Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 19:54:13.279 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 19:54:13.281 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 19:59:41.411 00:00:11.797 TCP 12.102.0.1:38386 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:00:43.245 00:00:11.763 TCP 12.102.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:01:45.074 00:00:11.762 TCP 12.102.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:02:46.870 00:00:11.760 TCP 12.102.0.1:33308 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:03:49.967 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:03:49.989 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:03:50.135 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:03:50.179 00:00:00.045 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:03:50.031 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:03:49.876 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:03:49.936 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:03:48.668 00:00:11.812 TCP 12.102.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:04:50.516 00:00:11.802 TCP 12.102.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:05:52.361 00:00:11.830 TCP 12.102.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:01:13.280 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 20:01:13.282 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 20:06:54.223 00:00:11.759 TCP 12.102.0.1:39820 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:07:56.029 00:00:11.763 TCP 12.102.0.1:54076 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:08:50.205 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:08:50.284 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:08:50.164 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:08:49.884 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:08:50.279 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:08:50.294 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:08:49.860 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:08:57.823 00:00:12.203 TCP 12.102.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:10:00.077 00:00:11.800 TCP 12.102.0.1:32876 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:11:01.916 00:00:11.834 TCP 12.102.0.1:51774 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:12:03.790 00:00:12.241 TCP 12.102.0.1:59060 -> 1.101.0.1:3000 15 1926 1 2025-11-27 20:08:13.286 00:06:00.165 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 20:08:13.283 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 20:13:06.079 00:00:11.856 TCP 12.102.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:13:50.179 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:13:50.203 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:13:50.401 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:13:50.276 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:13:50.300 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:13:50.118 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:13:50.271 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:14:07.966 00:00:11.773 TCP 12.102.0.1:49110 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:15:09.773 00:00:11.798 TCP 12.102.0.1:39902 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:16:11.608 00:00:12.024 TCP 12.102.0.1:41114 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:17:13.675 00:00:11.794 TCP 12.102.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:18:15.507 00:00:11.818 TCP 12.102.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:18:50.252 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:18:50.366 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:18:50.368 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:18:50.041 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:18:50.277 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:18:50.313 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:18:50.230 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:19:17.365 00:00:11.793 TCP 12.102.0.1:57060 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:15:13.287 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 20:15:13.284 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 20:20:19.194 00:00:11.787 TCP 12.102.0.1:46586 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:21:21.025 00:00:11.807 TCP 12.102.0.1:38950 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:22:22.874 00:00:11.806 TCP 12.102.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:23:24.724 00:00:12.231 TCP 12.102.0.1:45898 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:23:50.295 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:23:50.506 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:23:50.441 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:23:50.518 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:23:50.495 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:23:50.373 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:23:50.273 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:24:26.998 00:00:11.806 TCP 12.102.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:25:28.842 00:00:11.810 TCP 12.102.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:26:30.687 00:00:11.797 TCP 12.102.0.1:37892 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:22:13.285 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 20:22:13.288 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 20:27:32.528 00:00:11.802 TCP 12.102.0.1:39702 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:28:34.364 00:00:11.825 TCP 12.102.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:28:50.352 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:28:50.303 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:28:50.592 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:28:50.657 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:28:50.590 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:28:50.445 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:28:50.329 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:29:36.229 00:00:11.821 TCP 12.102.0.1:52136 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:30:38.091 00:00:12.203 TCP 12.102.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:31:40.331 00:00:11.853 TCP 12.102.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:32:42.226 00:00:11.804 TCP 12.102.0.1:48772 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:33:50.452 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:33:50.468 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:33:50.832 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:33:50.475 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:33:50.691 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:33:50.517 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:33:50.497 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:33:44.080 00:00:11.798 TCP 12.102.0.1:45452 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:29:13.290 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 20:29:13.287 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 20:34:45.920 00:00:11.827 TCP 12.102.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:35:47.789 00:00:11.804 TCP 12.102.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:36:49.630 00:00:12.289 TCP 12.102.0.1:59420 -> 1.101.0.1:3000 15 1926 1 2025-11-27 20:37:51.959 00:00:11.814 TCP 12.102.0.1:47822 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:38:50.848 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:38:50.872 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:38:51.028 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:38:50.546 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:38:51.003 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:38:51.048 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:38:50.838 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:38:53.814 00:00:11.802 TCP 12.102.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:39:55.654 00:00:11.820 TCP 12.102.0.1:53130 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:40:57.506 00:00:11.760 TCP 12.102.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:36:13.292 00:06:00.173 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 20:36:13.288 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 20:41:59.305 00:00:12.235 TCP 12.102.0.1:36650 -> 1.101.0.1:3000 15 1926 1 2025-11-27 20:43:01.574 00:00:11.816 TCP 12.102.0.1:36992 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:43:50.650 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:43:50.951 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:43:50.578 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:43:50.913 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:43:50.869 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:43:50.752 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:43:50.628 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:44:03.421 00:00:11.799 TCP 12.102.0.1:44120 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:45:05.260 00:00:11.808 TCP 12.102.0.1:59214 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:46:07.106 00:00:11.805 TCP 12.102.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:47:08.947 00:00:11.799 TCP 12.102.0.1:52822 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:43:13.292 00:06:00.174 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 20:43:13.289 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 20:48:10.786 00:00:11.807 TCP 12.102.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:48:50.867 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:48:50.889 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:48:50.787 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:48:50.639 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:48:50.777 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:48:50.791 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:48:50.843 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:49:12.629 00:00:11.811 TCP 12.102.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:50:14.479 00:00:11.807 TCP 12.102.0.1:56734 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:51:16.328 00:00:12.209 TCP 12.102.0.1:35630 -> 1.101.0.1:3000 15 1926 1 2025-11-27 20:52:18.580 00:00:11.767 TCP 12.102.0.1:34052 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:53:20.387 00:00:11.814 TCP 12.102.0.1:42106 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:53:50.920 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-27 20:53:50.943 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:53:50.662 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:53:50.927 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:53:51.037 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:53:50.930 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:53:50.889 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:54:22.235 00:00:11.809 TCP 12.102.0.1:54648 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:50:13.301 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-27 20:50:13.297 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-27 20:55:24.094 00:00:11.804 TCP 12.102.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:56:25.937 00:00:11.812 TCP 12.102.0.1:52632 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:57:27.785 00:00:11.811 TCP 12.102.0.1:45304 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:58:29.626 00:00:11.763 TCP 12.102.0.1:51500 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:58:51.123 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-27 20:58:51.160 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 20:58:51.084 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-27 20:58:51.190 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-27 20:58:50.942 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-27 20:58:50.944 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-27 20:58:51.100 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 Summary: total flows: 160, total bytes: 125748, total packets: 1158, avg bps: 259, avg pps: 0, avg bpp: 108 Time window: 2025-11-27 19:54:13 - 2025-11-27 20:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0038s User: 0.0029s Wall: 0.0022s flows/second: 71112.5 Runtime: 0.0023s