Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 19:58:59.849 00:00:11.800 TCP 12.102.0.1:40840 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:00:01.690 00:00:11.836 TCP 12.102.0.1:43514 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:01:03.564 00:00:11.795 TCP 12.102.0.1:33732 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:02:05.396 00:00:11.804 TCP 12.102.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:03:01.640 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:03:01.752 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:03:01.756 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:03:01.488 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:03:01.678 00:00:00.010 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:03:01.704 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:03:01.620 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:03:07.238 00:00:11.814 TCP 12.102.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:04:09.090 00:00:11.797 TCP 12.102.0.1:53998 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:00:07.192 00:06:00.324 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 20:00:07.195 00:06:00.319 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 20:05:10.929 00:00:11.817 TCP 12.102.0.1:43168 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:06:12.789 00:00:11.802 TCP 12.102.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:07:14.627 00:00:11.863 TCP 12.102.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:08:02.265 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:08:02.165 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:08:02.243 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:08:01.993 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:08:02.311 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:08:02.180 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:08:02.243 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:08:16.529 00:00:11.761 TCP 12.102.0.1:36632 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:09:18.324 00:00:11.809 TCP 12.102.0.1:53542 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:10:20.172 00:00:11.757 TCP 12.102.0.1:54140 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:11:21.966 00:00:11.771 TCP 12.102.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:07:07.197 00:06:00.318 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 20:07:07.194 00:06:00.323 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 20:12:23.774 00:00:11.801 TCP 12.102.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:13:01.821 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:13:01.798 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:13:02.246 00:00:00.015 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:13:02.124 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:13:02.033 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:13:01.985 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:13:02.328 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:13:25.616 00:00:11.797 TCP 12.102.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:14:27.460 00:00:11.798 TCP 12.102.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:15:29.298 00:00:11.813 TCP 12.102.0.1:46686 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:16:31.151 00:00:11.816 TCP 12.102.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:17:33.004 00:00:11.812 TCP 12.102.0.1:36720 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:18:01.877 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:18:02.025 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:18:02.162 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:18:02.070 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:18:02.153 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:18:02.136 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:18:02.003 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:18:34.853 00:00:11.776 TCP 12.102.0.1:59174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:14:07.195 00:06:00.323 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 20:14:07.198 00:06:00.318 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 20:19:36.668 00:00:11.816 TCP 12.102.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:20:38.523 00:00:11.856 TCP 12.102.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:21:40.429 00:00:11.811 TCP 12.102.0.1:60998 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:22:42.276 00:00:11.818 TCP 12.102.0.1:57286 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:23:01.929 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:23:02.218 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:23:02.241 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:23:02.102 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:23:02.282 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:23:02.303 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:23:02.345 00:00:00.029 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:23:44.131 00:00:11.851 TCP 12.102.0.1:49314 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:24:46.031 00:00:11.798 TCP 12.102.0.1:47444 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:25:47.869 00:00:12.114 TCP 12.102.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:21:07.197 00:06:00.330 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 20:21:07.201 00:06:00.325 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 20:26:50.029 00:00:12.237 TCP 12.102.0.1:59590 -> 1.101.0.1:3000 15 1926 1 2025-11-15 20:27:52.311 00:00:11.802 TCP 12.102.0.1:40356 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:28:02.232 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:28:02.425 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:28:02.301 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:28:02.212 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:28:02.297 00:00:00.031 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:28:02.285 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:28:02.211 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:28:54.153 00:00:11.767 TCP 12.102.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:29:55.959 00:00:11.774 TCP 12.102.0.1:34044 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:30:57.768 00:00:11.800 TCP 12.102.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:31:59.603 00:00:11.801 TCP 12.102.0.1:57482 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:33:02.431 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:33:02.501 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:33:02.305 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:33:02.295 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:33:02.377 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:33:02.408 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:33:02.408 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:28:07.199 00:06:00.329 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 20:28:07.201 00:06:00.325 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 20:33:01.444 00:00:11.760 TCP 12.102.0.1:47960 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:34:03.240 00:00:11.799 TCP 12.102.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:35:05.082 00:00:11.762 TCP 12.102.0.1:46508 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:36:06.878 00:00:11.808 TCP 12.102.0.1:48772 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:37:08.723 00:00:11.801 TCP 12.102.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:38:02.465 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:38:02.298 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:38:02.321 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:38:02.374 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:38:02.507 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:38:02.385 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:38:02.441 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:38:10.556 00:00:11.809 TCP 12.102.0.1:38356 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:39:12.395 00:00:11.801 TCP 12.102.0.1:35042 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:35:07.201 00:06:00.331 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 20:35:07.203 00:06:00.326 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 20:40:14.232 00:00:11.812 TCP 12.102.0.1:53510 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:41:16.082 00:00:11.808 TCP 12.102.0.1:33302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:42:17.940 00:00:12.395 TCP 12.102.0.1:48410 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:43:02.796 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:43:02.819 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:43:02.928 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:43:02.993 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:43:02.761 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:43:03.047 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:43:02.743 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:43:20.375 00:00:11.766 TCP 12.102.0.1:48558 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:44:22.180 00:00:11.816 TCP 12.102.0.1:39774 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:45:24.064 00:00:11.763 TCP 12.102.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:46:25.868 00:00:11.801 TCP 12.102.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:42:07.205 00:06:00.325 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 20:42:07.202 00:06:00.331 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 20:47:27.708 00:00:11.797 TCP 12.102.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:48:02.850 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:48:02.872 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:48:02.965 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:48:02.830 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:48:02.914 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:48:02.893 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:48:02.708 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:48:29.541 00:00:11.755 TCP 12.102.0.1:37854 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:49:31.334 00:00:11.803 TCP 12.102.0.1:46754 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:50:33.171 00:00:11.782 TCP 12.102.0.1:42082 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:51:34.994 00:00:12.237 TCP 12.102.0.1:59282 -> 1.101.0.1:3000 15 1926 1 2025-11-15 20:52:37.271 00:00:11.833 TCP 12.102.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:53:02.737 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:53:02.786 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:53:02.633 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:53:02.512 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:53:02.919 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:53:02.596 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 20:53:02.715 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:53:39.136 00:00:11.828 TCP 12.102.0.1:37774 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:49:07.205 00:06:00.330 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 20:49:07.207 00:06:00.325 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 20:54:40.998 00:00:12.185 TCP 12.102.0.1:41318 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:55:43.226 00:00:11.801 TCP 12.102.0.1:59460 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:56:45.083 00:00:11.795 TCP 12.102.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:58:02.869 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 20:57:46.921 00:00:11.812 TCP 12.102.0.1:43008 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:58:02.892 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 20:58:03.037 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 20:58:02.849 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 20:58:02.741 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 20:58:02.979 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 20:58:02.905 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 278, avg pps: 0, avg bpp: 109 Time window: 2025-11-15 19:58:59 - 2025-11-15 20:58:03 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0158s User: 0.0000s Wall: 0.0134s flows/second: 11755.0 Runtime: 0.0135s