Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 14:59:15.789 00:00:11.763 TCP 12.102.0.1:37472 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:55:15.066 00:06:00.144 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:00:17.599 00:00:11.809 TCP 12.102.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:00:40.338 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:00:40.360 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:00:40.472 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:00:40.502 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:00:40.475 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:00:40.426 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:00:40.425 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 14:56:15.064 00:06:00.150 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:01:19.448 00:00:11.816 TCP 12.102.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:02:21.298 00:00:11.798 TCP 12.102.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:03:23.136 00:00:11.825 TCP 12.102.0.1:52914 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:04:25.004 00:00:11.807 TCP 12.102.0.1:52706 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:05:39.550 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:05:39.573 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:05:26.852 00:00:11.833 TCP 12.102.0.1:57634 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:05:39.521 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:05:39.542 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:05:39.421 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:05:39.610 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:05:39.386 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:06:28.729 00:00:11.814 TCP 12.102.0.1:55790 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:02:15.067 00:06:00.146 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:07:30.581 00:00:11.770 TCP 12.102.0.1:35006 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:03:15.064 00:06:00.152 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:08:32.387 00:00:11.768 TCP 12.102.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:09:34.194 00:00:11.802 TCP 12.102.0.1:56072 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:10:39.679 00:00:00.031 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:10:39.702 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:10:39.680 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:10:39.646 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:10:39.615 00:00:00.034 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:10:39.504 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:10:39.573 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:10:36.057 00:00:11.805 TCP 12.102.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:11:37.902 00:00:11.801 TCP 12.102.0.1:58274 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:12:39.742 00:00:12.240 TCP 12.102.0.1:52384 -> 1.101.0.1:3000 15 1926 1 2025-12-01 15:13:42.023 00:00:11.797 TCP 12.102.0.1:50626 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:09:15.067 00:06:00.148 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:14:43.856 00:00:11.794 TCP 12.102.0.1:40586 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:10:15.065 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:15:39.695 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:15:39.820 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:15:39.768 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:15:39.446 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:15:39.814 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:15:39.524 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:15:39.673 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:15:45.697 00:00:11.800 TCP 12.102.0.1:52108 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:16:47.530 00:00:11.777 TCP 12.102.0.1:57352 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:17:49.358 00:00:12.257 TCP 12.102.0.1:35128 -> 1.101.0.1:3000 15 1926 1 2025-12-01 15:18:51.658 00:00:11.808 TCP 12.102.0.1:41062 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:19:53.505 00:00:11.822 TCP 12.102.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:20:40.338 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:20:40.361 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:20:40.301 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:20:40.253 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:20:40.322 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:20:40.425 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:20:40.292 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:20:55.361 00:00:11.824 TCP 12.102.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:16:15.068 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:21:57.226 00:00:11.806 TCP 12.102.0.1:43546 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:17:15.066 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:22:59.080 00:00:12.237 TCP 12.102.0.1:38222 -> 1.101.0.1:3000 15 1926 1 2025-12-01 15:24:01.351 00:00:11.836 TCP 12.102.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:25:03.227 00:00:11.804 TCP 12.102.0.1:32822 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:25:39.904 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:25:39.926 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:25:40.039 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:25:39.978 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:25:39.881 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:25:40.150 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:25:39.758 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:26:05.083 00:00:11.805 TCP 12.102.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:27:06.922 00:00:11.825 TCP 12.102.0.1:52274 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:23:15.069 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:28:08.788 00:00:11.769 TCP 12.102.0.1:47122 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:24:15.067 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:29:10.600 00:00:11.803 TCP 12.102.0.1:36266 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:30:12.441 00:00:11.765 TCP 12.102.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:30:40.527 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:30:40.198 00:00:00.083 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:30:40.737 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:30:40.770 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:30:40.392 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:30:40.068 00:00:00.110 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:30:40.505 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:31:14.242 00:00:12.386 TCP 12.102.0.1:40236 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:32:16.664 00:00:11.815 TCP 12.102.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:33:18.516 00:00:11.801 TCP 12.102.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:34:20.354 00:00:11.810 TCP 12.102.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:30:15.072 00:06:00.148 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:35:40.205 00:00:00.034 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:35:22.201 00:00:11.807 TCP 12.102.0.1:45220 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:35:40.227 00:00:00.034 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:35:40.145 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:35:40.317 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:35:40.051 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:35:40.128 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:35:40.025 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:31:15.069 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:36:24.076 00:00:11.797 TCP 12.102.0.1:34644 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:37:25.913 00:00:11.781 TCP 12.102.0.1:56966 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:38:27.740 00:00:11.814 TCP 12.102.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:39:29.591 00:00:11.811 TCP 12.102.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:40:39.956 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:40:39.978 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:40:40.223 00:00:00.045 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:40:40.251 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:40:40.094 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:40:40.258 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:40:40.200 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:40:31.444 00:00:11.816 TCP 12.102.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:41:33.293 00:00:11.805 TCP 12.102.0.1:53008 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:37:15.072 00:06:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:42:35.134 00:00:11.760 TCP 12.102.0.1:55538 -> 1.101.0.1:3000 12 1559 1 2025-12-01 15:38:15.069 00:06:00.156 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:43:36.931 00:00:11.808 TCP 12.102.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:44:38.781 00:00:11.797 TCP 12.102.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:45:40.327 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:45:40.540 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:45:40.397 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:45:40.412 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:45:40.550 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:45:40.148 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:45:40.304 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:45:40.614 00:00:11.799 TCP 12.102.0.1:54022 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:46:42.453 00:00:11.761 TCP 12.102.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:47:44.249 00:00:11.803 TCP 12.102.0.1:35758 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:48:46.084 00:00:11.839 TCP 12.102.0.1:43682 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:44:15.075 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:49:47.961 00:00:11.762 TCP 12.102.0.1:44064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:45:15.073 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:50:41.126 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:50:40.750 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:50:40.723 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:50:41.051 00:00:00.034 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:50:40.478 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:50:40.769 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:50:41.105 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:50:49.759 00:00:11.775 TCP 12.102.0.1:48956 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:51:51.572 00:00:11.820 TCP 12.102.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:52:53.431 00:00:11.759 TCP 12.102.0.1:57866 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:53:55.229 00:00:11.799 TCP 12.102.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:54:57.081 00:00:11.799 TCP 12.102.0.1:45424 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:55:40.590 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 15:55:40.613 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 15:55:40.601 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 15:55:40.529 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 15:55:40.658 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 15:55:40.495 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 15:55:40.574 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 15:55:58.923 00:00:11.818 TCP 12.102.0.1:50648 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:51:15.076 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 15:52:15.074 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 15:57:00.779 00:00:12.039 TCP 12.102.0.1:35232 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:58:02.856 00:00:11.812 TCP 12.102.0.1:40116 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125381, total packets: 1155, avg bps: 265, avg pps: 0, avg bpp: 108 Time window: 2025-12-01 14:55:15 - 2025-12-01 15:58:15 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0035s User: 0.0021s Wall: 0.0028s flows/second: 57599.2 Runtime: 0.0028s