Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 01:58:54.269 00:00:11.801 TCP 12.102.0.1:44970 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:59:56.111 00:00:11.804 TCP 12.102.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:01:04.500 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:01:04.523 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.421 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.515 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.324 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.444 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.495 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:00:57.952 00:00:11.820 TCP 12.102.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:01:59.812 00:00:11.798 TCP 12.102.0.1:53460 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:03:01.653 00:00:11.821 TCP 12.102.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:59:10.088 00:06:00.576 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 01:59:10.090 00:06:00.571 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 02:04:03.513 00:00:11.798 TCP 12.102.0.1:46526 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:05:05.352 00:00:11.862 TCP 12.102.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:06:03.889 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:06:04.008 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:06:04.124 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:06:03.911 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:06:04.027 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:06:03.960 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:06:03.866 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:06:07.251 00:00:11.799 TCP 12.102.0.1:37764 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:07:09.090 00:00:12.405 TCP 12.102.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:08:11.523 00:00:11.758 TCP 12.102.0.1:44990 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:09:13.322 00:00:11.802 TCP 12.102.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:10:15.159 00:00:11.803 TCP 12.102.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:11:03.891 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:11:03.914 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:11:04.186 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:11:04.049 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:11:04.038 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:11:04.201 00:00:00.034 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:11:04.015 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:06:10.092 00:06:00.571 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 02:06:10.089 00:06:00.576 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 02:11:17.019 00:00:11.848 TCP 12.102.0.1:35498 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:12:18.906 00:00:11.804 TCP 12.102.0.1:36578 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:13:20.749 00:00:11.813 TCP 12.102.0.1:32782 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:14:22.602 00:00:11.759 TCP 12.102.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:15:24.406 00:00:11.799 TCP 12.102.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:16:03.901 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:16:03.923 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.280 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.361 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.050 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.053 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.045 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:16:26.244 00:00:11.764 TCP 12.102.0.1:49976 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:17:28.074 00:00:11.804 TCP 12.102.0.1:33840 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:13:10.093 00:06:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 02:13:10.090 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 02:18:29.919 00:00:11.825 TCP 12.102.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:19:31.787 00:00:11.817 TCP 12.102.0.1:44520 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:20:33.633 00:00:11.803 TCP 12.102.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:21:04.322 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:21:04.344 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.479 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.652 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.667 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.129 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.579 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:21:35.464 00:00:11.818 TCP 12.102.0.1:33254 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:22:37.319 00:00:11.803 TCP 12.102.0.1:42600 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:23:39.162 00:00:11.806 TCP 12.102.0.1:49340 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:24:41.009 00:00:11.802 TCP 12.102.0.1:32778 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:20:10.091 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 02:20:10.094 00:06:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 02:25:42.850 00:00:11.758 TCP 12.102.0.1:58296 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:26:04.244 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.327 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.350 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.409 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.496 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.085 00:00:00.046 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.222 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:26:44.650 00:00:11.823 TCP 12.102.0.1:43612 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:27:46.516 00:00:11.802 TCP 12.102.0.1:51160 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:28:48.353 00:00:11.810 TCP 12.102.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:29:50.203 00:00:11.808 TCP 12.102.0.1:51268 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:31:04.455 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.687 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.573 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.376 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.260 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.453 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:30:52.072 00:00:11.799 TCP 12.102.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:31:04.431 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:31:53.907 00:00:11.782 TCP 12.102.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:27:10.092 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 02:27:10.095 00:06:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 02:32:55.727 00:00:11.757 TCP 12.102.0.1:35960 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:33:57.524 00:00:11.809 TCP 12.102.0.1:33028 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:34:59.366 00:00:12.418 TCP 12.102.0.1:41264 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:36:04.597 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:36:04.619 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.700 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.480 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.548 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.565 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.534 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:36:01.837 00:00:11.799 TCP 12.102.0.1:49266 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:37:03.673 00:00:12.804 TCP 12.102.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:38:06.515 00:00:11.766 TCP 12.102.0.1:36854 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:34:10.096 00:06:00.572 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 02:34:10.094 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 02:39:08.320 00:00:11.931 TCP 12.102.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:40:10.290 00:00:11.853 TCP 12.102.0.1:48500 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:41:05.383 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:41:05.406 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:41:04.511 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:41:05.103 00:00:00.028 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:41:05.430 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:41:04.537 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:41:05.305 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:41:12.183 00:00:11.853 TCP 12.102.0.1:57796 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:42:14.083 00:00:11.796 TCP 12.102.0.1:57308 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:43:15.924 00:00:12.213 TCP 12.102.0.1:42794 -> 1.101.0.1:3000 15 1926 1 2025-11-22 02:44:18.181 00:00:11.808 TCP 12.102.0.1:50122 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:45:20.047 00:00:11.806 TCP 12.102.0.1:55322 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:46:04.846 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:46:04.869 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:46:04.884 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:46:04.688 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:46:04.737 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:46:04.770 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:46:04.730 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:41:10.098 00:06:00.577 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 02:41:10.102 00:06:00.571 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 02:46:21.888 00:00:11.804 TCP 12.102.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:47:23.727 00:00:11.804 TCP 12.102.0.1:38982 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:48:25.572 00:00:11.805 TCP 12.102.0.1:48748 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:49:27.414 00:00:11.799 TCP 12.102.0.1:35986 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:50:29.253 00:00:11.800 TCP 12.102.0.1:51876 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:51:04.842 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:51:05.057 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:51:05.108 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.619 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.706 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.687 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.819 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:51:31.091 00:00:11.817 TCP 12.102.0.1:39764 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:52:32.949 00:00:11.804 TCP 12.102.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:48:10.100 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 02:48:10.104 00:06:00.573 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 02:53:34.790 00:00:11.761 TCP 12.102.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:54:36.600 00:00:11.814 TCP 12.102.0.1:34296 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:55:38.454 00:00:11.800 TCP 12.102.0.1:41686 -> 1.101.0.1:3000 12 1559 1 2025-11-22 02:56:04.860 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 02:56:05.104 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 02:56:05.030 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 02:56:04.884 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 02:56:05.104 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:56:04.902 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 02:56:05.113 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 02:56:40.293 00:00:11.803 TCP 12.102.0.1:58588 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:57:42.136 00:00:11.801 TCP 12.102.0.1:45352 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122821, total packets: 1119, avg bps: 277, avg pps: 0, avg bpp: 109 Time window: 2025-11-22 01:58:54 - 2025-11-22 02:57:53 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0036s User: 0.0027s Wall: 0.0023s flows/second: 68517.4 Runtime: 0.0023s