Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 03:55:13.944 00:05:00.111 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 03:59:11.568 00:00:11.797 TCP 12.102.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:59:28.228 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 03:59:28.251 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 03:59:28.463 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:59:28.530 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 03:59:28.372 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 03:59:28.372 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 03:59:28.334 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:00:13.418 00:00:11.947 TCP 12.102.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:01:15.405 00:00:11.805 TCP 12.102.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:02:17.251 00:00:11.763 TCP 12.102.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:03:19.077 00:00:11.806 TCP 12.102.0.1:47170 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:00:13.944 00:05:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:04:28.593 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:04:28.671 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:04:28.706 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:04:28.762 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:04:28.706 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:04:28.666 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:04:28.569 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:04:20.923 00:00:11.818 TCP 12.102.0.1:35460 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:01:13.947 00:05:00.109 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:05:22.784 00:00:11.797 TCP 12.102.0.1:60814 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:06:24.643 00:00:11.821 TCP 12.102.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:07:26.502 00:00:11.812 TCP 12.102.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:08:28.355 00:00:11.818 TCP 12.102.0.1:43576 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:09:28.642 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:09:28.765 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:09:28.858 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:09:28.664 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:09:28.782 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:09:28.975 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:09:28.955 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:09:30.208 00:00:11.827 TCP 12.102.0.1:45882 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:06:13.948 00:05:00.112 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:10:32.083 00:00:11.767 TCP 12.102.0.1:34080 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:07:13.950 00:05:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:11:33.888 00:00:11.767 TCP 12.102.0.1:54884 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:12:35.686 00:00:11.814 TCP 12.102.0.1:45894 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:13:37.536 00:00:11.802 TCP 12.102.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:14:28.640 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:14:28.663 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:14:28.687 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:14:28.598 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:14:28.664 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:14:28.751 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:14:28.545 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:14:39.375 00:00:11.789 TCP 12.102.0.1:32974 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:15:41.196 00:00:11.804 TCP 12.102.0.1:34106 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:12:13.950 00:05:00.110 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:16:43.062 00:00:11.803 TCP 12.102.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:13:13.953 00:05:00.106 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:17:44.907 00:00:11.842 TCP 12.102.0.1:48884 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:18:46.781 00:00:11.775 TCP 12.102.0.1:59610 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:19:28.673 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:19:28.713 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:19:28.818 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:19:28.709 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:19:28.538 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:19:28.604 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:19:28.651 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:19:48.600 00:00:11.813 TCP 12.102.0.1:52780 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:20:50.451 00:00:11.826 TCP 12.102.0.1:41830 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:21:52.317 00:00:11.758 TCP 12.102.0.1:59348 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:18:13.949 00:05:00.117 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:22:54.118 00:00:11.831 TCP 12.102.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:19:13.953 00:05:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:23:55.985 00:00:11.776 TCP 12.102.0.1:35944 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:24:28.120 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:24:28.144 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:24:28.166 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:24:28.290 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:24:28.176 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:24:28.177 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:24:28.175 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:24:57.800 00:00:11.800 TCP 12.102.0.1:42276 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:25:59.641 00:00:11.805 TCP 12.102.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:27:01.481 00:00:11.805 TCP 12.102.0.1:58874 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:28:03.326 00:00:11.761 TCP 12.102.0.1:56866 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:24:13.953 00:05:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:25:13.955 00:05:00.116 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:29:05.129 00:00:11.854 TCP 12.102.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:29:29.117 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:29:29.141 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:29:29.189 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:29:29.172 00:00:00.037 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:29:29.025 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:29:29.175 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:29:28.904 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:30:07.034 00:00:11.855 TCP 12.102.0.1:53990 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:31:08.931 00:00:11.824 TCP 12.102.0.1:46614 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:32:10.820 00:00:11.761 TCP 12.102.0.1:49188 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:33:12.625 00:00:11.796 TCP 12.102.0.1:54224 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:30:13.955 00:05:00.120 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:34:14.464 00:00:11.954 TCP 12.102.0.1:41708 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:34:28.894 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:34:28.894 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:34:29.050 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:34:28.913 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:34:29.097 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:34:29.052 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:34:28.868 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:31:13.959 00:05:00.115 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:35:16.458 00:00:11.804 TCP 12.102.0.1:33160 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:36:18.312 00:00:11.813 TCP 12.102.0.1:37784 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:37:20.159 00:00:11.763 TCP 12.102.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:38:21.961 00:00:11.802 TCP 12.102.0.1:33934 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:39:28.916 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:39:29.038 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:39:29.303 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:39:29.043 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:39:29.262 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:39:29.199 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:39:28.893 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:39:23.802 00:00:11.797 TCP 12.102.0.1:53416 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:36:13.959 00:05:00.119 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:40:25.640 00:00:11.806 TCP 12.102.0.1:40214 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:37:13.961 00:05:00.114 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:41:27.489 00:00:11.800 TCP 12.102.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:42:29.330 00:00:11.760 TCP 12.102.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:43:31.130 00:00:11.799 TCP 12.102.0.1:54294 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:44:29.323 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:44:29.342 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:44:29.137 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:44:29.303 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:44:29.362 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:44:29.285 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:44:29.301 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:44:32.969 00:00:11.801 TCP 12.102.0.1:59686 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:45:34.807 00:00:11.806 TCP 12.102.0.1:40680 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:42:13.960 00:05:00.118 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:46:36.651 00:00:11.813 TCP 12.102.0.1:55930 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:43:13.963 00:05:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:47:38.505 00:00:11.798 TCP 12.102.0.1:45660 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:48:40.346 00:00:11.758 TCP 12.102.0.1:55646 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:49:29.420 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:49:29.290 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:49:29.491 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:49:29.228 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:49:29.472 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:49:29.367 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:49:29.398 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:49:42.144 00:00:11.814 TCP 12.102.0.1:52536 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:50:44.001 00:00:11.800 TCP 12.102.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:51:45.836 00:00:11.800 TCP 12.102.0.1:55756 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:48:13.963 00:05:00.118 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 04:52:47.678 00:00:11.801 TCP 12.102.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:49:13.964 00:05:00.114 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:53:49.516 00:00:11.802 TCP 12.102.0.1:44678 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:54:29.557 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:54:29.614 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:54:29.695 00:00:00.028 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:54:29.514 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:54:29.536 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:54:29.318 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:54:29.534 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 04:54:51.354 00:00:11.823 TCP 12.102.0.1:59232 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:55:53.215 00:00:11.815 TCP 12.102.0.1:51942 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:56:55.084 00:00:12.238 TCP 12.102.0.1:34998 -> 1.101.0.1:3000 15 1926 1 2025-11-29 04:57:57.358 00:00:11.771 TCP 12.102.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:54:13.963 00:05:00.118 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-11-29 03:55:13 - 2025-11-29 04:59:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0031s Wall: 0.0020s flows/second: 81374.5 Runtime: 0.0020s