Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 04:54:12.507 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 04:59:08.837 00:00:11.804 TCP 12.102.0.1:55272 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:00:10.681 00:00:11.802 TCP 12.102.0.1:58392 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:56:12.504 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:01:12.552 00:00:11.758 TCP 12.102.0.1:44266 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:02:14.346 00:00:11.816 TCP 12.102.0.1:35564 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:03:02.778 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:03:02.801 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:03:03.094 00:00:00.001 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:03:03.012 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:03:02.980 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:03:02.729 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:03:02.608 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:03:16.202 00:00:11.798 TCP 12.102.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:04:18.065 00:00:11.812 TCP 12.102.0.1:41092 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:05:19.922 00:00:11.787 TCP 12.102.0.1:33340 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:01:12.508 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 05:06:21.749 00:00:11.772 TCP 12.102.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:07:23.558 00:00:11.796 TCP 12.102.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:08:03.040 00:00:00.033 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:08:03.062 00:00:00.033 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:08:03.184 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:08:03.224 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:08:03.255 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:08:03.405 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:08:03.175 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:03:12.508 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:08:25.392 00:00:11.765 TCP 12.102.0.1:49110 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:09:27.203 00:00:11.797 TCP 12.102.0.1:45174 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:10:29.067 00:00:11.816 TCP 12.102.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:11:30.914 00:00:11.827 TCP 12.102.0.1:49390 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:12:32.782 00:00:11.762 TCP 12.102.0.1:54306 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:13:03.139 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:13:03.282 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:13:03.364 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:13:03.016 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:13:02.965 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:13:03.099 00:00:00.035 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:13:03.116 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:08:12.512 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 05:13:34.592 00:00:11.758 TCP 12.102.0.1:58888 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:14:36.392 00:00:11.878 TCP 12.102.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:10:12.510 00:06:00.154 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:15:38.278 00:00:11.810 TCP 12.102.0.1:52816 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:16:40.125 00:00:11.793 TCP 12.102.0.1:36720 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:17:41.957 00:00:11.812 TCP 12.102.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:18:03.119 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:18:03.143 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:18:03.386 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:18:03.647 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:18:03.472 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:18:03.385 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:18:03.378 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:18:43.802 00:00:11.803 TCP 12.102.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:19:45.652 00:00:11.769 TCP 12.102.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:15:12.512 00:06:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 05:20:47.459 00:00:11.768 TCP 12.102.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:21:49.269 00:00:11.800 TCP 12.102.0.1:58556 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:17:12.513 00:06:00.152 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:23:03.195 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:22:51.107 00:00:13.432 TCP 12.102.0.1:48822 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:23:03.219 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:23:03.459 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:23:03.351 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:23:03.323 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:23:03.351 00:00:00.033 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:23:03.502 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:23:54.576 00:00:11.757 TCP 12.102.0.1:41844 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:24:56.374 00:00:11.821 TCP 12.102.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:25:58.232 00:00:11.807 TCP 12.102.0.1:39074 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:27:00.080 00:00:11.796 TCP 12.102.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:22:12.516 00:06:00.148 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 05:28:03.628 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:28:03.650 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:28:03.595 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:28:03.667 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:28:03.346 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:28:03.511 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:28:03.459 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:28:01.914 00:00:11.868 TCP 12.102.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:24:12.515 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:29:03.823 00:00:11.797 TCP 12.102.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:30:05.656 00:00:11.814 TCP 12.102.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:31:07.509 00:00:11.804 TCP 12.102.0.1:38256 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:32:09.350 00:00:11.761 TCP 12.102.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:33:03.727 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:33:03.751 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:33:03.795 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:33:03.820 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:33:03.720 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:33:03.811 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:33:03.697 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:33:11.151 00:00:11.809 TCP 12.102.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:29:12.518 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 05:34:12.997 00:00:11.800 TCP 12.102.0.1:34472 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:35:14.837 00:00:11.770 TCP 12.102.0.1:41418 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:31:12.515 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:36:16.649 00:00:11.818 TCP 12.102.0.1:60630 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:37:18.512 00:00:11.808 TCP 12.102.0.1:51044 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:38:03.761 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:38:03.784 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:38:03.713 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:38:03.746 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:38:03.655 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:38:03.602 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:38:03.563 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:38:20.357 00:00:11.842 TCP 12.102.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:39:22.239 00:00:11.853 TCP 12.102.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:40:24.132 00:00:11.802 TCP 12.102.0.1:55032 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:36:12.519 00:06:00.148 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 05:41:25.971 00:00:11.757 TCP 12.102.0.1:51488 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:42:27.769 00:00:11.804 TCP 12.102.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:43:03.750 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:43:03.773 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:43:03.897 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:43:03.905 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:43:03.794 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:43:03.949 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:43:03.843 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:38:12.517 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:43:29.617 00:00:11.794 TCP 12.102.0.1:58082 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:44:31.451 00:00:11.804 TCP 12.102.0.1:57228 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:45:33.293 00:00:11.764 TCP 12.102.0.1:46114 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:46:35.096 00:00:12.218 TCP 12.102.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:47:37.350 00:00:11.807 TCP 12.102.0.1:53644 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:48:04.294 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:48:04.017 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:48:03.976 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:48:04.114 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:48:04.077 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:48:04.358 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:48:04.270 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:43:12.533 00:06:00.135 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 05:48:39.197 00:00:11.827 TCP 12.102.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:49:41.079 00:00:11.756 TCP 12.102.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:45:12.520 00:06:00.151 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:50:42.876 00:00:11.800 TCP 12.102.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:51:44.718 00:00:11.766 TCP 12.102.0.1:38702 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:53:03.951 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:52:46.524 00:00:11.820 TCP 12.102.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:53:03.974 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:53:04.063 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:53:04.151 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:53:04.069 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:53:04.258 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:53:03.760 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:53:48.387 00:00:11.783 TCP 12.102.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:54:50.206 00:00:11.810 TCP 12.102.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:50:12.523 00:06:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 05:55:52.078 00:00:11.762 TCP 12.102.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:56:53.880 00:00:11.806 TCP 12.102.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:52:12.521 00:06:00.158 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 05:58:03.996 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 05:58:04.020 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 05:58:04.165 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:58:04.142 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 05:58:04.256 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 05:58:04.031 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 05:58:04.005 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 05:57:55.722 00:00:11.804 TCP 12.102.0.1:48628 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 258, avg pps: 0, avg bpp: 108 Time window: 2025-11-26 04:54:12 - 2025-11-26 05:58:12 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0048s User: 0.0019s Wall: 0.0024s flows/second: 66039.0 Runtime: 0.0024s