Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 11:54:14.129 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 11:59:14.877 00:00:11.770 TCP 12.102.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:59:38.109 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 11:59:38.132 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 11:59:38.114 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:59:38.183 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 11:59:37.998 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 11:59:38.020 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 11:59:38.056 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:00:16.685 00:00:11.816 TCP 12.102.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:01:18.535 00:00:11.858 TCP 12.102.0.1:44672 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:02:20.435 00:00:12.276 TCP 12.102.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:03:22.754 00:00:11.800 TCP 12.102.0.1:50578 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:59:14.130 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-29 12:04:38.021 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:04:24.599 00:00:11.809 TCP 12.102.0.1:41502 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:04:38.042 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:04:38.165 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:04:38.267 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:04:38.046 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:04:38.177 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:04:38.034 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:05:26.446 00:00:11.807 TCP 12.102.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:01:14.139 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 12:06:28.290 00:00:11.765 TCP 12.102.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:07:30.099 00:00:11.855 TCP 12.102.0.1:42888 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:08:31.993 00:00:11.758 TCP 12.102.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:09:38.344 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:09:38.367 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:09:38.205 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:09:38.146 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:09:38.296 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:09:38.287 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:09:38.168 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:09:33.789 00:00:12.713 TCP 12.102.0.1:45168 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:10:36.542 00:00:11.799 TCP 12.102.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:06:14.137 00:06:00.050 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-29 12:11:38.382 00:00:11.810 TCP 12.102.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:12:40.228 00:00:11.807 TCP 12.102.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:08:14.140 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 12:13:42.079 00:00:11.802 TCP 12.102.0.1:39482 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:14:38.165 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:14:38.470 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:14:38.408 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:14:38.370 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:14:38.392 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:14:38.361 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:14:38.140 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:14:43.919 00:00:11.786 TCP 12.102.0.1:40308 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:15:45.743 00:00:11.811 TCP 12.102.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:16:47.590 00:00:13.425 TCP 12.102.0.1:45628 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:17:51.078 00:00:11.817 TCP 12.102.0.1:50592 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:13:14.139 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-29 12:18:52.934 00:00:11.768 TCP 12.102.0.1:45246 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:19:38.300 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:19:38.322 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:19:38.600 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:19:38.622 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:19:38.355 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:19:38.520 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:19:38.509 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:19:54.744 00:00:11.771 TCP 12.102.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:15:14.142 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 12:20:56.573 00:00:11.818 TCP 12.102.0.1:46534 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:21:58.432 00:00:11.806 TCP 12.102.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:23:00.277 00:00:11.798 TCP 12.102.0.1:35564 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:24:02.114 00:00:11.800 TCP 12.102.0.1:36514 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:24:38.656 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:24:38.940 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:24:38.819 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:24:38.680 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:24:38.463 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:24:38.719 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:24:38.462 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:25:03.953 00:00:11.811 TCP 12.102.0.1:49000 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:20:14.140 00:06:00.050 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-29 12:26:05.807 00:00:11.824 TCP 12.102.0.1:39298 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:22:14.143 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 12:27:07.678 00:00:12.267 TCP 12.102.0.1:39032 -> 1.101.0.1:3000 15 1926 1 2025-11-29 12:28:09.989 00:00:11.761 TCP 12.102.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:29:11.789 00:00:11.800 TCP 12.102.0.1:33850 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:29:38.936 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:29:38.839 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:29:38.724 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:29:38.983 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:29:39.008 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:29:38.817 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:29:38.913 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:30:13.633 00:00:11.800 TCP 12.102.0.1:34874 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:31:15.475 00:00:12.056 TCP 12.102.0.1:58954 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:27:14.141 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-29 12:32:17.573 00:00:11.767 TCP 12.102.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:33:19.381 00:00:11.819 TCP 12.102.0.1:40150 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:29:14.144 00:06:00.047 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 12:34:38.674 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:34:21.250 00:00:11.762 TCP 12.102.0.1:40908 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:34:38.697 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:34:38.678 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:34:38.645 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:34:38.528 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:34:38.832 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:34:38.904 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:35:23.070 00:00:11.798 TCP 12.102.0.1:55814 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:36:24.909 00:00:11.766 TCP 12.102.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:37:26.710 00:00:11.805 TCP 12.102.0.1:52084 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:38:28.550 00:00:11.803 TCP 12.102.0.1:58456 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:34:14.144 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-29 12:39:38.765 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:39:38.789 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:39:38.908 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:39:39.051 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:39:38.817 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:39:38.805 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:39:38.874 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:39:30.392 00:00:11.810 TCP 12.102.0.1:36472 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:40:32.240 00:00:11.802 TCP 12.102.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:36:14.146 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 12:41:34.080 00:00:11.766 TCP 12.102.0.1:45378 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:42:35.885 00:00:11.808 TCP 12.102.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:43:37.733 00:00:11.781 TCP 12.102.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:44:38.963 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:44:38.986 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:44:38.992 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:44:38.818 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:44:38.963 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:44:38.916 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:44:38.924 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:44:39.549 00:00:11.861 TCP 12.102.0.1:40094 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:45:41.449 00:00:11.755 TCP 12.102.0.1:33156 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:41:14.145 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-29 12:46:43.245 00:00:11.813 TCP 12.102.0.1:56282 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:47:45.086 00:00:12.327 TCP 12.102.0.1:41534 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:43:14.149 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 12:48:47.456 00:00:11.817 TCP 12.102.0.1:45618 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:49:38.980 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:49:39.275 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:49:39.410 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:49:39.455 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:49:39.339 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:49:39.431 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:49:38.957 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:49:49.318 00:00:11.757 TCP 12.102.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:50:51.115 00:00:11.807 TCP 12.102.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:51:52.960 00:00:11.812 TCP 12.102.0.1:42604 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:52:54.801 00:00:11.815 TCP 12.102.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:48:14.147 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-29 12:53:56.659 00:00:11.814 TCP 12.102.0.1:42446 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:54:39.029 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-29 12:54:39.049 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-29 12:54:39.027 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:54:39.171 00:00:00.033 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-29 12:54:39.240 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-29 12:54:39.076 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-29 12:54:39.059 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-29 12:54:58.510 00:00:11.802 TCP 12.102.0.1:59994 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:50:14.150 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-29 12:56:00.353 00:00:11.800 TCP 12.102.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:57:02.192 00:00:11.803 TCP 12.102.0.1:58254 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:58:04.046 00:00:11.806 TCP 12.102.0.1:57202 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-11-29 11:54:14 - 2025-11-29 12:58:15 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0049s User: 0.0007s Wall: 0.0032s flows/second: 50457.3 Runtime: 0.0032s