Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 06:58:45.226 00:00:11.803 TCP 12.102.0.1:46142 -> 1.101.0.1:3000 11 1507 1 2025-11-25 06:59:47.082 00:00:11.760 TCP 12.102.0.1:36434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:00:48.878 00:00:11.857 TCP 12.102.0.1:41004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:01:50.777 00:00:11.802 TCP 12.102.0.1:56526 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:02:36.391 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:02:36.413 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:02:36.645 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:02:36.472 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:02:36.609 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:02:36.330 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:02:36.532 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:02:52.618 00:00:11.800 TCP 12.102.0.1:55202 -> 1.101.0.1:3000 11 1507 1 2025-11-25 06:58:12.054 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 07:03:54.455 00:00:11.804 TCP 12.102.0.1:49718 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:04:56.300 00:00:11.812 TCP 12.102.0.1:49662 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:00:12.051 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 07:05:58.153 00:00:11.892 TCP 12.102.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:07:00.083 00:00:11.759 TCP 12.102.0.1:60624 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:07:36.459 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:07:36.489 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:07:36.483 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:07:36.703 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:07:36.331 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:07:36.675 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:07:36.609 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:08:01.882 00:00:11.816 TCP 12.102.0.1:40314 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:09:03.733 00:00:11.798 TCP 12.102.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:05:12.056 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 07:10:05.572 00:00:11.804 TCP 12.102.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:11:07.414 00:00:11.798 TCP 12.102.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:07:12.052 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 07:12:09.252 00:00:11.805 TCP 12.102.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:12:36.571 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:12:36.594 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:12:36.626 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:12:36.731 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:12:36.782 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:12:36.637 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:12:36.791 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:13:11.100 00:00:11.809 TCP 12.102.0.1:33138 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:14:12.946 00:00:11.820 TCP 12.102.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:15:14.807 00:00:11.802 TCP 12.102.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:16:16.647 00:00:11.761 TCP 12.102.0.1:60692 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:12:12.058 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 07:17:18.448 00:00:11.808 TCP 12.102.0.1:42914 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:17:37.110 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:17:37.280 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:17:37.335 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:17:37.251 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:17:37.200 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:17:37.239 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:17:37.088 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:18:20.291 00:00:11.799 TCP 12.102.0.1:40904 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:14:12.056 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 07:19:22.138 00:00:11.815 TCP 12.102.0.1:59058 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:20:23.991 00:00:11.802 TCP 12.102.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:21:25.833 00:00:11.799 TCP 12.102.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:22:36.961 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:22:36.788 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:22:37.135 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:22:27.671 00:00:11.761 TCP 12.102.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:22:37.159 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:22:37.154 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:22:37.170 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:22:37.131 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:23:29.474 00:00:11.804 TCP 12.102.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:19:12.059 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 07:24:31.316 00:00:11.814 TCP 12.102.0.1:59324 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:25:33.170 00:00:11.755 TCP 12.102.0.1:46686 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:21:12.058 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 07:26:34.961 00:00:11.802 TCP 12.102.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:27:36.874 00:00:00.015 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:27:37.189 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:27:37.212 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:27:37.006 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:27:37.015 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:27:37.116 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:27:37.114 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:27:36.796 00:00:11.805 TCP 12.102.0.1:52040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:28:38.643 00:00:11.801 TCP 12.102.0.1:35970 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:29:40.484 00:00:11.800 TCP 12.102.0.1:47744 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:30:42.326 00:00:11.812 TCP 12.102.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:26:12.061 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 07:31:44.175 00:00:11.796 TCP 12.102.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:32:37.008 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:32:37.030 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:32:37.137 00:00:00.034 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:32:37.116 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:32:37.018 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:32:37.030 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:32:37.348 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:32:46.020 00:00:11.797 TCP 12.102.0.1:37310 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:28:12.059 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 07:33:47.860 00:00:11.796 TCP 12.102.0.1:59694 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:34:49.699 00:00:13.349 TCP 12.102.0.1:58354 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:35:53.085 00:00:11.802 TCP 12.102.0.1:55152 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:36:54.931 00:00:11.815 TCP 12.102.0.1:35792 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:37:37.116 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:37:37.139 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:37:37.306 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:37:37.281 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:37:37.121 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:37:37.325 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:37:37.130 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:37:56.786 00:00:11.797 TCP 12.102.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:33:12.068 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 07:38:58.618 00:00:11.761 TCP 12.102.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:40:00.416 00:00:11.805 TCP 12.102.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:35:12.065 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 07:41:02.257 00:00:11.802 TCP 12.102.0.1:39842 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:42:04.099 00:00:11.801 TCP 12.102.0.1:55606 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:42:37.423 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:42:37.330 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:42:37.327 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:42:37.374 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:42:37.459 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:42:37.286 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:42:37.400 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:43:05.935 00:00:11.817 TCP 12.102.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:44:07.786 00:00:11.801 TCP 12.102.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:40:12.069 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 07:45:09.624 00:00:11.805 TCP 12.102.0.1:36512 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:46:11.467 00:00:11.886 TCP 12.102.0.1:48886 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:42:12.066 00:06:00.169 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 07:47:13.394 00:00:11.808 TCP 12.102.0.1:57358 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:47:37.306 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:47:37.330 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:47:37.136 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:47:37.512 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:47:37.126 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:47:37.154 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:47:37.099 00:00:00.038 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:48:15.251 00:00:11.819 TCP 12.102.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:49:17.107 00:00:11.853 TCP 12.102.0.1:44658 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:50:19.002 00:00:11.767 TCP 12.102.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:51:20.801 00:00:11.802 TCP 12.102.0.1:59440 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:47:12.070 00:06:00.165 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 07:52:22.639 00:00:11.768 TCP 12.102.0.1:42326 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:52:37.501 00:00:00.028 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:52:37.526 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:52:37.597 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:52:37.536 00:00:00.013 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:52:37.429 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:52:37.600 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:52:37.479 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:53:24.443 00:00:11.759 TCP 12.102.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:49:12.069 00:06:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 07:54:26.244 00:00:11.824 TCP 12.102.0.1:53846 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:55:28.107 00:00:11.806 TCP 12.102.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:56:29.951 00:00:11.807 TCP 12.102.0.1:57144 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:57:37.538 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 07:57:37.650 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:57:37.564 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 07:57:37.578 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 07:57:37.683 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 07:57:37.325 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 07:57:37.516 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 07:57:31.796 00:00:11.812 TCP 12.102.0.1:35060 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:58:33.649 00:00:11.815 TCP 12.102.0.1:38988 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123857, total packets: 1125, avg bps: 272, avg pps: 0, avg bpp: 110 Time window: 2025-11-25 06:58:12 - 2025-11-25 07:58:45 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0044s User: 0.0011s Wall: 0.0023s flows/second: 68737.8 Runtime: 0.0023s