Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 05:58:57.562 00:00:11.810 TCP 12.102.0.1:34104 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:59:59.409 00:00:11.768 TCP 12.102.0.1:41512 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:01:01.221 00:00:12.237 TCP 12.102.0.1:41784 -> 1.101.0.1:3000 15 1926 1 2025-11-26 06:02:03.496 00:00:11.801 TCP 12.102.0.1:41778 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:57:12.524 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 06:03:03.972 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:03:03.994 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:03:04.299 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:03:04.480 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:03:04.251 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:03:04.494 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:03:04.308 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:03:05.335 00:00:11.799 TCP 12.102.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:59:12.521 00:06:00.158 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 06:04:07.186 00:00:11.797 TCP 12.102.0.1:39078 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:05:09.025 00:00:11.803 TCP 12.102.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:06:10.872 00:00:11.817 TCP 12.102.0.1:52390 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:07:12.725 00:00:11.762 TCP 12.102.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:08:04.251 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:08:04.202 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:08:04.435 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:08:04.406 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:08:04.510 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:08:04.325 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:08:04.229 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:08:14.526 00:00:11.761 TCP 12.102.0.1:57656 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:04:12.525 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 06:09:16.326 00:00:11.818 TCP 12.102.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:10:18.184 00:00:11.806 TCP 12.102.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:06:12.523 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 06:11:20.035 00:00:12.230 TCP 12.102.0.1:44742 -> 1.101.0.1:3000 15 1926 1 2025-11-26 06:12:22.304 00:00:11.817 TCP 12.102.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:13:04.324 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:13:04.347 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:13:04.457 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:13:04.542 00:00:00.013 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:13:04.442 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:13:04.635 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:13:04.117 00:00:00.019 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:13:24.163 00:00:11.806 TCP 12.102.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:14:26.010 00:00:11.762 TCP 12.102.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:15:27.809 00:00:11.771 TCP 12.102.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:11:12.527 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 06:16:29.620 00:00:12.201 TCP 12.102.0.1:55982 -> 1.101.0.1:3000 15 1926 1 2025-11-26 06:17:31.857 00:00:11.813 TCP 12.102.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:18:04.581 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:18:04.704 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:18:04.604 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:18:04.744 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:18:04.504 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:18:04.639 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:18:04.607 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:13:12.525 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 06:18:33.705 00:00:11.797 TCP 12.102.0.1:36882 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:19:35.544 00:00:11.803 TCP 12.102.0.1:34462 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:20:37.387 00:00:11.815 TCP 12.102.0.1:38890 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:21:39.243 00:00:11.803 TCP 12.102.0.1:58266 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:22:41.086 00:00:11.807 TCP 12.102.0.1:44630 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:23:04.611 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:23:04.634 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:23:04.641 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:23:04.676 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:23:04.672 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:23:04.573 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:23:04.643 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:18:12.528 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 06:23:42.927 00:00:11.898 TCP 12.102.0.1:41594 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:24:44.863 00:00:11.798 TCP 12.102.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:20:12.526 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 06:25:46.699 00:00:11.812 TCP 12.102.0.1:41914 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:26:48.580 00:00:11.765 TCP 12.102.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:28:04.830 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:28:05.079 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:28:04.542 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:28:04.838 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:28:04.789 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:28:05.037 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:27:50.385 00:00:11.823 TCP 12.102.0.1:50572 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:28:04.807 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:28:52.241 00:00:11.800 TCP 12.102.0.1:55310 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:29:54.084 00:00:11.803 TCP 12.102.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:25:12.528 00:06:00.158 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 06:30:55.924 00:00:11.826 TCP 12.102.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:31:57.789 00:00:11.802 TCP 12.102.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:27:12.526 00:06:00.163 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 06:33:04.795 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:33:04.818 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:33:05.018 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:33:05.001 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:33:04.960 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:33:04.958 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:33:04.964 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:32:59.630 00:00:11.800 TCP 12.102.0.1:45120 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:34:01.471 00:00:11.798 TCP 12.102.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:35:03.308 00:00:11.800 TCP 12.102.0.1:40232 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:36:05.147 00:00:11.815 TCP 12.102.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:32:12.530 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 06:37:06.998 00:00:11.859 TCP 12.102.0.1:46666 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:38:04.948 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:38:04.928 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:38:05.141 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:38:04.658 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:38:05.082 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:38:04.667 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:38:04.924 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:38:08.896 00:00:11.808 TCP 12.102.0.1:37390 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:34:12.528 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 06:39:10.735 00:00:11.802 TCP 12.102.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:40:12.568 00:00:11.814 TCP 12.102.0.1:51494 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:41:14.419 00:00:11.800 TCP 12.102.0.1:53066 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:42:16.260 00:00:11.822 TCP 12.102.0.1:59250 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:43:05.140 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:43:05.162 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:43:05.342 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:43:05.173 00:00:00.037 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:43:05.252 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:43:05.175 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:43:05.218 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:43:18.118 00:00:11.798 TCP 12.102.0.1:39384 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:39:12.532 00:06:00.161 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 06:44:19.957 00:00:11.756 TCP 12.102.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:45:21.757 00:00:11.799 TCP 12.102.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:41:12.529 00:06:00.169 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 06:46:23.600 00:00:11.828 TCP 12.102.0.1:50142 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:47:25.468 00:00:11.810 TCP 12.102.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:48:04.832 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:48:04.856 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:48:05.180 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:48:05.246 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:48:05.255 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:48:05.162 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:48:05.049 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:48:27.321 00:00:11.799 TCP 12.102.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:49:29.160 00:00:11.759 TCP 12.102.0.1:42360 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:50:30.959 00:00:11.807 TCP 12.102.0.1:55094 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:46:12.532 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 06:51:32.810 00:00:11.803 TCP 12.102.0.1:39992 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:52:34.651 00:00:11.821 TCP 12.102.0.1:40780 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:53:05.430 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:53:05.358 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:53:05.495 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:53:05.387 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:53:05.265 00:00:00.032 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:53:05.223 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:53:05.408 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:48:12.536 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 06:53:36.508 00:00:11.806 TCP 12.102.0.1:52496 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:54:38.350 00:00:11.807 TCP 12.102.0.1:41998 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:55:40.205 00:00:11.809 TCP 12.102.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:56:42.079 00:00:11.814 TCP 12.102.0.1:39460 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:57:43.934 00:00:11.812 TCP 12.102.0.1:58830 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:58:05.351 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 06:58:05.190 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 06:58:05.288 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 06:58:05.388 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 06:58:05.519 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 06:58:05.395 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 06:58:05.329 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 06:53:12.540 00:06:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 159, total bytes: 124468, total packets: 1140, avg bps: 267, avg pps: 0, avg bpp: 109 Time window: 2025-11-26 05:57:12 - 2025-11-26 06:59:12 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0028s User: 0.0028s Wall: 0.0030s flows/second: 52685.6 Runtime: 0.0030s