Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 11:58:59.594 00:00:11.823 TCP 12.102.0.1:33870 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:00:01.452 00:00:11.810 TCP 12.102.0.1:56630 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:00:17.838 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:00:17.860 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:00:17.952 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.108 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.140 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.177 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.052 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:01:03.301 00:00:11.803 TCP 12.102.0.1:35814 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:57:09.401 00:06:00.539 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:02:05.139 00:00:11.774 TCP 12.102.0.1:35698 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:58:09.399 00:06:00.544 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:03:06.954 00:00:11.800 TCP 12.102.0.1:33892 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:04:08.797 00:00:11.756 TCP 12.102.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:05:18.235 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:05:18.256 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:05:17.978 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.169 00:00:00.037 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.126 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.162 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.207 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:05:10.590 00:00:11.806 TCP 12.102.0.1:59634 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:06:12.437 00:00:11.806 TCP 12.102.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:07:14.280 00:00:11.871 TCP 12.102.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:08:16.192 00:00:11.801 TCP 12.102.0.1:40146 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:04:09.405 00:06:00.536 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:09:18.042 00:00:11.797 TCP 12.102.0.1:42470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:05:09.403 00:06:00.542 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:10:18.020 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.339 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.268 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.136 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.255 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.224 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:10:17.999 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:10:19.875 00:00:11.764 TCP 12.102.0.1:40456 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:11:21.687 00:00:12.430 TCP 12.102.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:12:24.151 00:00:12.291 TCP 12.102.0.1:34520 -> 1.101.0.1:3000 15 1926 1 2025-11-20 12:13:26.482 00:00:11.801 TCP 12.102.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:14:28.324 00:00:11.815 TCP 12.102.0.1:44226 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:15:18.427 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:15:18.449 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.660 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.520 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.553 00:00:00.032 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.308 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.364 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:15:30.174 00:00:11.799 TCP 12.102.0.1:39326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:11:09.410 00:06:00.533 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:16:32.023 00:00:11.760 TCP 12.102.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:12:09.404 00:06:00.542 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:17:33.818 00:00:11.804 TCP 12.102.0.1:36514 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:18:35.664 00:00:11.805 TCP 12.102.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:19:37.514 00:00:11.797 TCP 12.102.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:20:18.602 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:20:18.625 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.447 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.461 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.304 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.201 00:00:00.043 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.400 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:20:39.354 00:00:11.814 TCP 12.102.0.1:54850 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:21:41.205 00:00:11.803 TCP 12.102.0.1:55762 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:22:43.075 00:00:11.854 TCP 12.102.0.1:45884 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:18:09.409 00:06:00.538 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:23:44.969 00:00:11.755 TCP 12.102.0.1:41964 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:19:09.405 00:06:00.544 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:24:46.761 00:00:11.802 TCP 12.102.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:25:18.514 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.619 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.737 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.527 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.720 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.501 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.491 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:25:48.599 00:00:11.805 TCP 12.102.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:26:50.444 00:00:11.808 TCP 12.102.0.1:49152 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:27:52.290 00:00:11.803 TCP 12.102.0.1:38246 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:28:54.129 00:00:11.871 TCP 12.102.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:25:09.410 00:06:00.537 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:29:56.065 00:00:11.799 TCP 12.102.0.1:54694 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:30:18.634 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.654 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.940 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.742 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.542 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.532 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.612 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:30:57.909 00:00:11.825 TCP 12.102.0.1:41392 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:26:09.406 00:06:00.543 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:31:59.773 00:00:11.807 TCP 12.102.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:33:01.618 00:00:11.801 TCP 12.102.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:34:03.462 00:00:11.806 TCP 12.102.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:35:18.845 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.971 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:35:19.015 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.777 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:35:05.307 00:00:11.810 TCP 12.102.0.1:50788 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:35:18.787 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.904 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.821 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:36:07.157 00:00:11.766 TCP 12.102.0.1:40786 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:32:09.411 00:06:00.538 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:37:08.964 00:00:12.512 TCP 12.102.0.1:34378 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:33:09.410 00:06:00.542 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:38:11.514 00:00:11.803 TCP 12.102.0.1:49530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:39:13.357 00:00:11.821 TCP 12.102.0.1:55752 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:40:19.017 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:40:18.810 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.017 00:00:00.028 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.024 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.425 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.338 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:40:18.993 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:40:15.220 00:00:11.807 TCP 12.102.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:41:17.078 00:00:11.805 TCP 12.102.0.1:55660 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:42:18.921 00:00:11.820 TCP 12.102.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:43:20.777 00:00:11.809 TCP 12.102.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:39:09.412 00:06:00.539 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:44:22.628 00:00:11.801 TCP 12.102.0.1:45720 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:40:09.410 00:06:00.544 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:45:19.354 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.297 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.221 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.299 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.369 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.282 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.332 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:45:24.470 00:00:11.805 TCP 12.102.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:46:26.314 00:00:11.807 TCP 12.102.0.1:57368 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:47:28.159 00:00:11.772 TCP 12.102.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:48:29.968 00:00:11.802 TCP 12.102.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:49:31.804 00:00:11.803 TCP 12.102.0.1:60226 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:50:18.881 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.180 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.293 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.298 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:50:18.867 00:00:00.032 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.085 00:00:00.040 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:50:18.859 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:50:33.649 00:00:11.773 TCP 12.102.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:46:09.414 00:06:00.541 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:51:35.460 00:00:11.766 TCP 12.102.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:47:09.410 00:06:00.547 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:52:37.263 00:00:12.233 TCP 12.102.0.1:52960 -> 1.101.0.1:3000 15 1926 1 2025-11-20 12:53:39.542 00:00:11.807 TCP 12.102.0.1:50290 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:54:41.390 00:00:11.767 TCP 12.102.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:55:18.924 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:55:18.946 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.157 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.372 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.260 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.392 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:55:18.857 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:55:43.201 00:00:11.796 TCP 12.102.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:56:45.040 00:00:11.800 TCP 12.102.0.1:36704 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:57:46.879 00:00:11.800 TCP 12.102.0.1:36524 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:53:09.417 00:06:00.539 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 11:57:09 - 2025-11-20 12:59:09 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0040s User: 0.0000s Wall: 0.0093s flows/second: 17071.0 Runtime: 0.0093s