Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 01:58:45.769 00:00:11.817 TCP 12.102.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:59:06.462 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 01:59:06.525 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:59:06.247 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 01:59:06.403 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 01:59:06.515 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 01:59:06.383 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 01:59:06.440 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 01:59:47.622 00:00:11.778 TCP 12.102.0.1:60654 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:55:08.233 00:06:00.650 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:00:49.434 00:00:11.815 TCP 12.102.0.1:57506 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:01:51.293 00:00:11.832 TCP 12.102.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:02:53.164 00:00:11.806 TCP 12.102.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:58:08.233 00:06:00.653 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-18 02:04:06.715 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:04:06.602 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:04:06.718 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:04:06.730 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:03:55.010 00:00:11.795 TCP 12.102.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:04:06.464 00:00:00.032 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:04:06.768 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:04:06.442 00:00:00.032 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:04:56.849 00:00:11.810 TCP 12.102.0.1:52822 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:05:58.706 00:00:11.805 TCP 12.102.0.1:51308 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:02:08.237 00:06:00.648 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:07:00.559 00:00:12.272 TCP 12.102.0.1:39420 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:08:02.886 00:00:11.803 TCP 12.102.0.1:35834 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:09:06.930 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:09:07.164 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:09:07.186 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:09:07.092 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:09:07.189 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:09:07.079 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:09:07.323 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:09:04.733 00:00:11.802 TCP 12.102.0.1:43338 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:05:08.234 00:06:00.654 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-18 02:10:06.578 00:00:11.807 TCP 12.102.0.1:37240 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:11:08.870 00:00:11.824 TCP 12.102.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:12:10.748 00:00:12.904 TCP 12.102.0.1:51494 -> 1.101.0.1:3000 15 1926 1 2025-11-18 02:13:13.692 00:00:11.882 TCP 12.102.0.1:56644 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:14:07.403 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:14:07.418 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:14:07.251 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:14:07.576 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:14:07.134 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:14:07.370 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:14:07.380 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:09:08.238 00:06:00.648 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:14:15.620 00:00:11.810 TCP 12.102.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:15:17.476 00:00:11.772 TCP 12.102.0.1:40368 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:16:19.290 00:00:11.804 TCP 12.102.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:12:08.236 00:06:00.653 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-18 02:17:21.146 00:00:11.775 TCP 12.102.0.1:44294 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:18:22.967 00:00:11.779 TCP 12.102.0.1:54684 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:19:06.837 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:19:06.898 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:19:06.917 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:19:06.783 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:19:06.789 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:19:06.763 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:19:06.814 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:19:24.789 00:00:11.814 TCP 12.102.0.1:50534 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:20:26.652 00:00:11.772 TCP 12.102.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:16:08.242 00:06:00.646 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:21:28.486 00:00:11.769 TCP 12.102.0.1:36172 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:22:30.301 00:00:11.813 TCP 12.102.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:23:32.152 00:00:11.763 TCP 12.102.0.1:43526 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:24:06.789 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:24:06.897 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:24:06.767 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:19:08.239 00:06:00.652 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-18 02:24:07.004 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:24:07.029 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:24:07.125 00:00:00.048 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:24:07.026 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:24:33.955 00:00:11.801 TCP 12.102.0.1:60254 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:25:35.793 00:00:11.800 TCP 12.102.0.1:42100 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:26:37.635 00:00:11.760 TCP 12.102.0.1:58434 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:27:39.439 00:00:11.802 TCP 12.102.0.1:36270 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:23:08.243 00:06:00.647 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:28:41.282 00:00:11.794 TCP 12.102.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:29:07.123 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:29:07.065 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:29:07.093 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:29:07.091 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:29:07.369 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:29:07.076 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:29:07.101 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:29:43.117 00:00:11.808 TCP 12.102.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:30:44.966 00:00:11.762 TCP 12.102.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:26:08.241 00:06:00.652 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-18 02:31:46.768 00:00:11.805 TCP 12.102.0.1:53098 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:32:48.610 00:00:11.804 TCP 12.102.0.1:53836 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:33:50.458 00:00:12.802 TCP 12.102.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:34:06.931 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:34:06.908 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:34:07.168 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:34:07.293 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:34:07.182 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:34:07.287 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:34:07.033 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:34:53.295 00:00:11.800 TCP 12.102.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:30:08.246 00:06:00.647 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:35:55.129 00:00:11.808 TCP 12.102.0.1:48502 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:36:56.972 00:00:11.803 TCP 12.102.0.1:55348 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:37:58.811 00:00:11.802 TCP 12.102.0.1:34468 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:33:08.243 00:06:00.651 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-18 02:39:07.180 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:39:07.204 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:39:07.197 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:39:07.075 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:39:07.408 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:39:07.197 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:39:07.077 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:39:00.648 00:00:11.791 TCP 12.102.0.1:42692 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:40:02.477 00:00:11.766 TCP 12.102.0.1:46452 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:41:04.282 00:00:11.803 TCP 12.102.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:37:08.246 00:06:00.646 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:42:06.123 00:00:11.805 TCP 12.102.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:43:07.964 00:00:11.810 TCP 12.102.0.1:39550 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:44:07.269 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:44:07.161 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:44:07.180 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:44:07.305 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:44:07.466 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:44:07.305 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:44:07.139 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:44:09.809 00:00:11.797 TCP 12.102.0.1:50548 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:40:08.244 00:06:00.651 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-18 02:45:11.649 00:00:11.811 TCP 12.102.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:46:13.504 00:00:11.803 TCP 12.102.0.1:48596 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:47:15.340 00:00:11.799 TCP 12.102.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:48:17.185 00:00:11.800 TCP 12.102.0.1:58854 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:49:07.436 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:49:07.477 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:49:07.317 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:49:07.386 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:49:07.473 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:49:07.500 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:49:07.413 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:44:08.247 00:06:00.646 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:49:19.029 00:00:11.851 TCP 12.102.0.1:53934 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:50:20.920 00:00:11.822 TCP 12.102.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:51:22.785 00:00:11.798 TCP 12.102.0.1:52874 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:47:08.245 00:06:00.654 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-18 02:52:24.622 00:00:11.803 TCP 12.102.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:53:26.464 00:00:11.798 TCP 12.102.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:54:07.538 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-18 02:54:07.558 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:54:07.752 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-18 02:54:07.834 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-18 02:54:07.759 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-18 02:54:07.637 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-18 02:54:07.515 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-18 02:54:28.300 00:00:11.761 TCP 12.102.0.1:40604 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:55:30.096 00:00:12.069 TCP 12.102.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:51:08.249 00:06:00.649 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-18 02:56:32.207 00:00:11.827 TCP 12.102.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:57:34.085 00:00:11.804 TCP 12.102.0.1:43762 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:58:35.926 00:00:11.777 TCP 12.102.0.1:46498 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 262, avg pps: 0, avg bpp: 109 Time window: 2025-11-18 01:55:08 - 2025-11-18 02:58:47 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0023s User: 0.0023s Wall: 0.0025s flows/second: 63167.2 Runtime: 0.0026s