Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 18:59:27.745 00:00:11.806 TCP 12.102.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-11-10 18:55:04.413 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:00:35.864 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:00:35.887 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:00:35.852 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:00:35.760 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:00:36.062 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:00:36.039 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:00:35.887 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:00:29.592 00:00:11.805 TCP 12.102.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2025-11-10 18:56:04.416 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:01:31.434 00:00:11.862 TCP 12.102.0.1:41136 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:02:33.335 00:00:11.808 TCP 12.102.0.1:53380 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:03:35.181 00:00:11.803 TCP 12.102.0.1:49828 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:04:37.026 00:00:11.800 TCP 12.102.0.1:45286 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:05:36.323 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:05:36.331 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:05:36.371 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:05:36.331 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:05:36.062 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:05:36.459 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:05:36.300 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:05:38.864 00:00:11.769 TCP 12.102.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:06:40.670 00:00:11.760 TCP 12.102.0.1:33734 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:02:04.414 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:07:42.467 00:00:12.055 TCP 12.102.0.1:51058 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:03:04.417 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:08:44.559 00:00:11.760 TCP 12.102.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:09:46.359 00:00:11.817 TCP 12.102.0.1:45196 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:10:36.310 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:10:36.332 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:10:36.187 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:10:36.180 00:00:00.044 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:10:36.290 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:10:36.430 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:10:36.261 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:10:48.219 00:00:11.802 TCP 12.102.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:11:50.079 00:00:11.862 TCP 12.102.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:12:51.981 00:00:11.801 TCP 12.102.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:09:04.415 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:13:53.820 00:00:11.802 TCP 12.102.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:10:04.418 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:14:55.661 00:00:11.823 TCP 12.102.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:15:36.301 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:15:36.323 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:15:36.413 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:15:36.530 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:15:36.102 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:15:36.428 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:15:36.425 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:15:57.518 00:00:11.805 TCP 12.102.0.1:34710 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:16:59.360 00:00:11.796 TCP 12.102.0.1:37172 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:18:01.194 00:00:11.766 TCP 12.102.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:19:02.992 00:00:11.772 TCP 12.102.0.1:53966 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:20:04.807 00:00:11.805 TCP 12.102.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:20:36.519 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:20:36.693 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:20:36.639 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:20:36.477 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:20:36.693 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:20:36.173 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:20:36.495 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:16:04.416 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:21:06.648 00:00:11.814 TCP 12.102.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:17:04.419 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:22:08.502 00:00:11.804 TCP 12.102.0.1:59754 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:23:10.345 00:00:11.805 TCP 12.102.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:24:12.186 00:00:11.768 TCP 12.102.0.1:37630 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:25:13.994 00:00:11.803 TCP 12.102.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:25:36.577 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:25:36.599 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:25:36.527 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:25:36.625 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:25:36.506 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:25:36.727 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:25:36.569 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:26:15.830 00:00:11.795 TCP 12.102.0.1:38392 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:27:17.674 00:00:11.769 TCP 12.102.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:23:04.418 00:06:00.096 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:28:19.487 00:00:11.961 TCP 12.102.0.1:41200 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:24:04.421 00:06:00.091 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:29:21.486 00:00:11.807 TCP 12.102.0.1:45776 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:30:36.465 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:30:23.333 00:00:11.765 TCP 12.102.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:30:36.488 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:30:36.692 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:30:36.424 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:30:36.295 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:30:36.750 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:30:36.567 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:31:25.136 00:00:13.277 TCP 12.102.0.1:44824 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:32:28.451 00:00:11.764 TCP 12.102.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:33:30.253 00:00:11.801 TCP 12.102.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:34:32.091 00:00:11.796 TCP 12.102.0.1:37258 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:30:04.418 00:06:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:35:36.608 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:35:36.633 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:35:36.654 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:35:36.668 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:35:36.846 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:35:36.852 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:35:36.810 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:35:33.924 00:00:11.824 TCP 12.102.0.1:50138 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:31:04.422 00:06:00.092 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:36:35.784 00:00:11.774 TCP 12.102.0.1:33844 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:37:37.595 00:00:11.760 TCP 12.102.0.1:48372 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:38:39.392 00:00:11.801 TCP 12.102.0.1:55862 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:39:41.231 00:00:11.799 TCP 12.102.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:40:36.808 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:40:36.831 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:40:36.851 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:40:36.875 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:40:36.923 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:40:36.875 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:40:36.734 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:40:43.074 00:00:12.136 TCP 12.102.0.1:50862 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:41:45.250 00:00:11.803 TCP 12.102.0.1:34130 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:37:04.423 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:42:47.090 00:00:11.827 TCP 12.102.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:38:04.427 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:43:48.955 00:00:11.804 TCP 12.102.0.1:60568 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:44:50.797 00:00:11.805 TCP 12.102.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:45:36.962 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:45:36.874 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:45:36.813 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:45:36.830 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:45:36.807 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:45:36.938 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:45:37.206 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:45:52.638 00:00:11.803 TCP 12.102.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:46:54.475 00:00:11.800 TCP 12.102.0.1:49756 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:47:56.315 00:00:12.239 TCP 12.102.0.1:42348 -> 1.101.0.1:3000 15 1926 1 2025-11-10 19:44:04.425 00:06:00.095 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:48:58.602 00:00:11.770 TCP 12.102.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:45:04.428 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:50:00.404 00:00:11.802 TCP 12.102.0.1:38716 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:50:36.894 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:50:36.841 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:50:36.913 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:50:36.994 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:50:37.017 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:50:36.993 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:50:37.169 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:51:02.244 00:00:11.831 TCP 12.102.0.1:38212 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:52:04.114 00:00:11.803 TCP 12.102.0.1:60338 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:53:05.953 00:00:12.193 TCP 12.102.0.1:45328 -> 1.101.0.1:3000 15 1926 1 2025-11-10 19:54:08.186 00:00:11.825 TCP 12.102.0.1:58102 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:55:10.076 00:00:12.156 TCP 12.102.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:55:36.815 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-10 19:55:36.837 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-10 19:55:37.051 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:55:37.479 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-10 19:55:37.452 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-10 19:55:37.068 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-10 19:55:37.297 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-10 19:51:04.427 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-10 19:56:12.273 00:00:11.802 TCP 12.102.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:52:04.430 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-10 19:57:14.115 00:00:11.804 TCP 12.102.0.1:40628 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:58:15.953 00:00:11.773 TCP 12.102.0.1:50232 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 262, avg pps: 0, avg bpp: 108 Time window: 2025-11-10 18:55:04 - 2025-11-10 19:58:27 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 74243.7 Runtime: 0.0022s