Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 07:59:06.317 00:00:11.767 TCP 12.102.0.1:56114 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:56:09.725 00:05:00.605 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:00:08.130 00:00:11.821 TCP 12.102.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:00:42.363 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:00:42.385 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:00:42.485 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:00:42.485 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:00:42.283 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:00:42.415 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:00:42.114 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 07:57:09.723 00:05:00.609 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:01:09.992 00:00:11.810 TCP 12.102.0.1:40600 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:02:11.844 00:00:11.805 TCP 12.102.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:03:13.688 00:00:11.815 TCP 12.102.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:04:15.547 00:00:11.803 TCP 12.102.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:05:17.390 00:00:11.805 TCP 12.102.0.1:50298 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:05:42.011 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:05:42.033 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:05:42.411 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:05:42.280 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:05:42.311 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:05:42.471 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:05:42.037 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:02:09.728 00:05:00.603 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:06:19.236 00:00:11.807 TCP 12.102.0.1:45248 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:03:09.727 00:05:00.607 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:07:21.083 00:00:11.818 TCP 12.102.0.1:38964 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:08:22.936 00:00:11.817 TCP 12.102.0.1:56984 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:09:24.791 00:00:11.800 TCP 12.102.0.1:39314 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:10:26.629 00:00:11.802 TCP 12.102.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:10:42.211 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:10:42.234 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:10:42.199 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:10:42.504 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:10:42.409 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:10:42.210 00:00:00.044 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:10:42.224 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:11:28.471 00:00:11.766 TCP 12.102.0.1:46176 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:08:09.730 00:05:00.604 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:12:30.272 00:00:11.764 TCP 12.102.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:09:09.725 00:05:00.608 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:13:32.075 00:00:11.803 TCP 12.102.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:14:33.914 00:00:11.826 TCP 12.102.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:15:42.959 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:15:42.980 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:15:43.137 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:15:42.721 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:15:43.078 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:15:43.098 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:15:42.922 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:15:35.776 00:00:12.293 TCP 12.102.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:16:38.108 00:00:11.844 TCP 12.102.0.1:48534 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:17:40.035 00:00:11.802 TCP 12.102.0.1:59990 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:14:09.729 00:05:00.604 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:18:41.876 00:00:11.809 TCP 12.102.0.1:48858 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:15:09.726 00:05:00.609 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:19:43.718 00:00:11.798 TCP 12.102.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:20:42.448 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:20:42.695 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:20:42.594 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:20:42.535 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:20:42.562 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:20:42.472 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:20:42.755 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:20:45.553 00:00:11.761 TCP 12.102.0.1:49722 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:21:47.355 00:00:11.829 TCP 12.102.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:22:49.225 00:00:11.768 TCP 12.102.0.1:52340 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:23:51.036 00:00:11.759 TCP 12.102.0.1:48398 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:20:09.730 00:05:00.604 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:24:52.830 00:00:11.756 TCP 12.102.0.1:34350 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:21:09.730 00:05:00.608 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:25:42.692 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:25:42.717 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:25:42.905 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:25:42.729 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:25:42.736 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:25:42.627 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:25:42.712 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:25:54.625 00:00:11.806 TCP 12.102.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:26:56.471 00:00:11.799 TCP 12.102.0.1:37760 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:27:58.313 00:00:12.232 TCP 12.102.0.1:36830 -> 1.101.0.1:3000 15 1926 1 2025-11-21 08:29:00.582 00:00:11.809 TCP 12.102.0.1:43764 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:26:09.731 00:05:00.604 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:30:02.427 00:00:11.799 TCP 12.102.0.1:34944 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:30:42.647 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:30:42.914 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:30:42.788 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:30:42.863 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:30:43.008 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:30:42.901 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:30:42.625 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:27:09.728 00:05:00.610 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:31:04.268 00:00:11.809 TCP 12.102.0.1:39164 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:32:06.115 00:00:11.800 TCP 12.102.0.1:39482 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:33:07.968 00:00:11.858 TCP 12.102.0.1:50576 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:34:09.869 00:00:11.753 TCP 12.102.0.1:38432 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:35:11.661 00:00:11.807 TCP 12.102.0.1:43736 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:35:42.800 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:35:42.883 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:35:42.933 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:35:42.966 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:35:42.781 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:35:42.876 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:35:42.777 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:32:09.732 00:05:00.604 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:36:13.504 00:00:11.764 TCP 12.102.0.1:55732 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:33:09.731 00:05:00.609 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:37:15.299 00:00:11.827 TCP 12.102.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:38:17.164 00:00:11.765 TCP 12.102.0.1:34336 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:39:18.969 00:00:11.798 TCP 12.102.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:40:20.809 00:00:11.764 TCP 12.102.0.1:60872 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:40:42.812 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:40:42.992 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:40:42.660 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:40:42.915 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:40:42.840 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:40:42.827 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:40:42.791 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:41:22.613 00:00:11.806 TCP 12.102.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:38:09.734 00:05:00.604 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:42:24.456 00:00:11.805 TCP 12.102.0.1:44014 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:39:09.730 00:05:00.609 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:43:26.298 00:00:11.796 TCP 12.102.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:44:28.134 00:00:12.217 TCP 12.102.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:45:30.394 00:00:11.798 TCP 12.102.0.1:43682 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:45:42.969 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:45:42.800 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:45:43.017 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:45:43.005 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:45:43.270 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:45:43.176 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:45:42.946 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:46:32.233 00:00:11.806 TCP 12.102.0.1:59382 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:47:34.079 00:00:11.800 TCP 12.102.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:44:09.735 00:05:00.604 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:48:35.914 00:00:11.826 TCP 12.102.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:45:09.731 00:05:00.612 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:49:37.779 00:00:11.801 TCP 12.102.0.1:39642 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:50:43.129 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:50:43.360 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:50:43.069 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:50:43.123 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:50:43.256 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:50:43.009 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:50:43.106 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:50:39.621 00:00:11.800 TCP 12.102.0.1:37932 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:51:41.457 00:00:11.805 TCP 12.102.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:52:43.298 00:00:11.798 TCP 12.102.0.1:43174 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:53:45.136 00:00:11.805 TCP 12.102.0.1:37246 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:50:09.737 00:05:00.605 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 08:54:46.980 00:00:11.761 TCP 12.102.0.1:33300 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:51:09.734 00:05:00.610 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 08:55:43.328 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 08:55:43.462 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:55:43.345 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 08:55:43.214 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 08:55:43.321 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 08:55:43.417 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 08:55:43.306 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 08:55:48.774 00:00:11.815 TCP 12.102.0.1:40592 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:56:50.629 00:00:11.800 TCP 12.102.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:57:52.468 00:00:11.798 TCP 12.102.0.1:50210 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-11-21 07:56:09 - 2025-11-21 08:58:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0041s User: 0.0024s Wall: 0.0024s flows/second: 67188.5 Runtime: 0.0024s