Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 20:59:13.363 00:00:11.789 TCP 12.102.0.1:60142 -> 1.101.0.1:3000 11 1507 1 2025-11-20 20:56:09.545 00:05:00.574 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:00:15.188 00:00:11.816 TCP 12.102.0.1:37072 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:00:28.798 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:00:28.914 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:00:29.035 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:00:28.946 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:00:28.833 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:00:28.956 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:00:28.777 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 20:57:09.544 00:05:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:01:17.068 00:00:11.805 TCP 12.102.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:02:18.910 00:00:11.815 TCP 12.102.0.1:33740 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:03:20.793 00:00:11.802 TCP 12.102.0.1:49232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:04:22.633 00:00:11.796 TCP 12.102.0.1:33992 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:05:28.781 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:05:29.187 00:00:00.031 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:05:29.234 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:05:29.036 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:05:28.888 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:05:28.954 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:05:28.760 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:05:24.470 00:00:11.801 TCP 12.102.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:02:09.548 00:05:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:06:26.315 00:00:11.802 TCP 12.102.0.1:49940 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:03:09.546 00:05:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:07:28.153 00:00:11.807 TCP 12.102.0.1:57524 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:08:30.004 00:00:11.798 TCP 12.102.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:09:31.844 00:00:11.802 TCP 12.102.0.1:42660 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:10:29.058 00:00:00.034 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.325 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.522 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.051 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.197 00:00:00.050 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.294 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.036 00:00:00.034 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:10:33.685 00:00:11.815 TCP 12.102.0.1:37344 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:11:35.529 00:00:11.762 TCP 12.102.0.1:44494 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:08:09.549 00:05:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:12:37.329 00:00:11.797 TCP 12.102.0.1:57074 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:09:09.547 00:05:00.579 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:13:39.165 00:00:11.800 TCP 12.102.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:14:41.009 00:00:11.815 TCP 12.102.0.1:45380 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:15:29.165 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.307 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.219 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.266 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.185 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.185 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.143 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:15:42.871 00:00:11.819 TCP 12.102.0.1:33908 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:16:44.734 00:00:11.780 TCP 12.102.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:17:46.554 00:00:11.806 TCP 12.102.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:14:09.550 00:05:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:18:48.402 00:00:11.819 TCP 12.102.0.1:41784 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:15:09.547 00:05:00.579 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:19:50.261 00:00:11.819 TCP 12.102.0.1:49364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:20:29.203 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.490 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.350 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.386 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.417 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.069 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.180 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:20:52.118 00:00:11.806 TCP 12.102.0.1:50456 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:21:53.964 00:00:11.804 TCP 12.102.0.1:55336 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:22:55.807 00:00:11.803 TCP 12.102.0.1:33120 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:23:57.643 00:00:11.797 TCP 12.102.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:20:09.551 00:05:00.574 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:21:09.548 00:05:00.580 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:24:59.482 00:00:11.822 TCP 12.102.0.1:34586 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:25:29.785 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:25:29.818 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:25:29.726 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:25:29.724 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:25:29.421 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:25:30.415 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:25:29.764 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:26:01.344 00:00:11.763 TCP 12.102.0.1:46826 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:27:03.143 00:00:11.872 TCP 12.102.0.1:57472 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:28:05.079 00:00:11.799 TCP 12.102.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:29:06.917 00:00:11.825 TCP 12.102.0.1:34232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:26:09.552 00:05:00.611 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:30:08.783 00:00:11.803 TCP 12.102.0.1:36998 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:30:29.432 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:30:29.455 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.531 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.597 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.749 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.798 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.557 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:27:09.550 00:05:00.595 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:31:10.627 00:00:11.783 TCP 12.102.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:32:12.443 00:00:12.045 TCP 12.102.0.1:40932 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:33:14.524 00:00:11.780 TCP 12.102.0.1:46422 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:34:16.342 00:00:11.820 TCP 12.102.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:35:29.720 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:35:18.198 00:00:11.827 TCP 12.102.0.1:44636 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:35:29.742 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.843 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.598 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.555 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.752 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.529 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:32:09.555 00:05:00.588 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:36:20.082 00:00:11.813 TCP 12.102.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:33:09.554 00:05:00.593 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:37:21.936 00:00:11.811 TCP 12.102.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:38:23.787 00:00:11.796 TCP 12.102.0.1:32888 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:39:25.620 00:00:11.801 TCP 12.102.0.1:40726 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:40:29.826 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.763 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.849 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.752 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.666 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.904 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.802 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:40:27.457 00:00:11.829 TCP 12.102.0.1:45948 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:41:29.321 00:00:11.799 TCP 12.102.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:38:09.556 00:05:00.588 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:42:31.159 00:00:11.818 TCP 12.102.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:39:09.555 00:05:00.592 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:43:33.030 00:00:11.805 TCP 12.102.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:44:34.873 00:00:11.797 TCP 12.102.0.1:41950 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:45:30.039 00:00:00.044 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:45:30.062 00:00:00.043 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:45:29.976 00:00:00.032 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:45:30.041 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:45:30.038 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:45:29.894 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:45:29.895 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:45:36.713 00:00:11.797 TCP 12.102.0.1:60064 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:46:38.549 00:00:11.801 TCP 12.102.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:47:40.390 00:00:11.800 TCP 12.102.0.1:49172 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:44:09.558 00:05:00.587 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:48:42.230 00:00:11.810 TCP 12.102.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:45:09.557 00:05:00.593 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:49:44.083 00:00:12.778 TCP 12.102.0.1:58812 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:50:29.942 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:50:29.965 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:50:29.936 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:50:29.878 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:50:29.724 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:50:30.023 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:50:29.908 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:50:46.896 00:00:11.764 TCP 12.102.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:51:48.697 00:00:11.772 TCP 12.102.0.1:35826 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:52:50.510 00:00:11.801 TCP 12.102.0.1:56798 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:53:52.353 00:00:11.850 TCP 12.102.0.1:35884 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:50:09.559 00:05:00.588 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 21:54:54.244 00:00:11.800 TCP 12.102.0.1:57816 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:51:09.558 00:05:00.592 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 21:55:29.894 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:55:29.917 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 21:55:29.844 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:55:30.246 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 21:55:29.932 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 21:55:29.864 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 21:55:30.014 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 21:55:56.088 00:00:11.800 TCP 12.102.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:56:57.928 00:00:11.820 TCP 12.102.0.1:57918 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:57:59.792 00:00:12.251 TCP 12.102.0.1:46710 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 20:56:09 - 2025-11-20 21:58:12 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0043s User: 0.0014s Wall: 0.0370s flows/second: 4376.8 Runtime: 0.0370s