Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 11:58:49.233 00:00:11.758 TCP 12.102.0.1:50606 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:59:51.034 00:00:11.806 TCP 12.102.0.1:42310 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:00:35.609 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:00:35.939 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:00:35.875 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:00:35.730 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:00:36.019 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:00:35.803 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:00:35.587 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:00:52.881 00:00:11.762 TCP 12.102.0.1:38002 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:57:14.985 00:05:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:01:54.685 00:00:11.805 TCP 12.102.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:02:56.526 00:00:11.800 TCP 12.102.0.1:57592 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:59:14.982 00:05:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:03:58.379 00:00:11.808 TCP 12.102.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:05:00.229 00:00:11.805 TCP 12.102.0.1:51878 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:05:35.921 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:05:36.117 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:05:36.050 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:05:35.898 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:05:35.920 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:05:35.905 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:05:35.899 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:06:02.082 00:00:11.805 TCP 12.102.0.1:56802 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:03:14.986 00:05:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:07:03.931 00:00:11.824 TCP 12.102.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:08:05.803 00:00:11.802 TCP 12.102.0.1:46748 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:05:14.984 00:05:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:09:07.646 00:00:11.815 TCP 12.102.0.1:36648 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:10:09.496 00:00:11.765 TCP 12.102.0.1:38408 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:10:35.918 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:10:36.087 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:10:35.954 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:10:35.922 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:10:36.021 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:10:36.062 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:10:35.895 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:11:11.301 00:00:11.777 TCP 12.102.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:12:13.116 00:00:11.796 TCP 12.102.0.1:54924 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:09:14.987 00:05:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:13:14.949 00:00:11.801 TCP 12.102.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:14:16.794 00:00:11.844 TCP 12.102.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:11:14.985 00:05:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:15:18.677 00:00:11.829 TCP 12.102.0.1:50560 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:15:36.064 00:00:00.041 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:15:36.190 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:15:35.997 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:15:36.011 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:15:36.128 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:15:36.065 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:15:36.041 00:00:00.041 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:16:20.547 00:00:11.773 TCP 12.102.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:17:22.362 00:00:11.835 TCP 12.102.0.1:33424 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:18:24.232 00:00:11.759 TCP 12.102.0.1:48016 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:15:14.988 00:05:00.158 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:19:26.044 00:00:11.799 TCP 12.102.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:20:36.156 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:20:36.179 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:20:36.446 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:20:36.401 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:20:36.361 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:20:36.376 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:20:36.329 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:20:27.879 00:00:11.768 TCP 12.102.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:17:14.986 00:05:00.163 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:21:29.685 00:00:11.766 TCP 12.102.0.1:34850 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:22:31.488 00:00:11.769 TCP 12.102.0.1:48402 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:23:33.300 00:00:11.758 TCP 12.102.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:24:35.097 00:00:11.800 TCP 12.102.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:21:14.990 00:05:00.157 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:25:36.771 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:25:36.787 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:25:36.890 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:25:36.811 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:25:36.899 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:25:36.822 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:25:36.747 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:25:36.940 00:00:11.811 TCP 12.102.0.1:38044 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:26:38.785 00:00:11.800 TCP 12.102.0.1:44994 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:23:14.989 00:05:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:27:40.627 00:00:11.803 TCP 12.102.0.1:48750 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:28:42.470 00:00:11.805 TCP 12.102.0.1:48826 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:29:44.314 00:00:11.803 TCP 12.102.0.1:58892 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:30:36.776 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:30:36.798 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:30:36.787 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:30:36.735 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:30:36.634 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:30:36.730 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:30:36.729 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:30:46.158 00:00:11.808 TCP 12.102.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:27:14.992 00:05:00.157 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:31:48.004 00:00:11.812 TCP 12.102.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:32:49.862 00:00:11.802 TCP 12.102.0.1:50132 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:29:14.989 00:05:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:33:51.702 00:00:11.807 TCP 12.102.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:34:53.551 00:00:12.383 TCP 12.102.0.1:50792 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:35:36.498 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:35:36.520 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:35:36.542 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:35:36.647 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:35:36.545 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:35:36.551 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:35:36.420 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:35:55.971 00:00:11.810 TCP 12.102.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:36:57.818 00:00:11.808 TCP 12.102.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:33:14.993 00:05:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:37:59.661 00:00:11.807 TCP 12.102.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:39:01.508 00:00:11.772 TCP 12.102.0.1:47976 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:35:14.990 00:05:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:40:03.316 00:00:11.818 TCP 12.102.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:40:36.707 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:40:36.730 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:40:36.463 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:40:36.770 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:40:36.670 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:40:36.667 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:40:36.804 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:41:05.168 00:00:11.800 TCP 12.102.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:42:07.008 00:00:11.851 TCP 12.102.0.1:46898 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:39:14.994 00:05:00.161 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:43:08.900 00:00:11.800 TCP 12.102.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:44:10.736 00:00:11.806 TCP 12.102.0.1:55352 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:41:14.993 00:05:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:45:12.582 00:00:11.810 TCP 12.102.0.1:34546 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:45:36.879 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:45:36.808 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:45:36.736 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:45:36.856 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:45:37.089 00:00:00.039 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:45:37.332 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:45:37.068 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:46:14.430 00:00:11.819 TCP 12.102.0.1:40346 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:47:16.286 00:00:11.808 TCP 12.102.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:48:18.129 00:00:11.799 TCP 12.102.0.1:47534 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:45:14.995 00:05:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:49:19.973 00:00:11.809 TCP 12.102.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:50:36.818 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:50:21.819 00:00:11.756 TCP 12.102.0.1:34208 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:50:36.841 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:50:36.855 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:50:36.771 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:50:36.748 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:50:36.851 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:50:36.794 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:47:14.994 00:05:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:51:23.611 00:00:11.809 TCP 12.102.0.1:51590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:52:25.457 00:00:11.802 TCP 12.102.0.1:50020 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:53:27.296 00:00:11.806 TCP 12.102.0.1:36344 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:54:29.144 00:00:11.883 TCP 12.102.0.1:34078 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:51:14.997 00:05:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 12:55:36.976 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 12:55:36.954 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 12:55:36.924 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 12:55:36.997 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 12:55:37.109 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:55:37.077 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 12:55:37.033 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 12:55:31.084 00:00:11.798 TCP 12.102.0.1:50174 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:56:32.922 00:00:11.825 TCP 12.102.0.1:59918 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:53:14.995 00:05:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:57:34.784 00:00:11.807 TCP 12.102.0.1:38810 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:58:36.627 00:00:11.798 TCP 12.102.0.1:60304 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 124841, total packets: 1141, avg bps: 270, avg pps: 0, avg bpp: 109 Time window: 2025-12-01 11:57:14 - 2025-12-01 12:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0012s Wall: 0.0043s flows/second: 37801.1 Runtime: 0.0043s