Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 09:59:08.021 00:00:11.806 TCP 12.102.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:00:09.866 00:00:11.792 TCP 12.102.0.1:35480 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:01:11.699 00:00:11.804 TCP 12.102.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:02:13.551 00:00:12.048 TCP 12.102.0.1:52160 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:03:18.603 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:03:18.570 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:03:18.593 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:03:18.683 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:03:18.737 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:03:18.543 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:03:18.579 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:03:15.635 00:00:11.802 TCP 12.102.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:04:17.477 00:00:11.800 TCP 12.102.0.1:49188 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:00:07.457 00:06:00.431 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 10:00:07.454 00:06:00.436 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 10:05:19.318 00:00:11.803 TCP 12.102.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:06:21.161 00:00:11.821 TCP 12.102.0.1:44692 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:07:23.037 00:00:11.802 TCP 12.102.0.1:60424 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:08:18.645 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:08:18.668 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:08:18.562 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:08:18.634 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:08:18.689 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:08:18.644 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:08:18.531 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:08:24.874 00:00:11.815 TCP 12.102.0.1:60996 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:09:26.735 00:00:11.797 TCP 12.102.0.1:56806 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:10:28.575 00:00:11.809 TCP 12.102.0.1:46174 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:11:30.422 00:00:11.773 TCP 12.102.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:07:07.457 00:06:00.437 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 10:07:07.460 00:06:00.432 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 10:12:32.221 00:00:11.872 TCP 12.102.0.1:51592 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:13:18.663 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:13:18.766 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:13:18.724 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:13:18.857 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:13:18.797 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:13:18.737 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:13:18.640 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:13:34.133 00:00:11.819 TCP 12.102.0.1:46088 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:14:35.992 00:00:11.801 TCP 12.102.0.1:38488 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:15:37.832 00:00:11.762 TCP 12.102.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:16:39.629 00:00:11.759 TCP 12.102.0.1:44958 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:17:41.429 00:00:11.795 TCP 12.102.0.1:56578 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:18:18.706 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:18:18.849 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:18:18.848 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:18:18.742 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:18:18.842 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:18:18.707 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:18:18.682 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:18:43.263 00:00:11.798 TCP 12.102.0.1:36200 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:14:07.461 00:06:00.436 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 10:14:07.458 00:06:00.441 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 10:19:45.117 00:00:11.800 TCP 12.102.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:20:46.955 00:00:11.762 TCP 12.102.0.1:37956 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:21:48.754 00:00:11.801 TCP 12.102.0.1:58916 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:22:50.594 00:00:11.803 TCP 12.102.0.1:36798 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:23:18.907 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:23:18.847 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:23:18.966 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:23:18.951 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:23:18.964 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:23:18.837 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:23:18.885 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:23:52.437 00:00:11.755 TCP 12.102.0.1:43284 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:24:54.230 00:00:11.802 TCP 12.102.0.1:57582 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:21:07.462 00:06:00.460 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 10:25:56.082 00:00:11.839 TCP 12.102.0.1:38546 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:21:07.461 00:06:00.465 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 10:26:57.929 00:00:11.810 TCP 12.102.0.1:49044 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:27:59.776 00:00:11.798 TCP 12.102.0.1:52280 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:28:19.082 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:28:19.104 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:28:19.155 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:28:19.111 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:28:19.090 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:28:19.441 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:28:19.275 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:29:01.614 00:00:11.800 TCP 12.102.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:30:03.454 00:00:11.774 TCP 12.102.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:31:05.266 00:00:12.081 TCP 12.102.0.1:46170 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:32:07.389 00:00:11.809 TCP 12.102.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:28:07.461 00:06:00.465 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 10:28:07.463 00:06:00.460 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 10:33:19.468 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:33:19.818 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:33:19.758 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:33:19.591 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:33:19.686 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:33:09.236 00:00:11.805 TCP 12.102.0.1:36732 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:33:19.726 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:33:19.445 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:34:11.084 00:00:11.801 TCP 12.102.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:35:12.925 00:00:11.822 TCP 12.102.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:36:14.787 00:00:11.801 TCP 12.102.0.1:58544 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:37:16.628 00:00:11.855 TCP 12.102.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:38:19.281 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:38:19.100 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:38:19.362 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:38:19.263 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:38:19.317 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:38:19.303 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:38:19.304 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:38:18.522 00:00:11.800 TCP 12.102.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:39:20.363 00:00:11.835 TCP 12.102.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:35:07.464 00:06:00.460 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 10:35:07.462 00:06:00.465 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 10:40:22.235 00:00:11.806 TCP 12.102.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:41:24.084 00:00:11.799 TCP 12.102.0.1:40506 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:42:25.918 00:00:11.769 TCP 12.102.0.1:38388 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:43:19.279 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:43:19.301 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:43:19.418 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:43:19.236 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:43:19.324 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:43:19.079 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:43:19.292 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:43:27.728 00:00:11.803 TCP 12.102.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:44:29.571 00:00:11.814 TCP 12.102.0.1:47202 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:45:31.419 00:00:11.800 TCP 12.102.0.1:37822 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:46:33.266 00:00:11.805 TCP 12.102.0.1:45108 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:42:07.464 00:06:00.464 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 10:42:07.466 00:06:00.459 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 10:47:35.103 00:00:11.805 TCP 12.102.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:48:19.516 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:48:19.680 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:48:19.314 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:48:19.431 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:48:19.487 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:48:19.289 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:48:19.268 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:48:36.950 00:00:11.869 TCP 12.102.0.1:38034 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:49:38.852 00:00:11.806 TCP 12.102.0.1:46512 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:50:40.695 00:00:11.774 TCP 12.102.0.1:55058 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:51:42.506 00:00:11.803 TCP 12.102.0.1:34710 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:52:44.353 00:00:11.808 TCP 12.102.0.1:58480 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:53:19.500 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:53:19.431 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:53:19.320 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:53:19.427 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:53:19.442 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:53:19.504 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 10:53:19.478 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:53:46.200 00:00:11.811 TCP 12.102.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:49:07.465 00:06:00.467 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-16 10:49:07.469 00:06:00.461 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-16 10:54:48.074 00:00:11.762 TCP 12.102.0.1:35214 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:55:49.874 00:00:11.762 TCP 12.102.0.1:57530 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:56:51.675 00:00:12.245 TCP 12.102.0.1:39942 -> 1.101.0.1:3000 15 1926 1 2025-11-16 10:57:53.959 00:00:11.804 TCP 12.102.0.1:37318 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:58:19.496 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 10:58:19.519 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 10:58:19.543 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:58:19.723 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 10:58:19.700 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 10:58:19.652 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 10:58:19.613 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 158, total bytes: 122769, total packets: 1118, avg bps: 276, avg pps: 0, avg bpp: 109 Time window: 2025-11-16 09:59:08 - 2025-11-16 10:58:19 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0026s User: 0.0026s Wall: 0.0023s flows/second: 68630.9 Runtime: 0.0023s