Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 23:58:47.860 00:00:11.784 TCP 12.102.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-11-21 23:59:49.681 00:00:11.817 TCP 12.102.0.1:43446 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:01:01.431 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:01:01.454 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.416 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.493 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.301 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.168 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.365 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:00:51.538 00:00:11.849 TCP 12.102.0.1:48092 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:01:53.421 00:00:11.762 TCP 12.102.0.1:43926 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:02:55.220 00:00:11.761 TCP 12.102.0.1:50468 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:03:57.024 00:00:11.814 TCP 12.102.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:04:58.874 00:00:11.800 TCP 12.102.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:00:10.056 00:06:00.582 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 00:00:10.059 00:06:00.577 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 00:06:01.623 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.593 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.570 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.500 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.494 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.551 00:00:00.019 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.471 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:06:00.719 00:00:11.802 TCP 12.102.0.1:41024 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:07:02.561 00:00:11.799 TCP 12.102.0.1:51766 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:08:04.396 00:00:11.809 TCP 12.102.0.1:59176 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:09:06.250 00:00:11.813 TCP 12.102.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:10:08.103 00:00:11.751 TCP 12.102.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:11:01.488 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:11:01.511 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.753 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.710 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.689 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.646 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.511 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:11:09.892 00:00:11.797 TCP 12.102.0.1:39256 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:07:10.058 00:06:00.581 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 00:07:10.060 00:06:00.577 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 00:12:11.730 00:00:11.810 TCP 12.102.0.1:46244 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:13:13.575 00:00:12.238 TCP 12.102.0.1:44196 -> 1.101.0.1:3000 15 1926 1 2025-11-22 00:14:15.853 00:00:11.857 TCP 12.102.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:15:17.745 00:00:11.801 TCP 12.102.0.1:40816 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:16:01.571 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:16:01.594 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.553 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.737 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.702 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.743 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.681 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:16:19.584 00:00:11.761 TCP 12.102.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:17:21.384 00:00:11.809 TCP 12.102.0.1:59118 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:18:23.235 00:00:11.805 TCP 12.102.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:14:10.061 00:06:00.578 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 00:14:10.060 00:06:00.584 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 00:19:25.088 00:00:11.808 TCP 12.102.0.1:49922 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:20:26.932 00:00:11.818 TCP 12.102.0.1:43748 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:21:01.670 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:21:01.693 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.697 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.824 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.878 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.798 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.782 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:21:28.785 00:00:11.801 TCP 12.102.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:22:30.624 00:00:11.803 TCP 12.102.0.1:38618 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:23:32.467 00:00:16.866 TCP 12.102.0.1:57888 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:24:39.370 00:00:11.840 TCP 12.102.0.1:46096 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:25:41.249 00:00:11.767 TCP 12.102.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:26:02.084 00:00:00.033 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:21:10.063 00:06:00.577 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 00:26:02.107 00:00:00.033 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:26:01.992 00:00:00.052 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:26:02.111 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:26:02.072 00:00:00.039 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:26:01.993 00:00:00.051 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:26:02.171 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:21:10.060 00:06:00.583 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 00:26:43.086 00:00:11.800 TCP 12.102.0.1:38318 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:27:44.921 00:00:12.264 TCP 12.102.0.1:37880 -> 1.101.0.1:3000 15 1926 1 2025-11-22 00:28:47.227 00:00:11.814 TCP 12.102.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:29:49.086 00:00:11.815 TCP 12.102.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:31:01.954 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:31:01.712 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:31:01.964 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:31:01.940 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:31:01.932 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:30:50.938 00:00:11.814 TCP 12.102.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:31:02.131 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:31:02.113 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:31:52.794 00:00:11.762 TCP 12.102.0.1:43176 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:32:54.595 00:00:12.199 TCP 12.102.0.1:33586 -> 1.101.0.1:3000 15 1926 1 2025-11-22 00:28:10.068 00:06:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 00:28:10.066 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 00:33:56.831 00:00:11.796 TCP 12.102.0.1:48462 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:34:58.661 00:00:11.809 TCP 12.102.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:36:01.913 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.127 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.120 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.046 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.004 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.108 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.104 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:36:00.507 00:00:11.800 TCP 12.102.0.1:46220 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:37:02.338 00:00:11.762 TCP 12.102.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:38:04.135 00:00:11.799 TCP 12.102.0.1:58300 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:39:05.966 00:00:17.578 TCP 12.102.0.1:43596 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:35:10.071 00:06:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 00:35:10.068 00:06:00.579 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 00:40:13.593 00:00:11.806 TCP 12.102.0.1:51962 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:41:02.011 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:41:02.033 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:41:02.147 00:00:00.032 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:41:02.075 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:41:02.030 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:41:02.286 00:00:00.029 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:41:02.137 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:41:15.448 00:00:11.820 TCP 12.102.0.1:59992 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:42:17.308 00:00:11.803 TCP 12.102.0.1:48120 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:43:19.165 00:00:11.781 TCP 12.102.0.1:57486 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:44:20.997 00:00:11.762 TCP 12.102.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:45:22.809 00:00:11.821 TCP 12.102.0.1:60884 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:46:02.383 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.468 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.513 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.498 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.433 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.470 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.360 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:46:24.668 00:00:11.769 TCP 12.102.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:42:10.072 00:06:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 00:42:10.069 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 00:47:26.474 00:00:11.811 TCP 12.102.0.1:60134 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:48:28.332 00:00:11.809 TCP 12.102.0.1:60620 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:49:30.181 00:00:11.766 TCP 12.102.0.1:47096 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:50:31.986 00:00:11.806 TCP 12.102.0.1:51986 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:51:02.685 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:51:02.706 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.613 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.830 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.885 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.820 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.600 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:51:33.841 00:00:11.757 TCP 12.102.0.1:53748 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:52:35.641 00:00:17.743 TCP 12.102.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:53:43.445 00:00:11.809 TCP 12.102.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:49:10.074 00:06:00.572 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 00:49:10.070 00:06:00.577 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 00:54:45.294 00:00:11.804 TCP 12.102.0.1:54014 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:55:47.144 00:00:11.811 TCP 12.102.0.1:44054 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:56:02.454 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 00:56:02.476 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.614 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.443 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.410 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.599 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.585 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 00:56:48.992 00:00:11.803 TCP 12.102.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:57:50.834 00:00:11.804 TCP 12.102.0.1:45008 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123607, total packets: 1126, avg bps: 278, avg pps: 0, avg bpp: 109 Time window: 2025-11-21 23:58:47 - 2025-11-22 00:58:02 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0032s User: 0.0021s Wall: 0.0023s flows/second: 67781.5 Runtime: 0.0024s