Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 14:59:28.225 00:00:11.760 TCP 12.102.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:56:07.539 00:05:00.503 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:00:30.036 00:00:11.761 TCP 12.102.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:01:31.837 00:00:11.808 TCP 12.102.0.1:55688 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:58:07.542 00:05:00.501 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:02:33.679 00:00:11.803 TCP 12.102.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:03:24.580 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:03:24.705 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:03:24.418 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:03:24.614 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:03:24.401 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:03:24.629 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:03:24.557 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:03:35.521 00:00:11.812 TCP 12.102.0.1:48728 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:04:37.375 00:00:11.815 TCP 12.102.0.1:37540 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:05:39.226 00:00:11.802 TCP 12.102.0.1:59864 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:02:07.542 00:05:00.505 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:06:41.080 00:00:12.384 TCP 12.102.0.1:41342 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:07:43.499 00:00:11.810 TCP 12.102.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:04:07.546 00:05:00.502 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:08:24.580 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:08:24.570 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:08:24.508 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:08:24.487 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:08:24.430 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:08:24.501 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:08:24.556 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:08:45.355 00:00:11.805 TCP 12.102.0.1:47714 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:09:47.203 00:00:11.804 TCP 12.102.0.1:41740 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:10:49.059 00:00:11.802 TCP 12.102.0.1:60034 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:11:50.901 00:00:11.804 TCP 12.102.0.1:35438 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:08:07.543 00:05:00.507 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:12:52.745 00:00:11.799 TCP 12.102.0.1:34184 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:13:24.818 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:13:24.841 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:13:24.960 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:13:24.879 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:13:24.927 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:13:24.863 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:13:24.831 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:13:54.584 00:00:11.813 TCP 12.102.0.1:39434 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:10:07.545 00:05:00.502 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:14:56.436 00:00:12.098 TCP 12.102.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:15:58.564 00:00:11.807 TCP 12.102.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:17:00.408 00:00:12.235 TCP 12.102.0.1:56450 -> 1.101.0.1:3000 15 1926 1 2025-11-16 15:14:07.543 00:05:00.508 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:18:02.685 00:00:11.786 TCP 12.102.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:18:24.680 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:18:24.903 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:18:24.900 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:18:24.876 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:18:24.807 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:18:24.959 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:18:24.659 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:19:04.508 00:00:11.919 TCP 12.102.0.1:55458 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:16:07.547 00:05:00.503 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:20:06.462 00:00:11.800 TCP 12.102.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:21:08.307 00:00:11.765 TCP 12.102.0.1:57964 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:22:10.109 00:00:11.811 TCP 12.102.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:23:11.958 00:00:11.802 TCP 12.102.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:23:25.047 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:23:25.299 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:23:25.060 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:23:25.050 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:23:25.265 00:00:00.013 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:23:25.048 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:23:25.025 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:20:07.545 00:05:00.513 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:24:13.801 00:00:11.798 TCP 12.102.0.1:44318 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:25:15.636 00:00:11.805 TCP 12.102.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:22:07.546 00:05:00.509 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:26:17.478 00:00:12.636 TCP 12.102.0.1:42108 -> 1.101.0.1:3000 17 2241 1 2025-11-16 15:27:20.157 00:00:11.785 TCP 12.102.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:28:24.917 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:28:24.940 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:28:24.894 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:28:25.081 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:28:25.047 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:28:24.917 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:28:25.096 00:00:00.049 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:28:21.980 00:00:11.798 TCP 12.102.0.1:40632 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:29:23.817 00:00:11.804 TCP 12.102.0.1:54740 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:26:07.548 00:05:00.511 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:30:25.659 00:00:11.815 TCP 12.102.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:31:27.516 00:00:11.803 TCP 12.102.0.1:43810 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:28:07.550 00:05:00.506 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:32:29.350 00:00:11.802 TCP 12.102.0.1:56244 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:33:25.293 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:33:25.317 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:33:24.963 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:33:25.331 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:33:25.358 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:33:25.314 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:33:25.191 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:33:31.194 00:00:11.795 TCP 12.102.0.1:49560 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:34:33.035 00:00:11.760 TCP 12.102.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:35:34.832 00:00:11.809 TCP 12.102.0.1:60808 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:32:07.549 00:05:00.511 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:36:36.674 00:00:11.812 TCP 12.102.0.1:46970 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:37:38.525 00:00:11.801 TCP 12.102.0.1:35250 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:34:07.553 00:05:00.506 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:38:25.172 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:38:25.193 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:38:25.093 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:38:25.256 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:38:25.302 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:38:25.113 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:38:24.985 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:38:40.363 00:00:11.782 TCP 12.102.0.1:44738 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:39:42.186 00:00:11.802 TCP 12.102.0.1:38486 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:40:44.033 00:00:11.801 TCP 12.102.0.1:49710 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:41:45.873 00:00:11.803 TCP 12.102.0.1:36174 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:38:07.550 00:05:00.513 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:42:47.717 00:00:11.805 TCP 12.102.0.1:34348 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:43:25.880 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:43:25.936 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:43:25.941 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:43:25.851 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:43:25.936 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:43:25.822 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:43:25.857 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:43:49.559 00:00:11.805 TCP 12.102.0.1:58442 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:40:07.552 00:05:00.507 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:44:51.415 00:00:11.870 TCP 12.102.0.1:47192 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:45:53.324 00:00:11.805 TCP 12.102.0.1:40844 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:46:55.164 00:00:11.799 TCP 12.102.0.1:49580 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:47:56.998 00:00:11.810 TCP 12.102.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:44:07.551 00:05:00.515 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:48:25.227 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:48:25.249 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:48:25.314 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:48:25.646 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:48:25.506 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:48:25.542 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:48:25.333 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:48:58.846 00:00:11.869 TCP 12.102.0.1:57872 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:46:07.555 00:05:00.510 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:50:00.761 00:00:11.803 TCP 12.102.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:51:02.604 00:00:11.808 TCP 12.102.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:52:04.453 00:00:11.799 TCP 12.102.0.1:49404 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:53:06.292 00:00:15.806 TCP 12.102.0.1:50640 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:53:25.488 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:53:25.561 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:53:25.398 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:53:25.471 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:53:25.380 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:53:25.438 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:53:25.465 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:50:07.552 00:05:00.514 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 15:54:12.167 00:00:11.807 TCP 12.102.0.1:46778 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:55:14.035 00:00:11.802 TCP 12.102.0.1:45166 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:52:07.555 00:05:00.508 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 15:56:15.878 00:00:11.814 TCP 12.102.0.1:59342 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:57:17.733 00:00:11.806 TCP 12.102.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:58:25.638 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 15:58:25.660 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 15:58:25.648 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:58:25.735 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 15:58:25.702 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 15:58:25.664 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 15:58:25.614 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 15:58:19.579 00:00:11.798 TCP 12.102.0.1:59520 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124487, total packets: 1140, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-11-16 14:56:07 - 2025-11-16 15:58:31 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0038s User: 0.0019s Wall: 0.0029s flows/second: 56071.7 Runtime: 0.0029s