Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 01:58:53.320 00:00:11.863 TCP 12.102.0.1:45494 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:59:55.220 00:00:11.811 TCP 12.102.0.1:40596 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:00:57.081 00:00:11.808 TCP 12.102.0.1:32900 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:01:58.929 00:00:11.827 TCP 12.102.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:02:40.063 00:00:00.039 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:02:40.109 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:02:40.101 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:02:40.055 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:02:39.784 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:02:39.957 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:02:40.040 00:00:00.039 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:59:06.832 00:05:00.224 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:59:06.834 00:05:00.219 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:03:00.786 00:00:11.765 TCP 12.102.0.1:43896 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:04:02.587 00:00:11.769 TCP 12.102.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:05:04.393 00:00:11.800 TCP 12.102.0.1:40106 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:06:06.234 00:00:11.809 TCP 12.102.0.1:48518 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:07:08.087 00:00:11.797 TCP 12.102.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:07:40.266 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:07:40.178 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:07:40.099 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:07:40.103 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:07:40.320 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:07:40.201 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:07:40.242 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:08:09.919 00:00:11.823 TCP 12.102.0.1:36618 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:05:06.835 00:05:00.230 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:05:06.834 00:05:00.235 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:09:11.779 00:00:11.797 TCP 12.102.0.1:55690 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:10:13.614 00:00:13.618 TCP 12.102.0.1:58406 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:11:17.277 00:00:12.242 TCP 12.102.0.1:56096 -> 1.101.0.1:3000 15 1926 1 2025-11-15 02:12:19.558 00:00:11.767 TCP 12.102.0.1:40662 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:12:40.041 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:12:40.000 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:12:40.527 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:12:40.006 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:12:40.167 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:12:40.026 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:12:40.021 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:13:21.366 00:00:11.789 TCP 12.102.0.1:46460 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:14:23.195 00:00:11.806 TCP 12.102.0.1:44798 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:11:06.837 00:05:00.230 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:11:06.833 00:05:00.235 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:15:25.071 00:00:11.801 TCP 12.102.0.1:33180 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:16:26.905 00:00:11.829 TCP 12.102.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:17:40.341 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:17:40.362 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:17:40.408 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:17:40.486 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:17:40.447 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:17:40.490 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:17:40.133 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:17:28.770 00:00:11.780 TCP 12.102.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:18:30.594 00:00:11.819 TCP 12.102.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:19:32.452 00:00:11.804 TCP 12.102.0.1:60242 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:20:34.298 00:00:12.192 TCP 12.102.0.1:57824 -> 1.101.0.1:3000 15 1926 1 2025-11-15 02:17:06.835 00:05:00.235 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:17:06.838 00:05:00.230 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:21:36.527 00:00:11.817 TCP 12.102.0.1:39800 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:22:40.296 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:22:40.614 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:22:40.409 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:22:40.394 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:22:40.403 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:22:40.426 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:22:40.274 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:22:38.397 00:00:11.798 TCP 12.102.0.1:51404 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:23:40.235 00:00:11.814 TCP 12.102.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:24:42.086 00:00:11.817 TCP 12.102.0.1:44436 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:25:43.940 00:00:11.893 TCP 12.102.0.1:57062 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:26:45.872 00:00:11.805 TCP 12.102.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:23:06.838 00:05:00.234 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:23:06.840 00:05:00.229 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:27:40.556 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:27:40.586 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:27:40.631 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:27:40.555 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:27:40.520 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:27:40.385 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:27:40.534 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:27:47.713 00:00:11.807 TCP 12.102.0.1:47952 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:28:49.552 00:00:11.798 TCP 12.102.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:29:51.390 00:00:11.803 TCP 12.102.0.1:46622 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:30:53.232 00:00:11.799 TCP 12.102.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:31:55.080 00:00:11.876 TCP 12.102.0.1:41510 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:32:40.594 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:32:40.616 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:32:40.603 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:32:40.529 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:32:40.374 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:32:40.592 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:32:40.561 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:29:06.838 00:05:00.236 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:32:57.040 00:00:11.799 TCP 12.102.0.1:49222 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:29:06.841 00:05:00.230 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:33:58.879 00:00:11.758 TCP 12.102.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:35:00.675 00:00:12.520 TCP 12.102.0.1:49534 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:36:03.235 00:00:12.188 TCP 12.102.0.1:46848 -> 1.101.0.1:3000 15 1926 1 2025-11-15 02:37:05.462 00:00:11.807 TCP 12.102.0.1:54402 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:37:40.757 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:37:40.782 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:37:40.823 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:37:40.917 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:37:40.698 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:37:40.670 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:37:40.735 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:38:07.305 00:00:11.818 TCP 12.102.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:35:06.841 00:05:00.240 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:35:06.843 00:05:00.235 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:39:09.158 00:00:11.775 TCP 12.102.0.1:58002 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:40:10.971 00:00:11.815 TCP 12.102.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:41:12.830 00:00:11.824 TCP 12.102.0.1:51958 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:42:14.706 00:00:11.806 TCP 12.102.0.1:40162 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:42:40.765 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:42:40.787 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:42:40.973 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:42:40.619 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:42:40.725 00:00:00.014 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:42:41.027 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:42:40.790 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:43:16.554 00:00:11.828 TCP 12.102.0.1:48424 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:44:18.423 00:00:11.803 TCP 12.102.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:41:06.844 00:05:00.239 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:41:06.847 00:05:00.234 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:45:20.268 00:00:11.801 TCP 12.102.0.1:56440 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:46:22.113 00:00:11.799 TCP 12.102.0.1:46714 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:47:23.954 00:00:11.865 TCP 12.102.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:47:40.796 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:47:40.702 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:47:41.011 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:47:40.915 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:47:41.000 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:47:40.698 00:00:00.019 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:47:40.774 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:48:25.859 00:00:11.814 TCP 12.102.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:49:27.710 00:00:11.802 TCP 12.102.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:50:29.552 00:00:11.800 TCP 12.102.0.1:46298 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:47:06.849 00:05:00.234 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:47:06.846 00:05:00.239 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:51:31.388 00:00:11.823 TCP 12.102.0.1:55332 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:52:41.176 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:52:41.197 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:52:41.418 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:52:41.231 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:52:41.317 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:52:41.419 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:52:41.053 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:52:33.245 00:00:11.803 TCP 12.102.0.1:34340 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:53:35.086 00:00:11.802 TCP 12.102.0.1:38166 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:54:36.921 00:00:11.816 TCP 12.102.0.1:60014 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:55:38.776 00:00:11.801 TCP 12.102.0.1:51482 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:56:40.616 00:00:11.758 TCP 12.102.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:53:06.851 00:05:00.232 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 02:53:06.850 00:05:00.237 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 02:57:40.866 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 02:57:40.782 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:57:41.311 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 02:57:41.051 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 02:57:40.969 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 02:57:41.077 00:00:00.051 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 02:57:40.843 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 02:57:42.418 00:00:11.799 TCP 12.102.0.1:34270 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124591, total packets: 1142, avg bps: 280, avg pps: 0, avg bpp: 109 Time window: 2025-11-15 01:58:53 - 2025-11-15 02:58:07 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0015s User: 0.0038s Wall: 0.0024s flows/second: 68793.9 Runtime: 0.0024s