Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 05:59:37.100 00:00:11.867 TCP 12.102.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:55:07.388 00:06:00.375 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 05:55:07.391 00:06:00.369 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:00:39.011 00:00:11.803 TCP 12.102.0.1:36142 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:01:40.849 00:00:11.767 TCP 12.102.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:02:42.655 00:00:11.822 TCP 12.102.0.1:39344 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:03:14.224 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:03:14.246 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:03:13.950 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:03:14.450 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:03:14.103 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:03:13.988 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:03:14.407 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:03:44.517 00:00:11.802 TCP 12.102.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:04:46.360 00:00:11.812 TCP 12.102.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:05:48.204 00:00:11.850 TCP 12.102.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:06:50.092 00:00:12.203 TCP 12.102.0.1:33434 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:02:07.395 00:06:00.369 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:02:07.390 00:06:00.374 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 06:07:52.341 00:00:11.800 TCP 12.102.0.1:35760 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:08:13.672 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.961 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.800 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.709 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.543 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.751 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.649 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:08:54.179 00:00:11.767 TCP 12.102.0.1:59800 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:09:55.986 00:00:11.809 TCP 12.102.0.1:51872 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:10:57.831 00:00:11.807 TCP 12.102.0.1:43858 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:11:59.673 00:00:11.806 TCP 12.102.0.1:47016 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:13:13.633 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:13:14.022 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:13:14.057 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:13:13.944 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:13:14.113 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:13:01.518 00:00:11.826 TCP 12.102.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:13:13.915 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:13:13.611 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:09:07.391 00:06:00.375 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 06:09:07.393 00:06:00.370 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:14:03.385 00:00:11.820 TCP 12.102.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:15:05.243 00:00:12.261 TCP 12.102.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:16:07.545 00:00:11.799 TCP 12.102.0.1:52004 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:17:09.382 00:00:11.803 TCP 12.102.0.1:45302 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:18:13.958 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:18:13.939 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:18:13.926 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:18:13.977 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:18:13.991 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:18:13.859 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:18:13.937 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:18:11.219 00:00:11.818 TCP 12.102.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:19:13.080 00:00:11.810 TCP 12.102.0.1:40328 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:20:14.931 00:00:11.829 TCP 12.102.0.1:33870 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:16:07.393 00:06:00.378 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 06:16:07.396 00:06:00.372 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:21:16.795 00:00:12.235 TCP 12.102.0.1:55948 -> 1.101.0.1:3000 15 1926 1 2025-11-16 06:22:19.077 00:00:11.794 TCP 12.102.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:23:14.267 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.345 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.276 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.031 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:23:13.953 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.154 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.244 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:23:20.909 00:00:11.842 TCP 12.102.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:24:22.790 00:00:11.853 TCP 12.102.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:25:24.684 00:00:11.797 TCP 12.102.0.1:49214 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:26:26.518 00:00:11.806 TCP 12.102.0.1:52184 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:27:28.362 00:00:11.837 TCP 12.102.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:23:07.398 00:06:00.370 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:23:07.395 00:06:00.376 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 06:28:14.419 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:28:14.443 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.182 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.356 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.409 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.500 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.138 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:28:30.232 00:00:11.795 TCP 12.102.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:29:32.077 00:00:11.757 TCP 12.102.0.1:55632 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:30:33.874 00:00:11.765 TCP 12.102.0.1:60072 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:31:35.678 00:00:11.813 TCP 12.102.0.1:33808 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:32:37.531 00:00:11.858 TCP 12.102.0.1:59798 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:33:14.304 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:33:14.327 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.396 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.184 00:00:00.043 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.368 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.410 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.378 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:33:39.429 00:00:11.802 TCP 12.102.0.1:53070 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:34:41.268 00:00:11.767 TCP 12.102.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:30:07.398 00:06:00.376 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 06:30:07.400 00:06:00.371 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:35:43.078 00:00:11.820 TCP 12.102.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:36:44.934 00:00:11.768 TCP 12.102.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:37:46.745 00:00:11.767 TCP 12.102.0.1:48192 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:38:14.485 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.253 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.444 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.472 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.576 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.314 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.464 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:38:48.547 00:00:11.801 TCP 12.102.0.1:51192 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:39:50.387 00:00:20.358 TCP 12.102.0.1:48922 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:41:00.782 00:00:11.766 TCP 12.102.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:37:07.400 00:06:00.374 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 06:37:07.402 00:06:00.370 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:42:02.592 00:00:11.817 TCP 12.102.0.1:36862 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:43:14.657 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:43:04.449 00:00:11.872 TCP 12.102.0.1:50838 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:43:14.680 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.748 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.766 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.580 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.737 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.451 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:44:06.360 00:00:11.822 TCP 12.102.0.1:34096 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:45:08.224 00:00:11.767 TCP 12.102.0.1:44288 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:46:10.037 00:00:11.861 TCP 12.102.0.1:49610 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:47:11.941 00:00:12.255 TCP 12.102.0.1:49578 -> 1.101.0.1:3000 15 1926 1 2025-11-16 06:48:15.033 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.047 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.146 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.105 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.217 00:00:00.040 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:48:14.848 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.012 00:00:00.019 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:48:14.236 00:00:11.801 TCP 12.102.0.1:52910 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:44:07.404 00:06:00.372 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:44:07.401 00:06:00.377 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 06:49:16.085 00:00:11.813 TCP 12.102.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:50:17.936 00:00:11.815 TCP 12.102.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:51:19.785 00:00:11.773 TCP 12.102.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:52:21.593 00:00:11.802 TCP 12.102.0.1:50222 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:53:14.673 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:53:14.697 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.816 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.747 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.528 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.629 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.695 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:53:23.435 00:00:11.832 TCP 12.102.0.1:55332 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:54:25.314 00:00:11.762 TCP 12.102.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:55:27.116 00:00:11.768 TCP 12.102.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:51:07.414 00:06:00.363 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 06:51:07.412 00:06:00.369 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 06:56:28.926 00:00:11.819 TCP 12.102.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:57:30.789 00:00:11.802 TCP 12.102.0.1:33830 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:58:14.732 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.857 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.861 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.981 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.850 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.813 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.709 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 06:58:32.627 00:00:11.767 TCP 12.102.0.1:38508 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 261, avg pps: 0, avg bpp: 108 Time window: 2025-11-16 05:55:07 - 2025-11-16 06:58:44 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0044s User: 0.0017s Wall: 0.0030s flows/second: 53618.5 Runtime: 0.0030s