Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 19:59:00.217 00:00:11.812 TCP 12.102.0.1:50140 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:00:02.077 00:00:11.797 TCP 12.102.0.1:44268 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:01:03.914 00:00:11.830 TCP 12.102.0.1:40696 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:01:25.478 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:01:25.501 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:01:25.653 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:01:25.571 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:01:25.457 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:01:25.644 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:01:25.451 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:02:05.780 00:00:11.760 TCP 12.102.0.1:60904 -> 1.101.0.1:3000 11 1507 1 2025-11-22 19:59:10.459 00:05:00.591 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 19:59:10.462 00:05:00.587 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:03:07.591 00:00:11.806 TCP 12.102.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:04:09.438 00:00:11.818 TCP 12.102.0.1:35336 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:05:11.297 00:00:11.803 TCP 12.102.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:06:25.309 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:06:13.136 00:00:11.795 TCP 12.102.0.1:46436 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:06:25.331 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:06:25.268 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:06:25.403 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:06:25.647 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:06:25.638 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:06:25.412 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:07:14.969 00:00:11.760 TCP 12.102.0.1:39472 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:08:16.770 00:00:11.807 TCP 12.102.0.1:37154 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:05:10.468 00:05:00.584 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:05:10.471 00:05:00.579 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:09:18.625 00:00:11.806 TCP 12.102.0.1:41724 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:10:20.470 00:00:11.797 TCP 12.102.0.1:38194 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:11:25.852 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:11:25.874 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:11:26.000 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:11:26.044 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:11:25.968 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:11:25.886 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:11:25.932 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:11:22.309 00:00:11.802 TCP 12.102.0.1:41036 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:12:24.148 00:00:11.763 TCP 12.102.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:13:25.950 00:00:11.820 TCP 12.102.0.1:52798 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:14:27.815 00:00:11.807 TCP 12.102.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:11:10.470 00:05:00.581 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:11:10.473 00:05:00.576 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:15:29.664 00:00:11.808 TCP 12.102.0.1:38174 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:16:25.753 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:16:25.693 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:16:25.928 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:16:25.751 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:16:25.808 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:16:25.801 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:16:25.904 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:16:31.509 00:00:11.805 TCP 12.102.0.1:47288 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:17:33.350 00:00:11.796 TCP 12.102.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:18:35.192 00:00:11.807 TCP 12.102.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:19:37.065 00:00:11.761 TCP 12.102.0.1:53960 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:20:38.863 00:00:11.850 TCP 12.102.0.1:44454 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:17:10.474 00:05:00.576 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:17:10.472 00:05:00.581 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:21:25.778 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:21:25.800 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:21:25.742 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:21:25.758 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:21:25.994 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:21:25.862 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:21:25.807 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:21:40.753 00:00:11.797 TCP 12.102.0.1:48716 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:22:42.588 00:00:11.802 TCP 12.102.0.1:55248 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:23:44.429 00:00:11.796 TCP 12.102.0.1:33934 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:24:46.267 00:00:11.823 TCP 12.102.0.1:60236 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:25:48.132 00:00:11.763 TCP 12.102.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:26:25.931 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:26:26.049 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:26:25.710 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:26:25.974 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:26:26.060 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:26:25.949 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:26:25.910 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:26:49.934 00:00:11.781 TCP 12.102.0.1:43804 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:23:10.491 00:05:00.562 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:23:10.474 00:05:00.581 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:27:51.750 00:00:11.799 TCP 12.102.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:28:53.588 00:00:11.801 TCP 12.102.0.1:49800 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:29:55.430 00:00:11.799 TCP 12.102.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:30:57.264 00:00:11.818 TCP 12.102.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:31:25.908 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:31:26.008 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:31:26.102 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:31:26.001 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:31:26.103 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:31:25.891 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:31:25.886 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:31:59.114 00:00:11.881 TCP 12.102.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:29:10.480 00:05:00.577 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:29:10.482 00:05:00.572 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:33:01.063 00:00:11.808 TCP 12.102.0.1:47036 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:34:02.913 00:00:11.880 TCP 12.102.0.1:33874 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:35:04.830 00:00:11.803 TCP 12.102.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:36:06.674 00:00:11.804 TCP 12.102.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:36:26.172 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:36:26.233 00:00:00.045 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:36:26.069 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:36:26.137 00:00:00.044 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:36:25.876 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:36:26.009 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:36:26.149 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:37:08.523 00:00:11.800 TCP 12.102.0.1:50752 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:38:10.366 00:00:11.834 TCP 12.102.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:35:10.492 00:05:00.565 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:35:10.495 00:05:00.560 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:39:12.242 00:00:11.816 TCP 12.102.0.1:47012 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:40:14.095 00:00:11.797 TCP 12.102.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:41:26.212 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:41:26.198 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:41:26.331 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:41:26.315 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:41:26.400 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:41:26.276 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:41:26.189 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:41:15.939 00:00:11.813 TCP 12.102.0.1:39980 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:42:17.788 00:00:11.755 TCP 12.102.0.1:48864 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:43:19.581 00:00:11.801 TCP 12.102.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:44:21.416 00:00:11.804 TCP 12.102.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:41:10.494 00:05:00.566 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:41:10.496 00:05:00.562 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:45:23.261 00:00:11.797 TCP 12.102.0.1:41180 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:46:26.445 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:46:26.468 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:46:26.402 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:46:26.579 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:46:26.291 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:46:26.555 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:46:26.194 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:46:25.098 00:00:11.761 TCP 12.102.0.1:58344 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:47:26.901 00:00:11.799 TCP 12.102.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:48:28.739 00:00:12.158 TCP 12.102.0.1:43238 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:49:30.938 00:00:11.770 TCP 12.102.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:50:32.748 00:00:11.798 TCP 12.102.0.1:48976 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:47:10.495 00:05:00.568 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:47:10.498 00:05:00.563 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:51:26.236 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:51:26.455 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:51:26.478 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:51:26.455 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:51:26.400 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:51:26.351 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:51:26.259 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:51:34.583 00:00:11.809 TCP 12.102.0.1:52748 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:52:36.429 00:00:11.797 TCP 12.102.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:53:38.264 00:00:11.800 TCP 12.102.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:54:40.102 00:00:11.801 TCP 12.102.0.1:50620 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:55:41.940 00:00:11.803 TCP 12.102.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:56:26.504 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 20:56:26.691 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:56:26.565 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 20:56:26.600 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 20:56:26.629 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 20:56:26.513 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 20:56:26.480 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 20:56:43.782 00:00:11.809 TCP 12.102.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:53:10.505 00:05:00.556 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 20:53:10.503 00:05:00.561 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 20:57:45.627 00:00:11.758 TCP 12.102.0.1:51692 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123334, total packets: 1130, avg bps: 277, avg pps: 0, avg bpp: 109 Time window: 2025-11-22 19:59:00 - 2025-11-22 20:58:11 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0054s User: 0.0009s Wall: 0.0031s flows/second: 53096.6 Runtime: 0.0031s