Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 04:58:59.167 00:00:11.809 TCP 12.102.0.1:54176 -> 1.101.0.1:3000 11 1507 1 2025-11-29 04:55:13.966 00:05:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 04:59:29.431 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 04:59:29.640 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 04:59:29.459 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 04:59:29.671 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 04:59:29.566 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 04:59:29.643 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 04:59:29.410 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:00:01.033 00:00:11.764 TCP 12.102.0.1:33162 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:01:02.838 00:00:11.801 TCP 12.102.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:02:04.679 00:00:11.758 TCP 12.102.0.1:47880 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:03:06.477 00:00:11.800 TCP 12.102.0.1:43386 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:00:13.965 00:05:00.118 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:04:08.319 00:00:11.812 TCP 12.102.0.1:58426 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:04:29.700 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:04:29.892 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:04:29.750 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:04:29.799 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:04:29.824 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:04:29.700 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:04:29.677 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:01:13.969 00:05:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:05:10.167 00:00:11.802 TCP 12.102.0.1:57702 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:06:12.008 00:00:12.164 TCP 12.102.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:07:14.212 00:00:11.803 TCP 12.102.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:08:16.083 00:00:11.760 TCP 12.102.0.1:44466 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:09:17.880 00:00:11.810 TCP 12.102.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:09:29.900 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:09:29.872 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:09:29.930 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:09:29.949 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:09:29.846 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:09:29.812 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:09:29.878 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:06:13.967 00:05:00.118 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:10:19.731 00:00:11.758 TCP 12.102.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:07:13.970 00:05:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:11:21.522 00:00:11.805 TCP 12.102.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:12:23.370 00:00:12.249 TCP 12.102.0.1:56894 -> 1.101.0.1:3000 15 1926 1 2025-11-29 05:13:25.664 00:00:11.807 TCP 12.102.0.1:39568 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:14:30.063 00:00:00.046 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:14:30.192 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:14:30.026 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:14:29.911 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:14:30.334 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:14:30.165 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:14:30.040 00:00:00.046 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:14:27.513 00:00:11.759 TCP 12.102.0.1:42964 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:15:29.316 00:00:11.803 TCP 12.102.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:12:13.968 00:05:00.119 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:16:31.159 00:00:11.803 TCP 12.102.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:13:13.971 00:05:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:17:33.007 00:00:11.809 TCP 12.102.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:18:34.856 00:00:11.798 TCP 12.102.0.1:45808 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:19:29.923 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:19:29.946 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:19:30.186 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:19:30.020 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:19:29.791 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:19:30.179 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:19:29.950 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:19:36.698 00:00:11.801 TCP 12.102.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:20:38.536 00:00:11.805 TCP 12.102.0.1:35944 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:21:40.387 00:00:12.595 TCP 12.102.0.1:35046 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:18:13.972 00:05:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:22:43.022 00:00:11.799 TCP 12.102.0.1:58180 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:19:13.975 00:05:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:23:44.856 00:00:11.802 TCP 12.102.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:24:30.023 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:24:30.046 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:24:29.883 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:24:30.170 00:00:00.037 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:24:30.079 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:24:30.011 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:24:29.982 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:24:46.700 00:00:11.821 TCP 12.102.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:25:48.552 00:00:11.806 TCP 12.102.0.1:44144 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:26:50.397 00:00:11.814 TCP 12.102.0.1:42362 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:27:52.250 00:00:11.805 TCP 12.102.0.1:53506 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:24:13.972 00:05:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:28:54.092 00:00:11.806 TCP 12.102.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:25:13.976 00:05:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:29:30.310 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:29:30.334 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:29:30.284 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:29:30.359 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:29:30.068 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:29:30.161 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:29:30.245 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:29:55.933 00:00:11.813 TCP 12.102.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:30:57.783 00:00:11.879 TCP 12.102.0.1:40982 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:31:59.701 00:00:11.810 TCP 12.102.0.1:36538 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:33:01.546 00:00:11.795 TCP 12.102.0.1:41346 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:34:03.385 00:00:11.764 TCP 12.102.0.1:44742 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:30:13.974 00:05:00.116 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:34:30.323 00:00:00.052 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:34:30.347 00:00:00.051 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:34:30.336 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:34:30.433 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:34:30.099 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:34:30.433 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:34:30.279 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:31:13.979 00:05:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:35:05.192 00:00:11.760 TCP 12.102.0.1:48544 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:36:06.986 00:00:11.801 TCP 12.102.0.1:57402 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:37:08.828 00:00:11.759 TCP 12.102.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:38:10.626 00:00:11.810 TCP 12.102.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:39:12.475 00:00:11.801 TCP 12.102.0.1:45230 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:39:30.269 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:39:30.410 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:39:30.376 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:39:30.293 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:39:30.571 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:39:30.318 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:39:30.328 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:36:13.977 00:05:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:40:14.312 00:00:11.774 TCP 12.102.0.1:34902 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:37:13.980 00:05:00.108 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:41:16.126 00:00:11.808 TCP 12.102.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:42:17.969 00:00:11.811 TCP 12.102.0.1:42518 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:43:19.822 00:00:11.758 TCP 12.102.0.1:57520 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:44:30.389 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:44:30.412 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:44:30.575 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:44:30.621 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:44:30.291 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:44:30.400 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:44:30.438 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:44:21.617 00:00:11.810 TCP 12.102.0.1:49826 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:45:23.464 00:00:11.807 TCP 12.102.0.1:33350 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:42:13.979 00:05:00.113 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:46:25.314 00:00:11.803 TCP 12.102.0.1:51592 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:43:13.983 00:05:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:47:27.159 00:00:11.806 TCP 12.102.0.1:54534 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:48:29.009 00:00:11.769 TCP 12.102.0.1:44768 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:49:30.827 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:49:30.528 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:49:30.950 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:49:30.709 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:49:30.804 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:49:30.884 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:49:30.805 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:49:30.816 00:00:11.801 TCP 12.102.0.1:33684 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:50:32.655 00:00:11.763 TCP 12.102.0.1:57266 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:51:34.459 00:00:11.804 TCP 12.102.0.1:40070 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:48:13.981 00:05:00.112 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-29 05:52:36.303 00:00:11.811 TCP 12.102.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:49:13.984 00:05:00.108 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-29 05:53:38.151 00:00:11.768 TCP 12.102.0.1:32884 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:54:30.909 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 05:54:30.931 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 05:54:30.967 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 05:54:30.778 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 05:54:30.895 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 05:54:30.932 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 05:54:30.872 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 05:54:39.959 00:00:11.800 TCP 12.102.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:55:41.796 00:00:11.800 TCP 12.102.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:56:43.637 00:00:11.800 TCP 12.102.0.1:54308 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:57:45.474 00:00:11.802 TCP 12.102.0.1:48576 -> 1.101.0.1:3000 11 1507 1 2025-11-29 05:54:13.983 00:05:00.113 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-11-29 04:55:13 - 2025-11-29 05:59:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0029s Wall: 0.0025s flows/second: 65428.7 Runtime: 0.0025s