Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 14:59:02.606 00:00:11.762 TCP 12.102.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:00:04.406 00:00:11.801 TCP 12.102.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:00:21.558 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:00:21.705 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.604 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.801 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.580 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.814 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.856 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:01:06.246 00:00:11.806 TCP 12.102.0.1:52248 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:02:08.090 00:00:11.803 TCP 12.102.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:03:09.929 00:00:11.778 TCP 12.102.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 14:59:09.451 00:06:00.541 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 15:04:11.745 00:00:11.805 TCP 12.102.0.1:40710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:00:09.449 00:06:00.547 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 15:05:21.860 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:05:21.838 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:05:22.148 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:05:22.085 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:05:22.045 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:05:21.994 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:05:22.025 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:05:13.613 00:00:11.794 TCP 12.102.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:06:15.447 00:00:11.760 TCP 12.102.0.1:34364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:07:17.247 00:00:11.803 TCP 12.102.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:08:19.087 00:00:11.802 TCP 12.102.0.1:34194 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:09:20.928 00:00:11.822 TCP 12.102.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:10:21.740 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:10:21.761 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:10:21.785 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:10:21.922 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:10:21.930 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:10:21.985 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:10:22.052 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:10:22.796 00:00:11.796 TCP 12.102.0.1:35558 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:06:09.452 00:06:00.540 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 15:11:24.631 00:00:11.796 TCP 12.102.0.1:35582 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:07:09.450 00:06:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 15:12:26.467 00:00:11.797 TCP 12.102.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:13:28.302 00:00:11.803 TCP 12.102.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:14:30.141 00:00:12.239 TCP 12.102.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:15:21.972 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:15:21.962 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:15:21.949 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:15:22.196 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:15:22.029 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:15:22.079 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:15:22.182 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:15:32.410 00:00:11.801 TCP 12.102.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:16:34.251 00:00:11.799 TCP 12.102.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:17:36.090 00:00:11.771 TCP 12.102.0.1:47748 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:13:09.453 00:06:00.542 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 15:18:37.899 00:00:11.797 TCP 12.102.0.1:50296 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:14:09.452 00:06:00.546 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 15:19:39.737 00:00:11.804 TCP 12.102.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:20:21.864 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:20:21.945 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:20:21.842 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:20:22.081 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:20:22.012 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:20:22.249 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:20:22.161 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:20:41.577 00:00:11.804 TCP 12.102.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:21:43.423 00:00:11.797 TCP 12.102.0.1:46762 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:22:45.269 00:00:11.798 TCP 12.102.0.1:41818 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:23:47.106 00:00:11.816 TCP 12.102.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:20:09.457 00:05:00.544 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:24:48.960 00:00:11.800 TCP 12.102.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:21:09.454 00:05:00.549 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:25:22.141 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:25:22.165 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.099 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.353 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.216 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.292 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.177 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:25:50.800 00:00:11.803 TCP 12.102.0.1:54180 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:26:52.639 00:00:11.763 TCP 12.102.0.1:51512 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:27:54.454 00:00:11.813 TCP 12.102.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:28:56.306 00:00:11.798 TCP 12.102.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:29:58.138 00:00:11.774 TCP 12.102.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:26:09.457 00:05:00.544 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:30:22.203 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.210 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.444 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.411 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.054 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.489 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.181 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:30:59.951 00:00:11.796 TCP 12.102.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:27:09.455 00:05:00.550 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:32:01.787 00:00:11.761 TCP 12.102.0.1:39144 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:33:03.588 00:00:11.776 TCP 12.102.0.1:41200 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:34:05.400 00:00:11.807 TCP 12.102.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:35:07.244 00:00:11.756 TCP 12.102.0.1:50718 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:35:22.311 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.307 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.418 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.236 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.609 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.440 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.287 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:32:09.459 00:05:00.571 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:36:09.066 00:00:11.755 TCP 12.102.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:33:09.456 00:05:00.574 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:37:10.858 00:00:12.497 TCP 12.102.0.1:54832 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:38:13.394 00:00:11.799 TCP 12.102.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:39:15.238 00:00:11.814 TCP 12.102.0.1:46562 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:40:22.569 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:40:22.590 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.390 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.318 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.669 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.598 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.421 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:40:17.086 00:00:11.857 TCP 12.102.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:41:18.983 00:00:11.797 TCP 12.102.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:38:09.467 00:05:00.564 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:42:20.819 00:00:11.795 TCP 12.102.0.1:37074 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:39:09.464 00:05:00.571 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:43:22.667 00:00:11.814 TCP 12.102.0.1:58094 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:44:24.513 00:00:11.804 TCP 12.102.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:45:22.472 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:45:22.494 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.720 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.512 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.719 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.417 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.489 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:45:26.355 00:00:11.797 TCP 12.102.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:46:28.198 00:00:11.795 TCP 12.102.0.1:56230 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:47:30.052 00:00:11.801 TCP 12.102.0.1:42478 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:44:09.468 00:05:00.565 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:48:31.887 00:00:11.803 TCP 12.102.0.1:43320 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:45:09.466 00:05:00.571 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:49:33.731 00:00:11.760 TCP 12.102.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:50:23.214 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:50:22.698 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:50:23.028 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:50:23.325 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:50:22.933 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:50:22.702 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:50:23.190 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:50:35.527 00:00:11.875 TCP 12.102.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:51:37.440 00:00:11.803 TCP 12.102.0.1:42232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:52:39.283 00:00:11.800 TCP 12.102.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:53:41.125 00:00:11.798 TCP 12.102.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:50:09.471 00:05:00.565 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:54:42.964 00:00:11.809 TCP 12.102.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:51:09.469 00:05:00.572 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:55:22.763 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.864 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.781 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.651 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.943 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.850 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.739 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:55:44.811 00:00:11.820 TCP 12.102.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:56:46.669 00:00:11.807 TCP 12.102.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:57:48.516 00:00:11.802 TCP 12.102.0.1:56944 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 122596, total packets: 1118, avg bps: 277, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 14:59:02 - 2025-11-20 15:58:00 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0059s User: 0.0010s Wall: 0.0020s flows/second: 79081.9 Runtime: 0.0020s