Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 21:59:02.087 00:00:11.761 TCP 12.102.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:56:09.560 00:05:00.590 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:00:03.890 00:00:11.765 TCP 12.102.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:00:30.060 00:00:00.033 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:00:30.201 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:00:30.107 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:00:30.197 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:00:30.099 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:00:29.973 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:00:30.037 00:00:00.033 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 21:57:09.559 00:05:00.596 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:01:05.694 00:00:11.809 TCP 12.102.0.1:33920 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:02:07.542 00:00:11.847 TCP 12.102.0.1:46654 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:03:09.428 00:00:11.875 TCP 12.102.0.1:39672 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:04:11.343 00:00:11.799 TCP 12.102.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:05:13.180 00:00:11.809 TCP 12.102.0.1:53868 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:05:30.329 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:05:30.131 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:05:30.476 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:05:30.316 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:05:30.076 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:05:30.288 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:05:30.267 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:02:09.563 00:05:00.590 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:06:15.035 00:00:11.801 TCP 12.102.0.1:46960 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:03:09.561 00:05:00.594 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:07:16.877 00:00:11.800 TCP 12.102.0.1:40816 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:08:18.720 00:00:11.803 TCP 12.102.0.1:59800 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:09:20.557 00:00:11.797 TCP 12.102.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:10:30.559 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:10:30.581 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:10:30.586 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:10:30.668 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:10:30.327 00:00:00.005 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:10:30.664 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:10:30.528 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:10:22.396 00:00:11.830 TCP 12.102.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:11:24.245 00:00:11.804 TCP 12.102.0.1:33462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:08:09.565 00:05:00.590 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:12:26.088 00:00:11.807 TCP 12.102.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:09:09.563 00:05:00.596 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:13:27.936 00:00:11.807 TCP 12.102.0.1:45006 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:14:29.782 00:00:11.760 TCP 12.102.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:15:30.510 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:15:30.457 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:15:30.490 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:15:30.569 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:15:30.614 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:15:30.328 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:15:30.487 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:15:31.580 00:00:11.797 TCP 12.102.0.1:49518 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:16:33.418 00:00:11.812 TCP 12.102.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:17:35.263 00:00:11.793 TCP 12.102.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:14:09.567 00:05:00.595 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:18:37.098 00:00:11.796 TCP 12.102.0.1:33334 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:15:09.565 00:05:00.600 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:19:38.932 00:00:11.773 TCP 12.102.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:20:30.426 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:20:30.284 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:20:30.642 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:20:30.555 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:20:30.326 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:20:30.594 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:20:30.404 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:20:40.751 00:00:11.802 TCP 12.102.0.1:59462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:21:42.591 00:00:11.802 TCP 12.102.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:22:44.431 00:00:12.238 TCP 12.102.0.1:42982 -> 1.101.0.1:3000 15 1926 1 2025-11-20 22:23:46.711 00:00:11.859 TCP 12.102.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:20:09.568 00:05:00.595 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:24:48.614 00:00:11.763 TCP 12.102.0.1:40960 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:21:09.566 00:05:00.600 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:25:30.507 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:25:30.530 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:25:30.691 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:25:30.750 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:25:30.710 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:25:30.707 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:25:30.639 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:25:50.416 00:00:11.815 TCP 12.102.0.1:36380 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:26:52.292 00:00:11.812 TCP 12.102.0.1:51762 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:27:54.151 00:00:12.245 TCP 12.102.0.1:54346 -> 1.101.0.1:3000 15 1926 1 2025-11-20 22:28:56.441 00:00:11.806 TCP 12.102.0.1:45760 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:29:58.292 00:00:11.802 TCP 12.102.0.1:40282 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:26:09.572 00:05:00.599 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:30:30.594 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:30:30.688 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:30:30.856 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:30:30.837 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:30:30.921 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:30:30.829 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:30:30.572 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:31:00.139 00:00:11.826 TCP 12.102.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:27:09.568 00:05:00.604 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:32:02.012 00:00:11.804 TCP 12.102.0.1:51218 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:33:03.855 00:00:11.773 TCP 12.102.0.1:42378 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:34:05.665 00:00:11.810 TCP 12.102.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:35:07.518 00:00:11.763 TCP 12.102.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:35:30.625 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:35:30.649 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:35:30.871 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:35:30.881 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:35:30.866 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:35:30.795 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:35:30.740 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:32:09.572 00:05:00.599 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:36:09.317 00:00:24.235 TCP 12.102.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:33:09.571 00:05:00.604 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:37:23.604 00:00:11.805 TCP 12.102.0.1:53364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:38:25.467 00:00:11.760 TCP 12.102.0.1:33564 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:39:27.276 00:00:11.813 TCP 12.102.0.1:52178 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:40:31.085 00:00:00.045 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:40:30.976 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:40:31.097 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:40:31.118 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:40:30.890 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:40:30.887 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:40:30.952 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:40:29.136 00:00:11.817 TCP 12.102.0.1:39786 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:41:30.992 00:00:11.801 TCP 12.102.0.1:33150 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:38:09.574 00:05:00.598 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:42:32.837 00:00:11.809 TCP 12.102.0.1:52420 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:39:09.571 00:05:00.604 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:43:34.695 00:00:11.771 TCP 12.102.0.1:49726 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:44:36.512 00:00:11.773 TCP 12.102.0.1:51782 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:45:30.748 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:45:30.770 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:45:30.973 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:45:30.773 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:45:31.028 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:45:31.122 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:45:30.739 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:45:38.321 00:00:11.804 TCP 12.102.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:46:40.168 00:00:19.146 TCP 12.102.0.1:34170 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:47:49.368 00:00:11.784 TCP 12.102.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:44:09.574 00:05:00.598 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:48:51.207 00:00:11.760 TCP 12.102.0.1:33758 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:45:09.572 00:05:00.604 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:49:53.007 00:00:11.811 TCP 12.102.0.1:57214 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:50:31.148 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:50:31.171 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:50:31.130 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:50:31.252 00:00:00.019 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:50:30.928 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:50:31.262 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:50:30.999 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:50:54.857 00:00:12.293 TCP 12.102.0.1:47872 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:51:57.188 00:00:11.808 TCP 12.102.0.1:38850 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:52:59.064 00:00:11.771 TCP 12.102.0.1:43372 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:50:09.576 00:05:00.599 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 22:54:00.881 00:00:11.803 TCP 12.102.0.1:50514 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:51:09.573 00:05:00.606 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 22:55:02.728 00:00:11.806 TCP 12.102.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:55:31.266 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 22:55:31.289 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 22:55:31.374 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 22:55:31.316 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 22:55:31.137 00:00:00.048 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 22:55:31.167 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 22:55:31.293 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 22:56:04.573 00:00:11.830 TCP 12.102.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:57:06.445 00:00:11.809 TCP 12.102.0.1:43910 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:58:08.297 00:00:12.198 TCP 12.102.0.1:36084 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 162, total bytes: 124591, total packets: 1142, avg bps: 267, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 21:56:09 - 2025-11-20 22:58:20 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0026s User: 0.0026s Wall: 0.0025s flows/second: 64928.5 Runtime: 0.0025s