Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 12:58:43.261 00:00:11.861 TCP 12.102.0.1:58956 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:59:45.169 00:00:11.805 TCP 12.102.0.1:33768 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:00:08.157 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:00:08.179 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:00:08.309 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:00:08.108 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:00:08.000 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:00:08.129 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:00:07.993 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:00:47.032 00:00:11.820 TCP 12.102.0.1:54572 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:01:48.891 00:00:11.806 TCP 12.102.0.1:46544 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:57:14.568 00:06:00.133 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:02:50.735 00:00:11.818 TCP 12.102.0.1:41992 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:03:52.592 00:00:11.834 TCP 12.102.0.1:45384 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:59:14.574 00:06:00.126 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-30 13:04:54.462 00:00:11.810 TCP 12.102.0.1:60024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:05:08.155 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:05:08.404 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:05:08.278 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:05:08.253 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:05:08.406 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:05:08.150 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:05:08.132 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:05:56.308 00:00:11.794 TCP 12.102.0.1:57122 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:06:58.140 00:00:11.778 TCP 12.102.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:07:59.958 00:00:11.811 TCP 12.102.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:04:14.572 00:06:00.132 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:09:01.806 00:00:11.833 TCP 12.102.0.1:36538 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:10:08.211 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:10:08.233 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:10:08.453 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:10:08.484 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:10:08.498 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:10:08.477 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:10:08.013 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:10:03.687 00:00:11.808 TCP 12.102.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:06:14.576 00:06:00.127 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-30 13:11:05.541 00:00:11.758 TCP 12.102.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:12:07.336 00:00:11.855 TCP 12.102.0.1:57664 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:13:09.233 00:00:11.806 TCP 12.102.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:14:11.082 00:00:12.046 TCP 12.102.0.1:35464 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:15:08.622 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:15:08.645 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:15:08.648 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:15:08.338 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:15:08.425 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:15:08.552 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:15:08.592 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:15:13.161 00:00:11.871 TCP 12.102.0.1:46882 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:11:14.575 00:06:00.133 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:16:15.082 00:00:11.807 TCP 12.102.0.1:44168 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:17:16.934 00:00:11.811 TCP 12.102.0.1:38522 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:13:14.577 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-30 13:18:18.783 00:00:11.798 TCP 12.102.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:19:20.619 00:00:11.832 TCP 12.102.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:20:08.219 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:20:08.643 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:20:08.571 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:20:08.467 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:20:08.299 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:20:08.620 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:20:08.197 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:20:22.479 00:00:11.782 TCP 12.102.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:21:24.305 00:00:11.759 TCP 12.102.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:22:26.101 00:00:11.820 TCP 12.102.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:18:14.577 00:06:00.133 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:23:27.959 00:00:11.822 TCP 12.102.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:24:29.820 00:00:11.873 TCP 12.102.0.1:54956 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:25:08.562 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:25:08.567 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:25:08.756 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:25:08.653 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:25:08.657 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:25:08.635 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:25:08.540 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:20:14.579 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-30 13:25:31.720 00:00:11.759 TCP 12.102.0.1:35888 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:26:33.518 00:00:11.799 TCP 12.102.0.1:56212 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:27:35.360 00:00:13.430 TCP 12.102.0.1:49746 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:28:38.828 00:00:11.801 TCP 12.102.0.1:57636 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:29:40.666 00:00:11.815 TCP 12.102.0.1:42612 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:30:08.553 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:30:08.575 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:30:08.854 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:30:08.793 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:30:08.827 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:30:08.857 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:30:08.798 00:00:00.044 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:25:14.577 00:06:00.134 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:30:42.514 00:00:11.784 TCP 12.102.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:31:44.333 00:00:11.762 TCP 12.102.0.1:36104 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:27:14.581 00:06:00.129 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-30 13:32:46.131 00:00:11.817 TCP 12.102.0.1:60476 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:33:47.988 00:00:11.796 TCP 12.102.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:34:49.827 00:00:11.802 TCP 12.102.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:35:08.693 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:35:09.011 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:35:08.742 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:35:08.988 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:35:08.720 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:35:08.939 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:35:08.964 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:35:51.671 00:00:11.807 TCP 12.102.0.1:36312 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:36:53.521 00:00:11.856 TCP 12.102.0.1:51972 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:32:14.579 00:06:00.134 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:37:55.392 00:00:11.809 TCP 12.102.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:38:57.238 00:00:11.806 TCP 12.102.0.1:49532 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:34:14.581 00:06:00.130 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-30 13:40:08.808 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:39:59.089 00:00:11.808 TCP 12.102.0.1:32986 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:40:08.832 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:40:08.934 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:40:09.035 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:40:08.924 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:40:08.920 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:40:09.084 00:00:00.039 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:41:00.933 00:00:11.813 TCP 12.102.0.1:60390 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:42:02.785 00:00:11.807 TCP 12.102.0.1:48592 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:43:04.638 00:00:11.800 TCP 12.102.0.1:38612 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:39:14.580 00:06:00.135 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:44:06.473 00:00:11.794 TCP 12.102.0.1:39214 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:45:08.971 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:45:08.996 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:45:09.189 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:45:08.939 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:45:09.097 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:45:09.048 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:45:09.005 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:45:08.304 00:00:11.801 TCP 12.102.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:41:14.583 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-30 13:46:10.142 00:00:11.816 TCP 12.102.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:47:11.997 00:00:11.803 TCP 12.102.0.1:60802 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:48:13.836 00:00:11.801 TCP 12.102.0.1:53664 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:49:15.673 00:00:11.820 TCP 12.102.0.1:56026 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:50:09.252 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:50:09.274 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:50:09.014 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:50:09.406 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:50:09.317 00:00:00.016 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:50:09.460 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:50:09.418 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:50:17.531 00:00:11.804 TCP 12.102.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:46:14.583 00:06:00.133 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:51:19.374 00:00:11.813 TCP 12.102.0.1:48546 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:52:21.232 00:00:11.761 TCP 12.102.0.1:57802 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:48:14.586 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-30 13:53:23.040 00:00:11.806 TCP 12.102.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:54:24.885 00:00:11.761 TCP 12.102.0.1:54702 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:55:09.432 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-30 13:55:09.168 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:55:09.417 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-30 13:55:09.380 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-30 13:55:09.201 00:00:00.046 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-30 13:55:09.061 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-30 13:55:09.410 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-30 13:55:26.686 00:00:11.799 TCP 12.102.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:56:28.527 00:00:11.801 TCP 12.102.0.1:34562 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:57:30.367 00:00:12.256 TCP 12.102.0.1:57246 -> 1.101.0.1:3000 15 1926 1 2025-11-30 13:53:14.588 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-30 13:58:32.661 00:00:11.862 TCP 12.102.0.1:47800 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 269, avg pps: 0, avg bpp: 109 Time window: 2025-11-30 12:57:14 - 2025-11-30 13:59:14 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0028s User: 0.0028s Wall: 0.0030s flows/second: 53963.4 Runtime: 0.0030s