Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 17:59:20.239 00:00:11.796 TCP 12.102.0.1:46540 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:00:22.080 00:00:11.753 TCP 12.102.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:01:22.922 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:01:23.023 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:01:22.948 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:01:23.015 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:01:22.941 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:01:23.145 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:01:22.899 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:01:23.879 00:00:11.800 TCP 12.102.0.1:56946 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:02:25.718 00:00:11.805 TCP 12.102.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:58:10.400 00:06:00.591 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 17:58:10.403 00:06:00.586 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 18:03:27.561 00:00:11.780 TCP 12.102.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:04:29.381 00:00:11.810 TCP 12.102.0.1:39674 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:05:31.229 00:00:11.808 TCP 12.102.0.1:42892 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:06:23.339 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:06:23.055 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:06:23.416 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:06:23.311 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:06:23.393 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:06:23.186 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:06:23.319 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:06:33.084 00:00:11.797 TCP 12.102.0.1:50416 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:07:34.924 00:00:11.826 TCP 12.102.0.1:39288 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:08:36.788 00:00:11.807 TCP 12.102.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:09:38.635 00:00:11.804 TCP 12.102.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:05:10.410 00:06:00.579 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 18:05:10.407 00:06:00.584 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 18:10:40.479 00:00:11.851 TCP 12.102.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:11:23.089 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:11:23.112 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:11:23.062 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:11:23.347 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:11:23.104 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:11:23.102 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:11:22.966 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:11:42.358 00:00:11.830 TCP 12.102.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:12:44.225 00:00:11.803 TCP 12.102.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:13:46.086 00:00:11.768 TCP 12.102.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:14:47.892 00:00:12.527 TCP 12.102.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:15:50.464 00:00:11.800 TCP 12.102.0.1:33394 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:16:23.477 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:16:23.499 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:16:23.641 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:16:23.462 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:16:23.515 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:16:23.700 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:16:23.336 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:16:52.307 00:00:11.799 TCP 12.102.0.1:41008 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:12:10.409 00:06:00.584 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 18:12:10.412 00:06:00.578 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 18:17:54.148 00:00:11.813 TCP 12.102.0.1:39958 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:18:55.999 00:00:11.800 TCP 12.102.0.1:59300 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:19:57.840 00:00:12.507 TCP 12.102.0.1:44008 -> 1.101.0.1:3000 15 1926 1 2025-11-22 18:21:00.387 00:00:11.813 TCP 12.102.0.1:40262 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:21:23.266 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:21:23.289 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:21:23.152 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:21:23.646 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:21:23.507 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:21:23.249 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:21:23.418 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:22:02.240 00:00:11.804 TCP 12.102.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:23:04.084 00:00:11.797 TCP 12.102.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:19:10.411 00:06:00.582 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 18:19:10.414 00:06:00.577 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 18:24:05.920 00:00:11.826 TCP 12.102.0.1:53372 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:25:07.789 00:00:11.821 TCP 12.102.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:26:09.648 00:00:11.826 TCP 12.102.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:26:23.656 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:26:23.680 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:26:23.614 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:26:23.585 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:26:23.863 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:26:23.725 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:26:23.635 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:27:11.513 00:00:11.762 TCP 12.102.0.1:42514 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:28:13.314 00:00:11.803 TCP 12.102.0.1:41896 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:29:15.149 00:00:11.807 TCP 12.102.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:30:16.993 00:00:11.800 TCP 12.102.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:26:10.412 00:06:00.584 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 18:26:10.415 00:06:00.578 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 18:31:23.709 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:31:23.732 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:31:23.558 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:31:23.657 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:31:23.748 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:31:23.476 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:31:23.613 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:31:18.832 00:00:11.768 TCP 12.102.0.1:49498 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:32:20.645 00:00:11.804 TCP 12.102.0.1:57144 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:33:22.487 00:00:11.807 TCP 12.102.0.1:34998 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:34:24.343 00:00:11.759 TCP 12.102.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:35:26.138 00:00:11.831 TCP 12.102.0.1:37948 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:36:23.563 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:36:23.488 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:36:23.586 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:36:23.737 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:36:23.912 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:36:23.708 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:36:23.623 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:36:28.008 00:00:11.759 TCP 12.102.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:37:29.809 00:00:11.772 TCP 12.102.0.1:41002 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:33:10.414 00:06:00.584 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 18:33:10.417 00:06:00.578 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 18:38:31.622 00:00:11.805 TCP 12.102.0.1:35286 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:39:33.464 00:00:11.768 TCP 12.102.0.1:37666 -> 1.101.0.1:3000 12 1559 1 2025-11-22 18:40:35.261 00:00:11.762 TCP 12.102.0.1:33510 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:41:23.735 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:41:23.756 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:41:23.888 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:41:23.952 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:41:23.797 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:41:24.033 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:41:23.951 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:41:37.075 00:00:11.799 TCP 12.102.0.1:54526 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:42:38.911 00:00:14.672 TCP 12.102.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:43:43.612 00:00:11.762 TCP 12.102.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:44:45.424 00:00:11.805 TCP 12.102.0.1:47148 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:40:10.416 00:06:00.583 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-22 18:40:10.418 00:06:00.578 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-22 18:45:47.276 00:00:11.771 TCP 12.102.0.1:37444 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:46:23.871 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:46:24.228 00:00:00.046 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:46:24.345 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:46:24.021 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:46:24.019 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:46:24.095 00:00:00.035 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:46:23.848 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:46:49.091 00:00:11.805 TCP 12.102.0.1:59212 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:47:50.941 00:00:11.814 TCP 12.102.0.1:51718 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:48:52.786 00:00:11.801 TCP 12.102.0.1:35550 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:49:54.629 00:00:11.819 TCP 12.102.0.1:51008 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:47:10.416 00:05:00.587 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 18:50:56.485 00:00:11.811 TCP 12.102.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:47:10.418 00:05:00.582 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 18:51:23.964 00:00:00.019 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:51:24.073 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:51:24.024 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:51:24.138 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:51:24.164 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:51:23.961 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:51:23.941 00:00:00.019 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:51:58.336 00:00:11.809 TCP 12.102.0.1:58362 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:53:00.175 00:00:11.800 TCP 12.102.0.1:39954 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:54:02.027 00:00:11.809 TCP 12.102.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:55:03.882 00:00:11.808 TCP 12.102.0.1:39976 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:56:05.737 00:00:11.810 TCP 12.102.0.1:55628 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:56:23.913 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 18:56:23.937 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 18:56:24.059 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:56:24.090 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 18:56:24.204 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 18:56:24.298 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 18:56:24.266 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 18:53:10.443 00:05:00.559 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 18:53:10.439 00:05:00.564 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 18:57:07.582 00:00:11.806 TCP 12.102.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:58:09.430 00:00:11.815 TCP 12.102.0.1:59458 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124051, total packets: 1139, avg bps: 274, avg pps: 0, avg bpp: 108 Time window: 2025-11-22 17:58:10 - 2025-11-22 18:58:21 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0051s User: 0.0015s Wall: 0.0026s flows/second: 61703.6 Runtime: 0.0026s