Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 14:59:18.923 00:00:11.826 TCP 12.102.0.1:47230 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:00:20.784 00:00:11.799 TCP 12.102.0.1:39638 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:01:22.625 00:00:11.808 TCP 12.102.0.1:45826 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:02:24.470 00:00:12.285 TCP 12.102.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:02:55.716 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:02:55.740 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:02:55.881 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:02:55.548 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:02:55.834 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:02:55.699 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:02:55.649 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:03:26.794 00:00:11.829 TCP 12.102.0.1:58200 -> 1.101.0.1:3000 11 1507 1 2025-11-15 14:59:07.110 00:06:00.288 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 14:59:07.111 00:06:00.283 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:04:28.668 00:00:11.805 TCP 12.102.0.1:54594 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:05:30.514 00:00:11.802 TCP 12.102.0.1:51502 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:06:32.373 00:00:11.817 TCP 12.102.0.1:43418 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:07:34.225 00:00:11.797 TCP 12.102.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:07:55.796 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:07:55.974 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:07:55.791 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:07:55.825 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:07:55.919 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:07:55.733 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:07:55.773 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:08:36.083 00:00:11.802 TCP 12.102.0.1:50758 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:09:37.922 00:00:11.823 TCP 12.102.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:10:39.779 00:00:11.799 TCP 12.102.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:06:07.116 00:06:00.282 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:06:07.112 00:06:00.288 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 15:11:41.612 00:00:11.770 TCP 12.102.0.1:57712 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:12:43.432 00:00:11.799 TCP 12.102.0.1:45182 -> 1.101.0.1:3000 12 1559 1 2025-11-15 15:12:55.780 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:12:55.719 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:12:55.917 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:12:55.738 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:12:55.764 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:12:55.800 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:12:55.759 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:13:45.267 00:00:11.805 TCP 12.102.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:14:47.108 00:00:11.768 TCP 12.102.0.1:38744 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:15:48.917 00:00:11.788 TCP 12.102.0.1:35082 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:16:50.736 00:00:11.872 TCP 12.102.0.1:41660 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:17:56.429 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:17:56.449 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:17:56.505 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:17:56.472 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:17:56.559 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:17:56.173 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:17:56.407 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:13:07.119 00:06:00.279 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:17:52.653 00:00:11.868 TCP 12.102.0.1:54456 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:13:07.116 00:06:00.286 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 15:18:54.563 00:00:11.763 TCP 12.102.0.1:47214 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:19:56.369 00:00:11.773 TCP 12.102.0.1:54726 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:20:58.190 00:00:11.801 TCP 12.102.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:22:00.037 00:00:11.817 TCP 12.102.0.1:48094 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:22:55.972 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:22:55.995 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:22:56.308 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:22:56.054 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:22:56.101 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:22:55.904 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:22:55.996 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:23:01.912 00:00:11.810 TCP 12.102.0.1:55716 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:24:03.779 00:00:11.765 TCP 12.102.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:20:07.122 00:06:00.279 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:20:07.119 00:06:00.285 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 15:25:05.589 00:00:12.808 TCP 12.102.0.1:54380 -> 1.101.0.1:3000 13 1611 1 2025-11-15 15:26:08.434 00:00:11.816 TCP 12.102.0.1:33386 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:27:10.280 00:00:11.816 TCP 12.102.0.1:39488 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:27:55.901 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:27:56.157 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:27:56.314 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:27:56.127 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:27:56.035 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:27:55.903 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:27:55.878 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:28:12.134 00:00:11.766 TCP 12.102.0.1:43310 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:29:13.941 00:00:11.803 TCP 12.102.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:30:15.783 00:00:11.765 TCP 12.102.0.1:46144 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:31:17.587 00:00:11.808 TCP 12.102.0.1:45620 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:27:07.121 00:06:00.283 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:27:07.120 00:06:00.288 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 15:32:19.433 00:00:11.772 TCP 12.102.0.1:36746 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:32:56.153 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:32:56.281 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:32:56.489 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:32:56.508 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:32:56.604 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:32:56.420 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:32:56.130 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:33:21.274 00:00:11.799 TCP 12.102.0.1:44982 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:34:23.114 00:00:11.813 TCP 12.102.0.1:60220 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:35:24.972 00:00:11.764 TCP 12.102.0.1:50048 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:36:26.785 00:00:11.832 TCP 12.102.0.1:50980 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:37:28.654 00:00:11.805 TCP 12.102.0.1:54866 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:37:56.377 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:37:56.401 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:37:56.564 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:37:56.538 00:00:00.012 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:37:56.500 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:37:56.538 00:00:00.012 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:37:56.419 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:38:30.502 00:00:11.800 TCP 12.102.0.1:55966 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:34:07.121 00:06:00.288 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 15:34:07.123 00:06:00.283 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:39:32.352 00:00:11.806 TCP 12.102.0.1:49070 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:40:34.199 00:00:11.809 TCP 12.102.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:41:36.076 00:00:11.804 TCP 12.102.0.1:44210 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:42:37.929 00:00:11.829 TCP 12.102.0.1:55376 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:42:56.411 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:42:56.435 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:42:56.380 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:42:56.361 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:42:56.520 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:42:56.490 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:42:56.561 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:43:39.802 00:00:16.299 TCP 12.102.0.1:50584 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:44:46.157 00:00:11.801 TCP 12.102.0.1:43538 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:45:48.005 00:00:11.810 TCP 12.102.0.1:54718 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:41:07.127 00:06:00.281 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:41:07.124 00:06:00.286 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 15:46:49.853 00:00:11.807 TCP 12.102.0.1:56664 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:47:56.894 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:47:56.940 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:47:56.974 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:47:56.871 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:47:57.107 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:47:57.012 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:47:57.107 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:47:51.707 00:00:11.804 TCP 12.102.0.1:44456 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:48:53.550 00:00:11.802 TCP 12.102.0.1:36024 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:49:55.394 00:00:11.806 TCP 12.102.0.1:60052 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:50:57.233 00:00:12.204 TCP 12.102.0.1:54514 -> 1.101.0.1:3000 15 1926 1 2025-11-15 15:51:59.476 00:00:11.806 TCP 12.102.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:52:56.692 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.835 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.521 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.588 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.587 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.560 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.671 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:48:07.127 00:06:00.282 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:48:07.126 00:06:00.287 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 15:53:01.335 00:00:11.815 TCP 12.102.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:54:03.185 00:00:11.809 TCP 12.102.0.1:56162 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:55:05.043 00:00:11.805 TCP 12.102.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:56:06.886 00:00:12.249 TCP 12.102.0.1:39422 -> 1.101.0.1:3000 15 1926 1 2025-11-15 15:57:09.171 00:00:11.799 TCP 12.102.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:57:56.619 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 15:57:56.641 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 15:57:56.806 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:57:56.855 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 15:57:56.740 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 15:57:56.672 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 15:57:56.650 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 15:58:11.017 00:00:11.799 TCP 12.102.0.1:42258 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123344, total packets: 1125, avg bps: 277, avg pps: 0, avg bpp: 109 Time window: 2025-11-15 14:59:07 - 2025-11-15 15:58:22 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0042s User: 0.0010s Wall: 0.0028s flows/second: 57203.3 Runtime: 0.0028s