Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 10:58:51.785 00:00:11.802 TCP 12.102.0.1:44294 -> 1.101.0.1:3000 11 1507 1 2025-11-15 10:54:07.049 00:06:00.239 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 10:54:07.047 00:06:00.244 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 10:59:53.628 00:00:11.808 TCP 12.102.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:00:55.472 00:00:11.808 TCP 12.102.0.1:34250 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:01:57.315 00:00:11.798 TCP 12.102.0.1:52592 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:02:50.566 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:02:50.588 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:02:50.666 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:02:50.728 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:02:51.059 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:02:50.950 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:02:50.503 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:02:59.150 00:00:11.818 TCP 12.102.0.1:42926 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:04:01.000 00:00:11.798 TCP 12.102.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:05:02.835 00:00:11.801 TCP 12.102.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:01:07.046 00:06:00.244 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 11:01:07.050 00:06:00.240 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 11:06:04.671 00:00:11.806 TCP 12.102.0.1:39702 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:07:06.515 00:00:11.813 TCP 12.102.0.1:37554 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:07:50.968 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:07:50.937 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:07:51.088 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:07:50.922 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:07:51.050 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:07:50.825 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:07:50.945 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:08:08.369 00:00:11.815 TCP 12.102.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:09:10.220 00:00:12.334 TCP 12.102.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:10:12.594 00:00:11.811 TCP 12.102.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:11:14.443 00:00:12.455 TCP 12.102.0.1:43074 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:12:16.939 00:00:11.813 TCP 12.102.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:12:51.021 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:12:51.043 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:12:50.950 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:12:51.050 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:12:51.038 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:12:50.984 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:12:51.024 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:08:07.050 00:06:00.242 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 11:08:07.048 00:06:00.247 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 11:13:18.790 00:00:11.805 TCP 12.102.0.1:36856 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:14:20.637 00:00:11.810 TCP 12.102.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:15:22.481 00:00:11.813 TCP 12.102.0.1:59058 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:16:24.332 00:00:11.801 TCP 12.102.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:17:26.169 00:00:11.812 TCP 12.102.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:17:51.259 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:17:51.352 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:17:51.142 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:17:51.111 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:17:51.327 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:17:51.214 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:17:51.236 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:18:28.022 00:00:12.036 TCP 12.102.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:19:30.112 00:00:11.805 TCP 12.102.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:15:07.053 00:06:00.250 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 11:15:07.055 00:06:00.245 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 11:20:31.960 00:00:11.806 TCP 12.102.0.1:39272 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:21:33.811 00:00:11.818 TCP 12.102.0.1:38312 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:22:35.674 00:00:11.814 TCP 12.102.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:22:51.259 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:22:51.205 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:22:51.122 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:22:50.819 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:22:51.201 00:00:00.047 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:22:51.067 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:22:51.239 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:23:37.533 00:00:11.827 TCP 12.102.0.1:51646 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:24:39.410 00:00:11.813 TCP 12.102.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:25:41.255 00:00:11.811 TCP 12.102.0.1:50950 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:26:43.104 00:00:11.807 TCP 12.102.0.1:55256 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:22:07.055 00:06:00.248 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 11:22:07.053 00:06:00.253 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 11:27:51.375 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:27:51.078 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:27:51.242 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:27:51.413 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:27:51.455 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:27:51.339 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:27:51.351 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:27:44.951 00:00:11.804 TCP 12.102.0.1:37954 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:28:46.795 00:00:11.814 TCP 12.102.0.1:60668 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:29:48.650 00:00:11.817 TCP 12.102.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:30:50.503 00:00:11.806 TCP 12.102.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:31:52.351 00:00:11.802 TCP 12.102.0.1:49174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:32:51.652 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:32:51.483 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:32:51.626 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:32:51.590 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:32:51.930 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:32:51.573 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:32:51.630 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:32:54.186 00:00:11.801 TCP 12.102.0.1:46928 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:33:56.040 00:00:11.755 TCP 12.102.0.1:53068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:29:07.058 00:06:00.252 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 11:29:07.060 00:06:00.248 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 11:34:57.839 00:00:11.812 TCP 12.102.0.1:37632 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:35:59.686 00:00:11.796 TCP 12.102.0.1:37404 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:37:01.521 00:00:11.810 TCP 12.102.0.1:49058 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:37:51.445 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:37:51.309 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:37:51.586 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:37:51.452 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:37:51.689 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:37:51.586 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:37:51.422 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:38:03.375 00:00:11.814 TCP 12.102.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:39:05.222 00:00:11.801 TCP 12.102.0.1:45228 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:40:07.077 00:00:11.801 TCP 12.102.0.1:38162 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:36:07.059 00:06:00.252 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 11:36:07.061 00:06:00.247 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 11:41:08.915 00:00:11.823 TCP 12.102.0.1:56196 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:42:10.776 00:00:11.856 TCP 12.102.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:42:51.597 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:42:51.717 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:42:51.832 00:00:00.010 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:42:51.625 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:42:51.720 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:42:51.595 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:42:51.575 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:43:12.670 00:00:11.764 TCP 12.102.0.1:52234 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:44:14.473 00:00:11.811 TCP 12.102.0.1:48984 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:45:16.319 00:00:11.808 TCP 12.102.0.1:37272 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:46:18.172 00:00:11.814 TCP 12.102.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:47:20.031 00:00:11.815 TCP 12.102.0.1:54166 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:47:51.717 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:47:51.841 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:47:51.813 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:47:51.719 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:47:51.695 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:47:52.002 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:47:51.985 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:43:07.063 00:06:00.247 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 11:43:07.059 00:06:00.253 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 11:48:21.877 00:00:11.769 TCP 12.102.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:49:23.718 00:00:11.809 TCP 12.102.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:50:25.567 00:00:11.762 TCP 12.102.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:51:27.368 00:00:11.833 TCP 12.102.0.1:51488 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:52:29.237 00:00:11.800 TCP 12.102.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:52:51.812 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:52:51.938 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:52:51.866 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:52:51.831 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:52:51.717 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:52:51.790 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 11:52:52.001 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:53:31.078 00:00:11.800 TCP 12.102.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:54:32.920 00:00:11.820 TCP 12.102.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:50:07.061 00:06:00.252 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 11:50:07.063 00:06:00.247 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 11:55:34.776 00:00:11.802 TCP 12.102.0.1:54286 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:56:36.615 00:00:12.171 TCP 12.102.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:57:38.824 00:00:11.801 TCP 12.102.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:57:51.815 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 11:57:51.910 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 11:57:52.308 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 11:57:52.405 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 11:57:52.159 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 11:57:52.396 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 11:57:52.286 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 259, avg pps: 0, avg bpp: 108 Time window: 2025-11-15 10:54:07 - 2025-11-15 11:57:52 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0039s User: 0.0013s Wall: 0.0025s flows/second: 64965.0 Runtime: 0.0025s