Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 09:59:32.040 00:00:11.799 TCP 12.102.0.1:35884 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:00:33.883 00:00:13.217 TCP 12.102.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:56:05.254 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:01:23.387 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.492 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.580 00:00:00.049 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.411 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.503 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.295 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.365 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:01:37.141 00:00:11.796 TCP 12.102.0.1:60382 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:02:38.977 00:00:13.637 TCP 12.102.0.1:33376 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:03:42.649 00:00:11.807 TCP 12.102.0.1:43466 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:59:05.257 00:06:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-12 10:04:44.496 00:00:11.804 TCP 12.102.0.1:57734 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:05:46.337 00:00:11.807 TCP 12.102.0.1:38560 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:06:22.920 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:06:22.943 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:06:23.158 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:06:23.070 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:06:22.963 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:06:22.951 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:06:23.028 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:06:48.184 00:00:11.798 TCP 12.102.0.1:33828 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:07:50.027 00:00:11.799 TCP 12.102.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:03:05.255 00:06:00.106 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:08:51.864 00:00:12.240 TCP 12.102.0.1:47670 -> 1.101.0.1:3000 15 1926 1 2025-11-12 10:09:54.135 00:00:13.111 TCP 12.102.0.1:46418 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:06:05.259 00:06:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-12 10:10:57.284 00:00:11.797 TCP 12.102.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:11:23.045 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.042 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.282 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.057 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.282 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.175 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.024 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:11:59.119 00:00:11.768 TCP 12.102.0.1:47504 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:13:00.927 00:00:11.784 TCP 12.102.0.1:33726 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:14:02.744 00:00:11.763 TCP 12.102.0.1:39378 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:10:05.258 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:15:04.547 00:00:11.799 TCP 12.102.0.1:53876 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:16:06.385 00:00:11.811 TCP 12.102.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:16:23.381 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.491 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.501 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.484 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.498 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.377 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.358 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:17:08.243 00:00:11.776 TCP 12.102.0.1:38188 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:13:05.261 00:06:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-12 10:18:10.078 00:00:11.799 TCP 12.102.0.1:52092 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:19:11.914 00:00:11.833 TCP 12.102.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:20:13.786 00:00:11.803 TCP 12.102.0.1:41510 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:21:23.485 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:21:23.507 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:21:23.460 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:21:23.511 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:21:23.339 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:21:23.397 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:21:23.388 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:21:15.637 00:00:11.775 TCP 12.102.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:17:05.258 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:22:17.452 00:00:11.814 TCP 12.102.0.1:40064 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:23:19.303 00:00:11.777 TCP 12.102.0.1:35566 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:24:21.119 00:00:11.875 TCP 12.102.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:20:05.260 00:06:00.106 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-12 10:25:23.037 00:00:11.802 TCP 12.102.0.1:50332 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:26:23.748 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:26:23.770 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:26:23.535 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:26:23.605 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:26:23.568 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:26:23.949 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:26:23.683 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:26:24.877 00:00:11.799 TCP 12.102.0.1:51410 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:27:26.712 00:00:11.808 TCP 12.102.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:28:28.559 00:00:11.796 TCP 12.102.0.1:49518 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:24:05.259 00:06:00.112 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:29:30.396 00:00:11.804 TCP 12.102.0.1:33852 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:30:32.237 00:00:11.801 TCP 12.102.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:31:23.734 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.763 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.736 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.713 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.582 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.753 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.710 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:31:34.082 00:00:11.809 TCP 12.102.0.1:36886 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:27:05.262 00:06:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-12 10:32:35.930 00:00:11.813 TCP 12.102.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:33:37.796 00:00:11.797 TCP 12.102.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:34:39.629 00:00:11.798 TCP 12.102.0.1:35864 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:35:41.460 00:00:11.802 TCP 12.102.0.1:41410 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:31:05.262 00:06:00.110 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:36:23.709 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:36:23.733 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:36:23.706 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:36:23.705 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:36:23.497 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:36:23.797 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:36:23.871 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:36:43.310 00:00:11.757 TCP 12.102.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:37:45.109 00:00:11.809 TCP 12.102.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:38:46.961 00:00:11.799 TCP 12.102.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:34:05.268 00:06:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-12 10:39:48.803 00:00:11.800 TCP 12.102.0.1:57156 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:40:50.640 00:00:11.797 TCP 12.102.0.1:42672 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:41:23.853 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:41:23.856 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:41:23.861 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:41:23.821 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:41:23.873 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:41:23.789 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:41:23.831 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:41:52.472 00:00:11.801 TCP 12.102.0.1:34632 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:38:05.266 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:42:54.310 00:00:11.802 TCP 12.102.0.1:36068 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:43:56.161 00:00:11.799 TCP 12.102.0.1:58832 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:44:58.022 00:00:11.824 TCP 12.102.0.1:47534 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:41:05.269 00:06:00.115 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-12 10:45:59.898 00:00:11.803 TCP 12.102.0.1:50740 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:46:23.916 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:46:23.940 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:46:23.710 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:46:24.078 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:46:24.038 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:46:24.004 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:46:23.880 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:47:01.752 00:00:11.806 TCP 12.102.0.1:50482 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:48:03.595 00:00:11.801 TCP 12.102.0.1:57540 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:49:05.437 00:00:11.827 TCP 12.102.0.1:55756 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:45:05.267 00:06:00.112 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:50:07.293 00:00:11.808 TCP 12.102.0.1:39354 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:51:23.830 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:51:09.144 00:00:11.806 TCP 12.102.0.1:51134 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:51:23.853 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:51:23.946 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:51:24.228 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:51:23.943 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:51:23.881 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:51:23.914 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:52:10.987 00:00:11.827 TCP 12.102.0.1:49146 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:48:05.273 00:06:00.103 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-12 10:53:12.856 00:00:11.804 TCP 12.102.0.1:59260 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:54:14.706 00:00:12.248 TCP 12.102.0.1:41662 -> 1.101.0.1:3000 15 1926 1 2025-11-12 10:55:16.995 00:00:11.816 TCP 12.102.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:56:23.931 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-12 10:56:23.954 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-12 10:56:24.312 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:56:24.092 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-12 10:56:24.088 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-12 10:56:24.076 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-12 10:56:23.955 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-12 10:56:18.850 00:00:11.766 TCP 12.102.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:52:05.273 00:06:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-12 10:57:20.650 00:00:11.761 TCP 12.102.0.1:33552 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:58:22.452 00:00:11.758 TCP 12.102.0.1:56408 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 264, avg pps: 0, avg bpp: 109 Time window: 2025-11-12 09:56:05 - 2025-11-12 10:58:34 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0039s User: 0.0010s Wall: 0.0019s flows/second: 84976.3 Runtime: 0.0019s