Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 17:59:16.082 00:00:11.819 TCP 12.102.0.1:32936 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:56:09.905 00:05:00.608 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:00:17.946 00:00:11.766 TCP 12.102.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:00:54.101 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:00:54.124 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:00:54.297 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:00:54.244 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:00:54.265 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:00:54.168 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:00:54.071 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 17:57:09.901 00:05:00.613 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:01:19.754 00:00:11.800 TCP 12.102.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:02:21.594 00:00:11.797 TCP 12.102.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:03:23.428 00:00:11.812 TCP 12.102.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:04:25.276 00:00:11.804 TCP 12.102.0.1:59966 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:05:27.116 00:00:11.761 TCP 12.102.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:05:54.263 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:05:54.272 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:05:54.321 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:05:54.080 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:05:54.391 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:05:54.199 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:05:54.241 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:02:09.905 00:05:00.608 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:06:28.914 00:00:11.825 TCP 12.102.0.1:44080 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:03:09.904 00:05:00.613 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:07:30.782 00:00:11.801 TCP 12.102.0.1:53008 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:08:32.626 00:00:11.806 TCP 12.102.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:09:34.470 00:00:11.998 TCP 12.102.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:10:36.508 00:00:11.797 TCP 12.102.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:10:55.146 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:10:55.384 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:10:55.316 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:10:55.141 00:00:00.036 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:10:55.266 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:10:55.146 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:10:55.123 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:11:38.341 00:00:11.810 TCP 12.102.0.1:52612 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:08:09.913 00:05:00.600 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:12:40.186 00:00:12.291 TCP 12.102.0.1:58566 -> 1.101.0.1:3000 15 1926 1 2025-11-21 18:09:09.912 00:05:00.605 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:13:42.515 00:00:12.425 TCP 12.102.0.1:58938 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:14:44.975 00:00:11.760 TCP 12.102.0.1:32998 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:15:54.315 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:15:54.338 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:15:54.472 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:15:54.552 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:15:54.366 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:15:54.630 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:15:54.540 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:15:46.770 00:00:11.800 TCP 12.102.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:16:48.614 00:00:11.802 TCP 12.102.0.1:53036 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:17:50.453 00:00:11.759 TCP 12.102.0.1:45188 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:14:09.915 00:05:00.607 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:18:52.245 00:00:11.798 TCP 12.102.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:15:09.912 00:05:00.612 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:19:54.083 00:00:11.799 TCP 12.102.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:20:54.487 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:20:54.698 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:20:54.622 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:20:54.622 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:20:54.528 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:20:54.757 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:20:54.464 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:20:55.922 00:00:11.833 TCP 12.102.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:21:57.783 00:00:11.802 TCP 12.102.0.1:59906 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:22:59.622 00:00:11.796 TCP 12.102.0.1:54980 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:20:09.917 00:05:00.606 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:24:01.465 00:00:11.800 TCP 12.102.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:21:09.914 00:05:00.611 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:25:03.305 00:00:12.339 TCP 12.102.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:25:55.688 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:25:55.712 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:25:55.586 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:25:55.761 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:25:55.461 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:25:55.766 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:25:55.339 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:26:05.683 00:00:11.810 TCP 12.102.0.1:57172 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:27:07.536 00:00:11.799 TCP 12.102.0.1:56940 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:28:09.371 00:00:11.823 TCP 12.102.0.1:45500 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:29:11.226 00:00:11.813 TCP 12.102.0.1:38456 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:26:09.918 00:05:00.605 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:30:13.082 00:00:11.823 TCP 12.102.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:30:54.919 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:30:54.941 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:30:55.117 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:30:55.107 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:30:55.032 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:30:54.919 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:30:54.952 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:27:09.916 00:05:00.610 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:31:14.946 00:00:11.807 TCP 12.102.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:32:16.785 00:00:11.765 TCP 12.102.0.1:37852 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:33:18.588 00:00:11.800 TCP 12.102.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:34:20.428 00:00:11.821 TCP 12.102.0.1:45816 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:35:22.286 00:00:11.805 TCP 12.102.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:35:54.813 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:35:55.024 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:35:54.887 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:35:54.761 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:35:54.896 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:35:54.639 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:35:54.791 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:32:09.920 00:05:00.605 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:36:24.122 00:00:11.803 TCP 12.102.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:33:09.917 00:05:00.610 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:37:25.959 00:00:11.770 TCP 12.102.0.1:34564 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:38:27.766 00:00:11.845 TCP 12.102.0.1:41486 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:39:29.650 00:00:11.825 TCP 12.102.0.1:52674 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:40:31.513 00:00:11.800 TCP 12.102.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:40:54.964 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:40:55.125 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:40:54.920 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:40:54.896 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:40:55.147 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:40:54.972 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:40:54.943 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:41:33.386 00:00:11.767 TCP 12.102.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:38:09.919 00:05:00.606 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:42:35.190 00:00:11.810 TCP 12.102.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:39:09.918 00:05:00.611 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:43:37.052 00:00:11.801 TCP 12.102.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:44:38.891 00:00:11.802 TCP 12.102.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:45:55.155 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:45:55.177 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:45:54.844 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:45:55.006 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:45:54.977 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:45:55.179 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:45:55.153 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:45:40.735 00:00:12.272 TCP 12.102.0.1:46180 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:46:43.073 00:00:11.798 TCP 12.102.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:47:44.912 00:00:12.220 TCP 12.102.0.1:58844 -> 1.101.0.1:3000 15 1926 1 2025-11-21 18:44:09.920 00:05:00.607 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:48:47.169 00:00:11.807 TCP 12.102.0.1:48028 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:45:09.918 00:05:00.612 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:49:49.018 00:00:11.799 TCP 12.102.0.1:58686 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:50:55.126 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:50:54.948 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:50:55.150 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:50:55.282 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:50:55.279 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:50:55.194 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:50:55.205 00:00:00.040 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:50:50.856 00:00:11.814 TCP 12.102.0.1:50122 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:51:52.710 00:00:11.806 TCP 12.102.0.1:33012 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:52:54.554 00:00:11.758 TCP 12.102.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:53:56.352 00:00:11.784 TCP 12.102.0.1:42412 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:50:09.922 00:05:00.607 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-21 18:54:58.179 00:00:11.800 TCP 12.102.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:51:09.920 00:05:00.612 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-21 18:55:55.149 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-21 18:55:55.414 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:55:55.282 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-21 18:55:55.175 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-21 18:55:55.151 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-21 18:55:55.144 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-21 18:55:55.128 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-21 18:56:00.030 00:00:11.803 TCP 12.102.0.1:46882 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:57:01.875 00:00:15.565 TCP 12.102.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:58:07.483 00:00:15.067 TCP 12.102.0.1:42904 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-11-21 17:56:09 - 2025-11-21 18:58:22 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0053s User: 0.0011s Wall: 0.0020s flows/second: 80516.3 Runtime: 0.0020s