12:55:28.789 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 12:55:28.675 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 12:55:28.752 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 12:55:28.776 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 12:51:04.276 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 12:56:04.226 00:00:11.803 TCP 12.102.0.1:38966 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:52:04.280 00:06:00.092 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 12:57:06.084 00:00:11.801 TCP 12.102.0.1:52852 -> 1.101.0.1:3000 11 1507 1 2025-11-10 12:58:07.928 00:00:11.826 TCP 12.102.0.1:57234 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124491, total packets: 1146, avg bps: 262, avg pps: 0, avg bpp: 108 Time window: 2025-11-10 11:55:04 - 2025-11-10 12:58:19 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0050s User: 0.0008s Wall: 0.0027s flows/second: 58955.3 Runtime: 0.0027s