Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 00:59:34.325 00:00:11.809 TCP 12.102.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:00:03.004 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.198 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.308 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.100 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.282 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.000 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:00:02.981 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:00:36.175 00:00:11.768 TCP 12.102.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:01:37.983 00:00:11.802 TCP 12.102.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:02:39.826 00:00:11.833 TCP 12.102.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:03:41.693 00:00:11.806 TCP 12.102.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:59:09.181 00:06:00.587 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 01:04:43.536 00:00:11.805 TCP 12.102.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:05:03.317 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.447 00:00:00.014 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.523 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.217 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.125 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.332 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.295 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:00:09.180 00:06:00.591 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 01:05:45.377 00:00:11.808 TCP 12.102.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:06:47.224 00:00:11.813 TCP 12.102.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:07:49.083 00:00:11.798 TCP 12.102.0.1:53986 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:08:50.923 00:00:11.788 TCP 12.102.0.1:57334 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:10:03.280 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:10:03.302 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:10:03.530 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:09:52.744 00:00:11.769 TCP 12.102.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:10:03.437 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:10:03.338 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:10:03.356 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:10:03.301 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:10:54.552 00:00:11.764 TCP 12.102.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:06:09.189 00:06:00.582 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 01:11:56.350 00:00:11.797 TCP 12.102.0.1:54894 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:07:09.187 00:06:00.587 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 01:12:58.188 00:00:11.797 TCP 12.102.0.1:33826 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:14:00.027 00:00:11.768 TCP 12.102.0.1:57348 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:15:03.217 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:15:03.240 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.919 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.414 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.771 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.283 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.597 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:15:01.841 00:00:11.801 TCP 12.102.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:16:03.682 00:00:11.842 TCP 12.102.0.1:58526 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:17:05.558 00:00:11.805 TCP 12.102.0.1:38968 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:13:09.190 00:06:00.583 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 01:18:07.399 00:00:11.796 TCP 12.102.0.1:44438 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:14:09.186 00:06:00.591 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 01:19:09.232 00:00:11.814 TCP 12.102.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:20:03.651 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:20:04.033 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:20:03.891 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:20:03.657 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:20:04.018 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:20:03.767 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:20:03.629 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:20:11.085 00:00:11.804 TCP 12.102.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:21:12.936 00:00:11.814 TCP 12.102.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:22:14.790 00:00:11.808 TCP 12.102.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:23:16.635 00:00:11.803 TCP 12.102.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:24:18.477 00:00:11.807 TCP 12.102.0.1:58770 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:25:03.650 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.837 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.797 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.877 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.663 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.733 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.627 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:20:09.190 00:06:00.584 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 01:25:20.321 00:00:11.794 TCP 12.102.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:21:09.187 00:06:00.589 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 01:26:22.157 00:00:11.811 TCP 12.102.0.1:45286 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:27:24.006 00:00:11.803 TCP 12.102.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:28:25.843 00:00:11.803 TCP 12.102.0.1:50406 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:29:27.686 00:00:11.764 TCP 12.102.0.1:57146 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:30:03.931 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.829 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.890 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.928 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.961 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.882 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.908 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:30:29.483 00:00:11.796 TCP 12.102.0.1:44384 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:31:31.317 00:00:11.848 TCP 12.102.0.1:48050 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:27:09.190 00:06:00.584 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 01:32:33.204 00:00:11.764 TCP 12.102.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:28:09.189 00:06:00.589 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 01:33:35.006 00:00:11.805 TCP 12.102.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:34:36.844 00:00:11.801 TCP 12.102.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:35:03.940 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:35:03.952 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:35:03.985 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:35:03.813 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:35:03.894 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:35:04.018 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:35:03.995 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:35:38.686 00:00:11.797 TCP 12.102.0.1:34864 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:36:40.525 00:00:11.803 TCP 12.102.0.1:59480 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:37:42.367 00:00:12.205 TCP 12.102.0.1:40772 -> 1.101.0.1:3000 15 1926 1 2025-11-20 01:38:44.610 00:00:11.801 TCP 12.102.0.1:51528 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:34:09.193 00:06:00.584 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 01:39:46.449 00:00:11.803 TCP 12.102.0.1:33442 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:40:03.726 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:40:03.810 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:40:03.947 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:40:04.121 00:00:00.045 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:40:03.831 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:40:03.894 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:40:03.703 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:35:09.191 00:06:00.588 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 01:40:48.290 00:00:11.762 TCP 12.102.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:41:50.097 00:00:11.757 TCP 12.102.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:42:51.895 00:00:11.801 TCP 12.102.0.1:47592 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:43:53.734 00:00:11.801 TCP 12.102.0.1:39470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:45:03.907 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:45:04.143 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:45:03.947 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:45:04.025 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:45:03.956 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:45:03.793 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:45:03.884 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:44:55.575 00:00:11.815 TCP 12.102.0.1:60926 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:45:57.425 00:00:11.761 TCP 12.102.0.1:60928 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:41:09.193 00:06:00.584 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 01:46:59.226 00:00:11.809 TCP 12.102.0.1:46062 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:42:09.191 00:06:00.590 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 01:48:01.083 00:00:11.799 TCP 12.102.0.1:51620 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:49:02.925 00:00:11.821 TCP 12.102.0.1:60220 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:50:04.048 00:00:00.043 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:50:04.070 00:00:00.044 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:50:04.318 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:50:04.208 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:50:04.234 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:50:04.114 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:50:04.085 00:00:00.042 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:50:04.786 00:00:11.818 TCP 12.102.0.1:36306 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:51:06.645 00:00:11.799 TCP 12.102.0.1:41052 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:52:08.484 00:00:11.806 TCP 12.102.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:48:09.195 00:06:00.583 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 01:53:10.330 00:00:11.760 TCP 12.102.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:49:09.192 00:06:00.589 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 01:54:12.125 00:00:11.755 TCP 12.102.0.1:53882 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:55:04.229 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 01:55:04.252 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 01:55:04.484 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:55:04.289 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 01:55:04.028 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 01:55:04.158 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 01:55:04.148 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 01:55:13.919 00:00:11.833 TCP 12.102.0.1:58700 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:56:15.793 00:00:11.795 TCP 12.102.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:57:17.628 00:00:11.799 TCP 12.102.0.1:33344 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:58:19.472 00:00:11.804 TCP 12.102.0.1:58320 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122769, total packets: 1118, avg bps: 275, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 00:59:09 - 2025-11-20 01:58:31 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0044s User: 0.0009s Wall: 0.0018s flows/second: 88905.3 Runtime: 0.0018s