Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 21:54:12.349 00:06:00.166 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 21:59:25.944 00:00:11.811 TCP 12.102.0.1:36470 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:00:27.782 00:00:11.765 TCP 12.102.0.1:40800 -> 1.101.0.1:3000 11 1507 1 2025-11-25 21:56:12.348 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:01:29.586 00:00:11.767 TCP 12.102.0.1:37400 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:02:31.395 00:00:11.772 TCP 12.102.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:02:54.456 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:02:54.411 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:02:54.270 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:02:54.603 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:02:54.480 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:02:54.479 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:02:54.666 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:03:33.201 00:00:11.761 TCP 12.102.0.1:57582 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:04:35.003 00:00:11.801 TCP 12.102.0.1:46686 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:05:36.844 00:00:11.822 TCP 12.102.0.1:39588 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:01:12.352 00:06:00.166 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 22:06:38.701 00:00:11.810 TCP 12.102.0.1:37726 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:07:54.527 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:07:54.550 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:07:40.553 00:00:11.797 TCP 12.102.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:07:54.792 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:07:54.676 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:07:54.575 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:07:54.578 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:07:54.692 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:03:12.350 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:08:42.390 00:00:11.805 TCP 12.102.0.1:58918 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:09:44.233 00:00:11.761 TCP 12.102.0.1:54356 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:10:46.040 00:00:11.801 TCP 12.102.0.1:54884 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:11:47.876 00:00:11.822 TCP 12.102.0.1:37888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:12:54.856 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:12:54.894 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:12:54.778 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:12:54.863 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:12:54.686 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:12:54.719 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:12:54.834 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:12:49.733 00:00:11.811 TCP 12.102.0.1:51912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:08:12.353 00:06:00.166 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 22:13:51.583 00:00:11.805 TCP 12.102.0.1:36146 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:14:53.430 00:00:11.816 TCP 12.102.0.1:58326 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:10:12.352 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:15:55.281 00:00:11.857 TCP 12.102.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:16:57.181 00:00:11.823 TCP 12.102.0.1:46544 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:17:55.024 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:17:55.047 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:17:54.770 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:17:55.256 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:17:54.886 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:17:55.040 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:17:55.229 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:17:59.065 00:00:11.758 TCP 12.102.0.1:32806 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:19:00.865 00:00:11.763 TCP 12.102.0.1:50674 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:20:02.669 00:00:11.759 TCP 12.102.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:15:12.355 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 22:21:04.468 00:00:11.755 TCP 12.102.0.1:45048 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:17:12.352 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:22:06.266 00:00:11.783 TCP 12.102.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:22:54.972 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:22:54.994 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:22:55.121 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:22:54.982 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:22:54.937 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:22:55.183 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:22:55.061 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:23:08.083 00:00:11.802 TCP 12.102.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:24:09.921 00:00:11.819 TCP 12.102.0.1:60132 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:25:11.779 00:00:11.857 TCP 12.102.0.1:49064 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:26:13.676 00:00:11.765 TCP 12.102.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:22:12.355 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 22:27:15.475 00:00:11.772 TCP 12.102.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:27:54.937 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:27:54.959 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:27:55.071 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:27:54.973 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:27:54.953 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:27:55.072 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:27:55.188 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:28:17.283 00:00:11.809 TCP 12.102.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:24:12.352 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:29:19.134 00:00:11.817 TCP 12.102.0.1:36982 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:30:20.988 00:00:11.803 TCP 12.102.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:31:22.821 00:00:11.804 TCP 12.102.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:32:24.663 00:00:11.830 TCP 12.102.0.1:46962 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:32:55.036 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:32:55.152 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:32:55.321 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:32:55.055 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:32:55.168 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:32:55.325 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:32:55.014 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:33:26.533 00:00:12.453 TCP 12.102.0.1:33698 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:29:12.356 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 22:34:29.029 00:00:11.764 TCP 12.102.0.1:47186 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:35:30.826 00:00:11.801 TCP 12.102.0.1:56228 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:31:12.354 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:36:32.668 00:00:11.769 TCP 12.102.0.1:50198 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:37:34.479 00:00:11.802 TCP 12.102.0.1:55928 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:37:55.257 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:37:55.054 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:37:55.386 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:37:55.123 00:00:00.039 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:37:55.438 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:37:55.219 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:37:55.234 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:38:36.321 00:00:11.817 TCP 12.102.0.1:43480 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:39:38.179 00:00:11.754 TCP 12.102.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:40:39.970 00:00:11.801 TCP 12.102.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:36:12.358 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 22:41:41.814 00:00:11.833 TCP 12.102.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:42:55.304 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:42:55.327 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:42:55.160 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:42:43.690 00:00:11.800 TCP 12.102.0.1:41212 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:42:55.522 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:42:55.432 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:42:55.403 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:42:55.477 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:38:12.356 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:43:45.525 00:00:11.762 TCP 12.102.0.1:53766 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:44:47.320 00:00:11.807 TCP 12.102.0.1:37190 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:45:49.168 00:00:11.803 TCP 12.102.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:46:51.019 00:00:11.764 TCP 12.102.0.1:55712 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:47:55.199 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:47:55.221 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:47:55.569 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:47:55.578 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:47:55.552 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:47:55.444 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:47:55.523 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:47:52.819 00:00:11.798 TCP 12.102.0.1:36260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:43:12.359 00:06:00.178 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 22:48:54.659 00:00:11.811 TCP 12.102.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:49:56.510 00:00:11.816 TCP 12.102.0.1:41984 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:45:12.357 00:06:00.183 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:50:58.367 00:00:11.790 TCP 12.102.0.1:35156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:52:00.203 00:00:13.353 TCP 12.102.0.1:43190 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:52:55.747 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:52:55.771 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:52:55.794 00:00:00.015 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:52:55.797 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:52:55.756 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:52:55.591 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:52:55.465 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:53:03.597 00:00:11.777 TCP 12.102.0.1:42706 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:54:05.412 00:00:11.815 TCP 12.102.0.1:60870 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:50:12.361 00:06:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 22:55:07.265 00:00:11.777 TCP 12.102.0.1:33730 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:56:09.084 00:00:11.811 TCP 12.102.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:52:12.360 00:06:00.182 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 22:57:10.932 00:00:11.813 TCP 12.102.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:57:55.670 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 22:57:55.694 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 22:57:55.448 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 22:57:55.819 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 22:57:55.773 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 22:57:55.812 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 22:57:55.560 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 22:58:12.798 00:00:11.816 TCP 12.102.0.1:32946 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 257, avg pps: 0, avg bpp: 108 Time window: 2025-11-25 21:54:12 - 2025-11-25 22:58:24 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0028s User: 0.0028s Wall: 0.0023s flows/second: 68907.3 Runtime: 0.0023s