Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 04:59:00.588 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 04:59:00.611 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 04:59:00.572 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:59:00.736 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 04:59:00.548 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 04:59:00.575 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 04:59:00.720 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 04:59:18.225 00:00:11.804 TCP 12.102.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:00:20.074 00:00:11.867 TCP 12.102.0.1:41484 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:01:21.983 00:00:11.802 TCP 12.102.0.1:43978 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:02:23.825 00:00:11.797 TCP 12.102.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:03:25.659 00:00:11.858 TCP 12.102.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:04:00.625 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:04:00.818 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:04:00.757 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:04:00.524 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:04:00.720 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:04:00.709 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:04:00.602 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:04:27.562 00:00:11.805 TCP 12.102.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:00:13.458 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-28 05:00:13.460 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-28 05:05:29.403 00:00:11.761 TCP 12.102.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:06:31.200 00:00:12.200 TCP 12.102.0.1:60364 -> 1.101.0.1:3000 15 1926 1 2025-11-28 05:07:33.442 00:00:11.808 TCP 12.102.0.1:48000 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:08:35.288 00:00:11.805 TCP 12.102.0.1:57168 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:09:00.661 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:09:00.670 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:09:00.905 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:09:00.679 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:09:00.799 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:09:00.991 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:09:00.639 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:09:37.129 00:00:12.499 TCP 12.102.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:10:39.666 00:00:11.766 TCP 12.102.0.1:35484 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:11:41.470 00:00:11.833 TCP 12.102.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:07:13.460 00:06:00.154 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-28 05:07:13.462 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-28 05:12:43.338 00:00:11.811 TCP 12.102.0.1:34178 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:13:45.188 00:00:11.803 TCP 12.102.0.1:33596 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:14:01.480 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:14:01.503 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:14:01.619 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:14:01.620 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:14:01.650 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:14:01.280 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:14:01.500 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:14:47.038 00:00:11.812 TCP 12.102.0.1:49766 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:15:48.882 00:00:11.807 TCP 12.102.0.1:37342 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:16:50.732 00:00:11.795 TCP 12.102.0.1:37662 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:17:52.564 00:00:11.765 TCP 12.102.0.1:54036 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:19:00.921 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:19:00.960 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:19:01.238 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:19:01.246 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:19:00.856 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:19:00.929 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:19:00.897 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:18:54.368 00:00:11.881 TCP 12.102.0.1:42848 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:14:13.464 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-28 05:14:13.461 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-28 05:19:56.275 00:00:11.805 TCP 12.102.0.1:48532 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:20:58.114 00:00:11.805 TCP 12.102.0.1:59046 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:21:59.951 00:00:11.799 TCP 12.102.0.1:54720 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:23:01.794 00:00:11.801 TCP 12.102.0.1:40606 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:24:01.050 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:24:01.295 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:24:01.227 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:24:01.259 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:24:01.396 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:24:01.168 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:24:01.014 00:00:00.037 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:24:03.641 00:00:11.799 TCP 12.102.0.1:34760 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:25:05.478 00:00:11.804 TCP 12.102.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:21:13.463 00:06:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-28 05:21:13.461 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-28 05:26:07.321 00:00:11.801 TCP 12.102.0.1:51946 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:27:09.159 00:00:11.802 TCP 12.102.0.1:39538 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:28:11.000 00:00:11.825 TCP 12.102.0.1:50042 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:29:01.296 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:29:01.355 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:29:01.243 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:29:01.100 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:29:01.313 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:29:01.254 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:29:01.275 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:29:12.863 00:00:11.809 TCP 12.102.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:30:14.701 00:00:11.804 TCP 12.102.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:31:16.545 00:00:11.798 TCP 12.102.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:32:18.385 00:00:11.806 TCP 12.102.0.1:34246 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:28:13.468 00:06:00.151 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-28 05:28:13.471 00:06:00.147 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-28 05:33:20.232 00:00:12.193 TCP 12.102.0.1:41048 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:34:01.122 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:34:01.146 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:34:01.215 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:34:01.464 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:34:01.278 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:34:01.282 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:34:01.408 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:34:22.465 00:00:11.762 TCP 12.102.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:35:24.267 00:00:11.761 TCP 12.102.0.1:33788 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:36:26.077 00:00:11.802 TCP 12.102.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:37:27.918 00:00:11.786 TCP 12.102.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:38:29.740 00:00:11.799 TCP 12.102.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:39:01.575 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:39:01.406 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:39:01.728 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:39:01.323 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:39:01.511 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:39:01.573 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:39:01.552 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:39:31.586 00:00:11.811 TCP 12.102.0.1:44760 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:35:13.471 00:06:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-28 05:35:13.470 00:06:00.156 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-28 05:40:33.431 00:00:11.819 TCP 12.102.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:41:35.290 00:00:11.868 TCP 12.102.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:42:37.201 00:00:11.779 TCP 12.102.0.1:57602 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:43:39.021 00:00:11.806 TCP 12.102.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:44:01.638 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:44:01.662 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:44:01.792 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:44:01.599 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:44:01.710 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:44:01.729 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:44:01.609 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:44:40.870 00:00:11.808 TCP 12.102.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:45:42.720 00:00:11.796 TCP 12.102.0.1:54052 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:46:44.559 00:00:11.815 TCP 12.102.0.1:42072 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:42:13.472 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-28 05:42:13.470 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-28 05:47:46.407 00:00:11.801 TCP 12.102.0.1:35606 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:49:01.611 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:48:48.249 00:00:11.801 TCP 12.102.0.1:60022 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:49:01.815 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:49:01.808 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:49:01.532 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:49:01.733 00:00:00.012 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:49:01.618 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:49:01.589 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:49:50.101 00:00:11.799 TCP 12.102.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:50:51.944 00:00:11.807 TCP 12.102.0.1:57008 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:51:53.787 00:00:11.808 TCP 12.102.0.1:51698 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:52:55.633 00:00:11.803 TCP 12.102.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:54:01.846 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-28 05:54:01.965 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:54:01.885 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-28 05:54:01.891 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-28 05:54:01.832 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-28 05:54:01.824 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-28 05:54:01.992 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-28 05:53:57.474 00:00:11.801 TCP 12.102.0.1:60502 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:49:13.474 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-28 05:49:13.477 00:06:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-28 05:54:59.311 00:00:11.804 TCP 12.102.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:56:01.156 00:00:11.807 TCP 12.102.0.1:48882 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:57:02.991 00:00:11.815 TCP 12.102.0.1:58796 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:58:04.830 00:00:11.767 TCP 12.102.0.1:34518 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122769, total packets: 1118, avg bps: 276, avg pps: 0, avg bpp: 109 Time window: 2025-11-28 04:59:00 - 2025-11-28 05:58:16 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0033s User: 0.0022s Wall: 0.0019s flows/second: 81997.0 Runtime: 0.0019s