Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 05:59:17.514 00:00:11.797 TCP 12.102.0.1:54344 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:00:19.349 00:00:11.758 TCP 12.102.0.1:46424 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:01:21.147 00:00:11.815 TCP 12.102.0.1:54286 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:01:37.593 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:01:37.614 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:01:37.682 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:01:37.593 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:01:37.642 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:01:37.762 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:01:37.426 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:02:23.000 00:00:11.803 TCP 12.102.0.1:41036 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:59:10.786 00:05:00.429 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 05:59:10.784 00:05:00.434 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:03:24.837 00:00:11.767 TCP 12.102.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:04:26.639 00:00:11.799 TCP 12.102.0.1:38158 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:05:28.479 00:00:11.804 TCP 12.102.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:06:37.591 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:06:37.765 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:06:37.754 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:06:37.491 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:06:37.541 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:06:37.501 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:06:37.742 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:06:30.331 00:00:11.759 TCP 12.102.0.1:39034 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:07:32.128 00:00:11.801 TCP 12.102.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:08:33.970 00:00:11.760 TCP 12.102.0.1:37408 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:05:10.784 00:05:00.440 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:05:10.788 00:05:00.435 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:09:35.771 00:00:11.801 TCP 12.102.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:10:37.609 00:00:11.823 TCP 12.102.0.1:36220 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:11:37.671 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:11:37.693 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:11:37.793 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:11:37.888 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:11:37.697 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:11:37.536 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:11:37.754 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:11:39.457 00:00:11.808 TCP 12.102.0.1:55104 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:12:41.305 00:00:11.764 TCP 12.102.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:13:43.108 00:00:11.813 TCP 12.102.0.1:45068 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:14:44.961 00:00:11.807 TCP 12.102.0.1:50788 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:11:10.786 00:05:00.441 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:11:10.789 00:05:00.435 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:15:46.809 00:00:11.801 TCP 12.102.0.1:33360 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:16:37.740 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:16:37.840 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:16:37.759 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:16:38.060 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:16:37.878 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:16:37.976 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:16:37.818 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:16:48.650 00:00:11.764 TCP 12.102.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:17:50.458 00:00:11.815 TCP 12.102.0.1:36660 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:18:52.311 00:00:11.798 TCP 12.102.0.1:41802 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:19:54.151 00:00:11.762 TCP 12.102.0.1:59572 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:20:55.953 00:00:11.810 TCP 12.102.0.1:50038 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:17:10.793 00:05:00.433 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:17:10.791 00:05:00.438 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:21:38.017 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:21:38.050 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:21:38.147 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:21:38.126 00:00:00.042 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:21:38.245 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:21:38.094 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:21:37.995 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:21:57.809 00:00:11.838 TCP 12.102.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:22:59.694 00:00:11.802 TCP 12.102.0.1:48616 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:24:01.536 00:00:11.801 TCP 12.102.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:25:03.376 00:00:11.823 TCP 12.102.0.1:49296 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:26:05.234 00:00:11.774 TCP 12.102.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:26:38.004 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:26:38.027 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:26:38.148 00:00:00.039 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:26:38.187 00:00:00.010 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:26:37.876 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:26:38.222 00:00:00.031 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:26:37.940 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:23:10.793 00:05:00.436 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:23:10.796 00:05:00.431 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:27:07.080 00:00:11.796 TCP 12.102.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:28:08.920 00:00:12.498 TCP 12.102.0.1:42250 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:29:11.461 00:00:11.811 TCP 12.102.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:30:13.318 00:00:11.798 TCP 12.102.0.1:41794 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:31:15.155 00:00:11.764 TCP 12.102.0.1:38878 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:31:38.192 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:31:38.215 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:31:38.384 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:31:38.344 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:31:38.095 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:31:38.084 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:31:38.344 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:32:16.969 00:00:11.799 TCP 12.102.0.1:59098 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:29:10.802 00:05:00.425 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:29:10.799 00:05:00.430 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:33:18.807 00:00:11.766 TCP 12.102.0.1:40488 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:34:20.612 00:00:11.810 TCP 12.102.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:35:22.462 00:00:12.243 TCP 12.102.0.1:44140 -> 1.101.0.1:3000 15 1926 1 2025-11-23 06:36:24.743 00:00:11.761 TCP 12.102.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:36:38.177 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:36:38.203 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:36:38.106 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:36:38.258 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:36:38.312 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:36:38.059 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:36:38.156 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:37:26.541 00:00:11.802 TCP 12.102.0.1:37046 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:38:28.380 00:00:11.814 TCP 12.102.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:35:10.809 00:05:00.422 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:35:10.806 00:05:00.427 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:39:30.235 00:00:11.805 TCP 12.102.0.1:52828 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:40:32.078 00:00:12.227 TCP 12.102.0.1:41522 -> 1.101.0.1:3000 15 1926 1 2025-11-23 06:41:38.307 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:41:38.467 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:41:38.357 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:41:38.391 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:41:38.329 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:41:38.282 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:41:38.277 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:41:34.346 00:00:11.806 TCP 12.102.0.1:40904 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:42:36.191 00:00:11.758 TCP 12.102.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:43:37.996 00:00:11.799 TCP 12.102.0.1:59812 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:44:39.832 00:00:11.773 TCP 12.102.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:41:10.809 00:05:00.424 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:41:10.807 00:05:00.429 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:45:41.643 00:00:11.830 TCP 12.102.0.1:39474 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:46:38.498 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:46:38.524 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:46:38.614 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:46:38.332 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:46:38.443 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:46:38.336 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:46:38.475 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:46:43.509 00:00:12.050 TCP 12.102.0.1:53372 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:47:45.597 00:00:11.803 TCP 12.102.0.1:51324 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:48:47.442 00:00:11.817 TCP 12.102.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:49:49.286 00:00:18.864 TCP 12.102.0.1:46446 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:47:10.810 00:05:00.428 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:50:58.191 00:00:11.759 TCP 12.102.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:47:10.812 00:05:00.423 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:51:38.465 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:51:38.489 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:51:38.718 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:51:38.674 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:51:38.525 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:51:38.436 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:51:38.641 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:51:59.997 00:00:11.804 TCP 12.102.0.1:51360 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:53:01.850 00:00:11.802 TCP 12.102.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:54:03.703 00:00:11.804 TCP 12.102.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:55:05.564 00:00:11.871 TCP 12.102.0.1:42588 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:56:07.482 00:00:11.807 TCP 12.102.0.1:60990 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:56:38.852 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 06:56:38.825 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:56:38.747 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 06:56:38.805 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 06:56:38.988 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 06:56:38.805 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 06:56:38.830 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 06:53:10.811 00:05:00.427 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 06:53:10.814 00:05:00.422 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 06:57:09.334 00:00:11.768 TCP 12.102.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:58:11.138 00:00:11.819 TCP 12.102.0.1:49136 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 279, avg pps: 0, avg bpp: 109 Time window: 2025-11-23 05:59:10 - 2025-11-23 06:58:22 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0054s User: 0.0011s Wall: 0.0028s flows/second: 57180.6 Runtime: 0.0029s