Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 09:59:10.787 00:00:11.810 TCP 12.102.0.1:42792 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:00:12.644 00:00:11.802 TCP 12.102.0.1:36970 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:00:33.562 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:00:33.293 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:00:33.618 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:00:33.661 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:00:33.689 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:00:33.627 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:00:33.538 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 09:57:14.949 00:05:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:01:14.484 00:00:11.802 TCP 12.102.0.1:49906 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:02:16.323 00:00:12.146 TCP 12.102.0.1:36802 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:59:14.946 00:05:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:03:18.509 00:00:11.801 TCP 12.102.0.1:60140 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:04:20.354 00:00:11.821 TCP 12.102.0.1:40838 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:05:33.564 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:05:33.587 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:05:22.211 00:00:11.810 TCP 12.102.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:05:33.619 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:05:33.706 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:05:33.599 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:05:33.730 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:05:33.370 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:06:24.080 00:00:11.804 TCP 12.102.0.1:50926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:03:14.949 00:05:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:07:25.919 00:00:11.818 TCP 12.102.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:08:27.787 00:00:11.764 TCP 12.102.0.1:49938 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:05:14.947 00:05:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:09:29.588 00:00:11.807 TCP 12.102.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:10:33.566 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:10:33.590 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:10:33.409 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:10:33.571 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:10:33.616 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:10:33.771 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:10:33.303 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:10:31.433 00:00:11.811 TCP 12.102.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:11:33.285 00:00:11.821 TCP 12.102.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:12:35.142 00:00:12.741 TCP 12.102.0.1:59416 -> 1.101.0.1:3000 15 1926 1 2025-12-01 10:09:14.952 00:05:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:13:37.924 00:00:11.824 TCP 12.102.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:14:39.785 00:00:11.798 TCP 12.102.0.1:55400 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:11:14.950 00:05:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:15:33.849 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:15:33.820 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:15:33.836 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:15:33.828 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:15:33.980 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:15:33.800 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:15:33.826 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:15:41.624 00:00:11.801 TCP 12.102.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:16:43.465 00:00:11.805 TCP 12.102.0.1:43392 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:17:45.306 00:00:12.190 TCP 12.102.0.1:46210 -> 1.101.0.1:3000 15 1926 1 2025-12-01 10:18:47.536 00:00:11.806 TCP 12.102.0.1:34064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:15:14.952 00:05:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:19:49.381 00:00:11.770 TCP 12.102.0.1:54772 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:20:33.912 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:20:33.934 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:20:33.971 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:20:33.897 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:20:34.026 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:20:33.982 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:20:33.997 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:20:51.188 00:00:11.802 TCP 12.102.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:17:14.950 00:05:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:21:53.034 00:00:11.815 TCP 12.102.0.1:38978 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:22:54.891 00:00:11.801 TCP 12.102.0.1:38486 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:23:56.731 00:00:11.800 TCP 12.102.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:24:58.568 00:00:11.767 TCP 12.102.0.1:52168 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:21:14.952 00:05:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:25:33.682 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:25:33.706 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:25:33.937 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:25:33.876 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:25:33.987 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:25:34.023 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:25:33.700 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:26:00.372 00:00:11.823 TCP 12.102.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:27:02.228 00:00:11.805 TCP 12.102.0.1:37098 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:23:14.951 00:05:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:28:04.077 00:00:11.802 TCP 12.102.0.1:39272 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:29:05.917 00:00:11.824 TCP 12.102.0.1:37914 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:30:07.776 00:00:11.807 TCP 12.102.0.1:48104 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:30:33.917 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:30:33.973 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:30:33.974 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:30:33.915 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:30:34.144 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:30:34.068 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:30:33.950 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:27:14.956 00:05:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:31:09.621 00:00:11.800 TCP 12.102.0.1:56242 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:32:11.470 00:00:11.819 TCP 12.102.0.1:39364 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:29:14.953 00:05:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:33:13.329 00:00:11.810 TCP 12.102.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:34:15.168 00:00:11.799 TCP 12.102.0.1:56906 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:35:17.004 00:00:11.762 TCP 12.102.0.1:39524 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:35:33.912 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:35:34.138 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:35:34.147 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:35:34.121 00:00:00.042 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:35:34.172 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:35:34.190 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:35:33.889 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:36:18.808 00:00:11.806 TCP 12.102.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:33:14.957 00:05:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:37:20.652 00:00:11.873 TCP 12.102.0.1:41818 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:38:22.569 00:00:11.763 TCP 12.102.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:35:14.954 00:05:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:39:24.374 00:00:11.821 TCP 12.102.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:40:35.220 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:40:35.243 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:40:35.077 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:40:35.350 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:40:35.235 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:40:35.097 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:40:35.037 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:40:26.234 00:00:11.816 TCP 12.102.0.1:49710 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:41:28.091 00:00:11.798 TCP 12.102.0.1:34912 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:42:29.934 00:00:11.817 TCP 12.102.0.1:47584 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:39:14.958 00:05:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:43:31.792 00:00:11.802 TCP 12.102.0.1:44786 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:44:33.635 00:00:11.799 TCP 12.102.0.1:41506 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:41:14.957 00:05:00.156 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:45:34.645 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:45:34.670 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:45:34.377 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:45:34.737 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:45:34.423 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:45:34.740 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:45:34.250 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:45:35.479 00:00:11.799 TCP 12.102.0.1:38326 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:46:37.317 00:00:11.765 TCP 12.102.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:47:39.119 00:00:11.814 TCP 12.102.0.1:33062 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:48:40.971 00:00:11.813 TCP 12.102.0.1:49134 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:45:14.961 00:05:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:49:42.823 00:00:11.807 TCP 12.102.0.1:34718 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:50:34.451 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:50:34.458 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:50:34.528 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:50:34.346 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:50:34.246 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:50:34.401 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:50:34.428 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:50:44.667 00:00:11.818 TCP 12.102.0.1:51818 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:47:14.960 00:05:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:51:46.525 00:00:11.782 TCP 12.102.0.1:59082 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:52:48.345 00:00:11.806 TCP 12.102.0.1:41116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:53:50.186 00:00:11.804 TCP 12.102.0.1:56646 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:54:52.033 00:00:11.814 TCP 12.102.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:51:14.963 00:05:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 10:55:34.343 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 10:55:34.366 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 10:55:34.583 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 10:55:34.493 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 10:55:34.707 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 10:55:34.812 00:00:00.014 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 10:55:34.540 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 10:55:53.887 00:00:11.813 TCP 12.102.0.1:55322 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:56:55.737 00:00:11.766 TCP 12.102.0.1:55766 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:53:14.962 00:05:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 10:57:57.536 00:00:11.800 TCP 12.102.0.1:58700 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 271, avg pps: 0, avg bpp: 109 Time window: 2025-12-01 09:57:14 - 2025-12-01 10:58:15 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0016s Wall: 0.0027s flows/second: 60157.3 Runtime: 0.0027s