Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 08:59:07.515 00:00:11.799 TCP 12.102.0.1:45670 -> 1.101.0.1:3000 11 1507 1 2025-11-13 08:55:05.890 00:06:00.011 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:00:09.353 00:00:11.793 TCP 12.102.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:01:11.193 00:00:11.795 TCP 12.102.0.1:46714 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:01:50.807 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.772 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.725 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.861 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.720 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.607 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.786 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:02:13.033 00:00:11.802 TCP 12.102.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-11-13 08:58:05.897 00:06:00.001 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-11-13 09:03:14.881 00:00:11.808 TCP 12.102.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:04:16.729 00:00:11.813 TCP 12.102.0.1:54162 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:05:18.583 00:00:11.801 TCP 12.102.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:06:20.424 00:00:11.760 TCP 12.102.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:06:50.526 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:06:50.549 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:06:50.812 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:06:50.837 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:06:50.993 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:06:51.165 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:06:50.819 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:02:05.887 00:06:00.014 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:07:22.221 00:00:11.805 TCP 12.102.0.1:34862 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:08:24.085 00:00:11.766 TCP 12.102.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:09:25.891 00:00:11.805 TCP 12.102.0.1:58908 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:05:05.898 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-11-13 09:10:27.732 00:00:11.770 TCP 12.102.0.1:45646 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:11:29.540 00:00:11.805 TCP 12.102.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:11:50.762 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:11:50.986 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:11:51.084 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:11:51.119 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:11:51.082 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:11:51.026 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:11:50.738 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:12:31.383 00:00:11.807 TCP 12.102.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:13:33.225 00:00:11.803 TCP 12.102.0.1:43564 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:09:05.891 00:06:00.013 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:14:35.075 00:00:11.795 TCP 12.102.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:15:36.912 00:00:11.805 TCP 12.102.0.1:40414 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:16:38.757 00:00:11.807 TCP 12.102.0.1:43454 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:16:51.059 00:00:00.036 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:16:51.160 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:16:51.002 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:16:50.972 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:16:51.072 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:16:51.028 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:16:51.036 00:00:00.035 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:12:05.900 00:06:00.001 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-11-13 09:17:40.597 00:00:11.820 TCP 12.102.0.1:43256 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:18:42.443 00:00:11.807 TCP 12.102.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:19:44.286 00:00:11.798 TCP 12.102.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:20:46.122 00:00:11.801 TCP 12.102.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:16:05.894 00:06:00.013 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:21:50.842 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:21:50.865 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:21:51.069 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:21:51.021 00:00:00.013 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:21:50.951 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:21:51.277 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:21:51.159 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:21:47.964 00:00:12.420 TCP 12.102.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:22:50.429 00:00:11.824 TCP 12.102.0.1:43074 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:23:52.281 00:00:11.771 TCP 12.102.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:19:05.901 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-11-13 09:24:54.105 00:00:11.804 TCP 12.102.0.1:48788 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:25:55.955 00:00:11.806 TCP 12.102.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:26:51.195 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:26:51.217 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:26:51.182 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:26:51.300 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:26:51.262 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:26:51.177 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:26:50.955 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:26:57.809 00:00:11.804 TCP 12.102.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:23:05.897 00:06:00.013 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:27:59.654 00:00:11.769 TCP 12.102.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:29:01.450 00:00:11.815 TCP 12.102.0.1:39216 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:30:03.298 00:00:11.827 TCP 12.102.0.1:37654 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:26:05.904 00:06:00.005 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-11-13 09:31:05.166 00:00:11.799 TCP 12.102.0.1:59428 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:31:51.279 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.284 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.347 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.300 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.336 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.379 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.255 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:32:07.007 00:00:11.802 TCP 12.102.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:33:08.844 00:00:11.809 TCP 12.102.0.1:34668 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:34:10.691 00:00:11.806 TCP 12.102.0.1:39688 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:30:05.900 00:06:00.012 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:35:12.540 00:00:11.808 TCP 12.102.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:36:14.387 00:00:11.829 TCP 12.102.0.1:54852 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:36:51.450 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:36:51.474 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:36:51.447 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:36:51.557 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:36:51.349 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:36:51.430 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:36:51.476 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:37:16.235 00:00:11.805 TCP 12.102.0.1:44424 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:33:05.907 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-11-13 09:38:18.083 00:00:11.808 TCP 12.102.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:39:19.947 00:00:11.820 TCP 12.102.0.1:40240 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:40:21.820 00:00:11.790 TCP 12.102.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:41:23.647 00:00:11.833 TCP 12.102.0.1:35968 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:41:51.343 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.286 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.765 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.762 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.441 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.565 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.319 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:37:05.901 00:06:00.011 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:42:25.514 00:00:11.850 TCP 12.102.0.1:40734 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:43:27.407 00:00:11.799 TCP 12.102.0.1:39142 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:44:29.247 00:00:11.763 TCP 12.102.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:40:05.910 00:06:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 11 705 1 2025-11-13 09:45:31.078 00:00:11.799 TCP 12.102.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:46:32.911 00:00:11.822 TCP 12.102.0.1:48004 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:46:51.468 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.569 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.732 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.578 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.808 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.728 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.445 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:47:34.771 00:00:11.759 TCP 12.102.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:48:36.566 00:00:11.808 TCP 12.102.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:44:05.910 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:49:38.412 00:00:11.800 TCP 12.102.0.1:60726 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:50:40.253 00:00:11.851 TCP 12.102.0.1:35766 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:51:51.701 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:51:51.722 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.911 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.673 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.743 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.655 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.646 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:51:42.142 00:00:11.803 TCP 12.102.0.1:37744 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:47:05.912 00:06:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 09:52:43.981 00:00:11.797 TCP 12.102.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:53:45.819 00:00:11.798 TCP 12.102.0.1:43600 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:54:47.656 00:00:11.810 TCP 12.102.0.1:60530 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:55:49.503 00:00:11.805 TCP 12.102.0.1:42044 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:51:05.911 00:06:00.009 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 09:56:51.766 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 09:56:51.789 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.897 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.972 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.715 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.977 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 09:56:52.036 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.344 00:00:11.976 TCP 12.102.0.1:40260 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:57:53.360 00:00:11.835 TCP 12.102.0.1:34290 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 120871, total packets: 1083, avg bps: 255, avg pps: 0, avg bpp: 111 Time window: 2025-11-13 08:55:05 - 2025-11-13 09:58:05 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0034s User: 0.0026s Wall: 0.0023s flows/second: 68681.2 Runtime: 0.0023s