Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 15:59:16.021 00:00:11.804 TCP 12.102.0.1:59630 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:00:17.867 00:00:11.795 TCP 12.102.0.1:60272 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:01:19.701 00:00:12.231 TCP 12.102.0.1:44848 -> 1.101.0.1:3000 15 1926 1 2025-11-25 15:57:12.241 00:06:00.165 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 16:02:21.974 00:00:11.806 TCP 12.102.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:02:47.259 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:02:47.281 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.415 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.340 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.431 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.215 00:00:00.042 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.296 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:03:23.829 00:00:12.894 TCP 12.102.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:59:12.239 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 16:04:26.760 00:00:11.800 TCP 12.102.0.1:49314 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:05:28.608 00:00:11.800 TCP 12.102.0.1:57964 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:06:30.450 00:00:11.867 TCP 12.102.0.1:58872 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:07:32.354 00:00:11.787 TCP 12.102.0.1:57656 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:07:47.854 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:07:48.191 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:07:47.896 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:07:48.074 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:07:47.857 00:00:00.029 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:07:47.941 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:07:47.832 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:08:34.181 00:00:11.797 TCP 12.102.0.1:47016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:04:12.245 00:06:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 16:09:36.020 00:00:11.805 TCP 12.102.0.1:48792 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:10:37.865 00:00:11.756 TCP 12.102.0.1:49904 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:06:12.240 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 16:11:39.659 00:00:11.817 TCP 12.102.0.1:47156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:12:47.515 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:12:47.538 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.737 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.669 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.540 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.678 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.454 00:00:00.012 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:12:41.511 00:00:11.801 TCP 12.102.0.1:55164 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:13:43.361 00:00:11.830 TCP 12.102.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:14:45.227 00:00:11.820 TCP 12.102.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:15:47.089 00:00:11.764 TCP 12.102.0.1:45740 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:11:12.243 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 16:16:48.898 00:00:11.797 TCP 12.102.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:17:47.649 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:17:47.671 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.704 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.708 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.763 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.767 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.472 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:17:50.736 00:00:11.763 TCP 12.102.0.1:59980 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:13:12.242 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 16:18:52.536 00:00:11.798 TCP 12.102.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:19:54.370 00:00:11.779 TCP 12.102.0.1:59060 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:20:56.188 00:00:11.760 TCP 12.102.0.1:49440 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:21:57.992 00:00:11.771 TCP 12.102.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:22:47.633 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:22:47.656 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.674 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.885 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.578 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.677 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.810 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:22:59.801 00:00:11.852 TCP 12.102.0.1:51182 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:18:12.245 00:06:00.174 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 16:24:01.691 00:00:11.803 TCP 12.102.0.1:48364 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:25:03.527 00:00:11.758 TCP 12.102.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:20:12.242 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 16:26:05.326 00:00:12.226 TCP 12.102.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:27:07.590 00:00:11.798 TCP 12.102.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:27:48.188 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.129 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.271 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.027 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.322 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.003 00:00:00.013 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.166 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:28:09.430 00:00:11.822 TCP 12.102.0.1:53968 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:29:11.291 00:00:11.868 TCP 12.102.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:25:12.250 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 16:30:13.202 00:00:11.806 TCP 12.102.0.1:51094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:31:15.076 00:00:12.235 TCP 12.102.0.1:47634 -> 1.101.0.1:3000 15 1926 1 2025-11-25 16:27:12.247 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 16:32:17.347 00:00:11.819 TCP 12.102.0.1:59152 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:32:48.004 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:32:48.027 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.272 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.112 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.072 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:32:47.918 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:32:47.968 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:33:19.199 00:00:11.801 TCP 12.102.0.1:46858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:34:21.067 00:00:11.807 TCP 12.102.0.1:41346 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:35:22.912 00:00:11.843 TCP 12.102.0.1:51610 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:36:24.791 00:00:11.810 TCP 12.102.0.1:33224 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:32:12.251 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 16:37:26.633 00:00:11.807 TCP 12.102.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:37:48.238 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:37:47.961 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.266 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.130 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.218 00:00:00.036 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:37:47.949 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.215 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:38:28.472 00:00:11.804 TCP 12.102.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:34:12.248 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 16:39:30.319 00:00:11.766 TCP 12.102.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:40:32.124 00:00:11.795 TCP 12.102.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:41:33.965 00:00:11.838 TCP 12.102.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:42:35.842 00:00:11.762 TCP 12.102.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:42:47.924 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.257 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.270 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.232 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.259 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.262 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:42:47.900 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:43:37.646 00:00:11.800 TCP 12.102.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:39:12.252 00:06:00.174 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 16:44:39.497 00:00:11.815 TCP 12.102.0.1:42874 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:45:41.350 00:00:12.398 TCP 12.102.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:41:12.249 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 16:46:43.793 00:00:11.768 TCP 12.102.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:47:48.456 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.580 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.611 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.390 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.671 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.252 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.434 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:47:45.596 00:00:11.821 TCP 12.102.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:48:47.459 00:00:11.813 TCP 12.102.0.1:33362 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:49:49.316 00:00:11.810 TCP 12.102.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:50:51.171 00:00:11.809 TCP 12.102.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:46:12.256 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 16:51:53.025 00:00:11.846 TCP 12.102.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:52:48.478 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.076 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.313 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.253 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.275 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.452 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.456 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:52:54.911 00:00:11.824 TCP 12.102.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:48:12.253 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 16:53:56.774 00:00:11.802 TCP 12.102.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:54:58.617 00:00:11.804 TCP 12.102.0.1:43976 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:56:00.458 00:00:11.805 TCP 12.102.0.1:53454 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:57:02.304 00:00:11.767 TCP 12.102.0.1:49232 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:57:48.334 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 16:57:48.357 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.443 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.625 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.401 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.562 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.372 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 16:58:04.111 00:00:11.798 TCP 12.102.0.1:60390 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:53:12.256 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-11-25 15:57:12 - 2025-11-25 16:59:12 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0056s User: 0.0008s Wall: 0.0022s flows/second: 71074.7 Runtime: 0.0023s