Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 15:59:21.643 00:00:11.813 TCP 12.102.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:55:06.058 00:05:00.063 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-13 16:00:23.475 00:00:11.799 TCP 12.102.0.1:43556 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:01:25.314 00:00:11.796 TCP 12.102.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:01:58.828 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:01:58.851 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.338 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.000 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:01:58.994 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.113 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.029 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:02:27.149 00:00:11.797 TCP 12.102.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:03:28.989 00:00:11.759 TCP 12.102.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:04:30.789 00:00:11.807 TCP 12.102.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:01:06.059 00:04:00.063 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-11-13 16:00:06.062 00:06:00.058 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:05:32.637 00:00:11.798 TCP 12.102.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:06:34.474 00:00:11.805 TCP 12.102.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:06:59.812 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.771 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.716 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.655 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.350 00:00:00.033 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.731 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.789 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:07:36.317 00:00:11.805 TCP 12.102.0.1:56570 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:08:38.160 00:00:11.758 TCP 12.102.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:09:39.954 00:00:11.931 TCP 12.102.0.1:51326 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:06:06.060 00:04:00.062 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-11-13 16:10:41.921 00:00:11.820 TCP 12.102.0.1:58494 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:11:43.782 00:00:11.809 TCP 12.102.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:11:59.348 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.161 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.069 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.254 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.170 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.253 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.326 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:07:06.063 00:06:00.058 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:12:45.632 00:00:12.061 TCP 12.102.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:13:47.729 00:00:11.809 TCP 12.102.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:14:06.067 00:00:00.055 TCP 179.10.12.10:179 -> 179.10.12.12:58070 2 123 1 2025-11-13 16:14:49.573 00:00:12.243 TCP 12.102.0.1:43412 -> 1.101.0.1:3000 15 1926 1 2025-11-13 16:15:51.854 00:00:11.803 TCP 12.102.0.1:48258 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:11:06.061 00:06:00.064 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:16:59.472 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:16:59.494 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.485 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.491 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.389 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.389 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.266 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:16:53.699 00:00:11.801 TCP 12.102.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:17:55.538 00:00:11.765 TCP 12.102.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:15:06.066 00:04:00.055 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-11-13 16:18:57.350 00:00:11.793 TCP 12.102.0.1:39664 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:19:59.181 00:00:11.795 TCP 12.102.0.1:37078 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:21:01.018 00:00:11.798 TCP 12.102.0.1:36378 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:21:59.372 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:21:59.394 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.504 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.534 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.424 00:00:00.028 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.648 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.385 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:22:02.848 00:00:11.800 TCP 12.102.0.1:38670 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:18:06.064 00:06:00.063 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:23:04.692 00:00:11.803 TCP 12.102.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:20:06.069 00:04:00.056 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-11-13 16:24:06.535 00:00:11.801 TCP 12.102.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:25:08.376 00:00:11.828 TCP 12.102.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:26:10.241 00:00:11.807 TCP 12.102.0.1:38194 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:26:59.424 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:26:59.446 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.664 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.713 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.352 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.666 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.438 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:27:12.087 00:00:11.797 TCP 12.102.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:28:13.919 00:00:11.827 TCP 12.102.0.1:57988 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:29:15.780 00:00:11.763 TCP 12.102.0.1:48456 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:25:06.066 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:25:06.068 00:06:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:30:17.580 00:00:11.807 TCP 12.102.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:31:19.423 00:00:11.794 TCP 12.102.0.1:42982 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:31:59.699 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:31:59.723 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.610 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.807 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.852 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.502 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.590 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:32:06.070 00:00:00.059 TCP 179.10.12.12:58070 -> 179.10.12.10:179 2 123 1 2025-11-13 16:32:21.256 00:00:11.802 TCP 12.102.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:33:23.097 00:00:11.762 TCP 12.102.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:34:24.895 00:00:11.799 TCP 12.102.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:35:26.740 00:00:11.805 TCP 12.102.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:36:28.578 00:00:11.801 TCP 12.102.0.1:46274 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:36:59.678 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:36:59.701 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.707 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.739 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.794 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.840 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.772 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:33:06.069 00:04:00.059 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-11-13 16:32:06.072 00:06:00.055 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:37:30.420 00:00:11.800 TCP 12.102.0.1:45210 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:38:32.261 00:00:11.801 TCP 12.102.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:39:34.098 00:00:11.761 TCP 12.102.0.1:44770 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:40:35.896 00:00:11.759 TCP 12.102.0.1:53056 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:41:37.693 00:00:11.828 TCP 12.102.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:42:00.511 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:42:00.533 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.307 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.028 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.250 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.613 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.270 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:38:06.070 00:04:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-11-13 16:42:39.562 00:00:11.797 TCP 12.102.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:43:41.396 00:00:11.813 TCP 12.102.0.1:60560 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:39:06.072 00:06:00.055 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:44:43.254 00:00:11.760 TCP 12.102.0.1:59766 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:45:45.080 00:00:11.798 TCP 12.102.0.1:35290 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:46:06.074 00:00:00.054 TCP 179.10.12.10:179 -> 179.10.12.12:58070 2 123 1 2025-11-13 16:46:46.918 00:00:11.836 TCP 12.102.0.1:47074 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:46:59.967 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:47:00.064 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.982 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:47:00.010 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.998 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.917 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.945 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:47:48.795 00:00:11.780 TCP 12.102.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:43:06.072 00:06:00.059 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:48:50.612 00:00:11.785 TCP 12.102.0.1:42558 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:49:52.430 00:00:11.830 TCP 12.102.0.1:32926 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:50:54.299 00:00:11.800 TCP 12.102.0.1:44340 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:47:06.075 00:04:00.054 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-11-13 16:52:00.121 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.159 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.102 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.063 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.283 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.030 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.100 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:51:56.134 00:00:11.811 TCP 12.102.0.1:36150 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:52:57.980 00:00:11.806 TCP 12.102.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:53:59.824 00:00:11.807 TCP 12.102.0.1:47892 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:50:06.072 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:55:01.660 00:00:11.840 TCP 12.102.0.1:58612 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:52:06.076 00:04:00.054 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-11-13 16:56:03.514 00:00:11.802 TCP 12.102.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:57:00.066 00:00:00.051 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.405 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.081 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.187 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.194 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.064 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.044 00:00:00.051 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:57:05.350 00:00:11.801 TCP 12.102.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:58:07.189 00:00:11.763 TCP 12.102.0.1:36938 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 123630, total packets: 1132, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-11-13 15:55:06 - 2025-11-13 16:58:18 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0032s Wall: 0.0020s flows/second: 80236.3 Runtime: 0.0021s