Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 15:59:04.705 00:00:11.793 TCP 12.102.0.1:56554 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:00:06.540 00:00:11.799 TCP 12.102.0.1:38590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:00:40.503 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:00:40.527 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.434 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.777 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.438 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.834 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.521 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:01:08.378 00:00:11.776 TCP 12.102.0.1:57722 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:02:10.192 00:00:11.808 TCP 12.102.0.1:38220 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:58:15.076 00:06:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 16:03:12.043 00:00:11.771 TCP 12.102.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:59:15.075 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 16:04:13.849 00:00:11.802 TCP 12.102.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:05:15.691 00:00:11.806 TCP 12.102.0.1:33278 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:05:40.624 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:05:40.648 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.812 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.715 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.749 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.782 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.793 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:06:17.536 00:00:11.796 TCP 12.102.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:07:19.374 00:00:11.769 TCP 12.102.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:08:21.185 00:00:11.804 TCP 12.102.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:09:23.032 00:00:11.805 TCP 12.102.0.1:38764 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:05:15.077 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 16:10:24.871 00:00:11.817 TCP 12.102.0.1:48972 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:10:40.459 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:10:40.481 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.921 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.775 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.815 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.963 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.605 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:06:15.074 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 16:11:26.729 00:00:11.825 TCP 12.102.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:12:28.601 00:00:11.802 TCP 12.102.0.1:47796 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:13:30.439 00:00:11.815 TCP 12.102.0.1:56780 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:14:32.292 00:00:11.761 TCP 12.102.0.1:41656 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:15:40.955 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:15:40.979 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.327 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:15:40.771 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.106 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.387 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.084 00:00:00.041 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:15:34.092 00:00:11.808 TCP 12.102.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:16:35.941 00:00:11.805 TCP 12.102.0.1:59772 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:12:15.079 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 16:17:37.789 00:00:11.770 TCP 12.102.0.1:56220 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:13:15.076 00:06:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 16:18:39.595 00:00:12.662 TCP 12.102.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:19:42.299 00:00:11.806 TCP 12.102.0.1:35542 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:20:41.123 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:20:41.146 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.319 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.261 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.082 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.279 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.193 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:20:44.141 00:00:11.825 TCP 12.102.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:21:46.001 00:00:11.796 TCP 12.102.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:22:47.833 00:00:12.494 TCP 12.102.0.1:35906 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:23:50.361 00:00:11.819 TCP 12.102.0.1:34084 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:19:15.080 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 16:24:52.218 00:00:11.808 TCP 12.102.0.1:42568 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:20:15.077 00:06:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 16:25:41.127 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:25:41.044 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:25:41.078 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:25:40.835 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:25:41.073 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:25:40.924 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:25:41.105 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:25:54.080 00:00:11.852 TCP 12.102.0.1:49738 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:26:55.969 00:00:11.801 TCP 12.102.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:27:57.808 00:00:11.767 TCP 12.102.0.1:52152 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:28:59.613 00:00:11.810 TCP 12.102.0.1:33940 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:30:01.459 00:00:11.803 TCP 12.102.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:30:41.218 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:30:41.241 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.465 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.246 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.281 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.218 00:00:00.038 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.260 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:31:03.308 00:00:11.801 TCP 12.102.0.1:33760 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:26:15.081 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 16:32:05.154 00:00:11.782 TCP 12.102.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:27:15.079 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 16:33:06.994 00:00:11.797 TCP 12.102.0.1:42976 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:34:08.826 00:00:11.800 TCP 12.102.0.1:49406 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:35:10.664 00:00:11.825 TCP 12.102.0.1:53654 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:35:41.151 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.466 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.452 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.413 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.250 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.238 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.127 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:36:12.533 00:00:11.835 TCP 12.102.0.1:53520 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:37:14.405 00:00:11.802 TCP 12.102.0.1:57156 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:33:15.082 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 16:38:16.248 00:00:11.818 TCP 12.102.0.1:37340 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:34:15.080 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 16:39:18.101 00:00:11.796 TCP 12.102.0.1:60558 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:40:41.503 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:40:19.939 00:00:12.252 TCP 12.102.0.1:48596 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:40:41.526 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.645 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.575 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.642 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.470 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.543 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:41:22.232 00:00:11.834 TCP 12.102.0.1:34294 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:42:24.108 00:00:11.804 TCP 12.102.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:43:25.956 00:00:11.763 TCP 12.102.0.1:40800 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:44:27.758 00:00:11.801 TCP 12.102.0.1:47708 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:40:15.084 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 16:45:29.606 00:00:11.804 TCP 12.102.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:45:41.462 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.625 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.738 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.658 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.696 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.528 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.439 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:41:15.081 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 16:46:31.449 00:00:11.821 TCP 12.102.0.1:52898 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:47:33.303 00:00:11.825 TCP 12.102.0.1:37076 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:48:35.167 00:00:11.823 TCP 12.102.0.1:58116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:49:37.035 00:00:11.761 TCP 12.102.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:50:41.624 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.474 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.755 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.731 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.466 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.518 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.601 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:50:38.832 00:00:11.763 TCP 12.102.0.1:37864 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:51:40.635 00:00:11.798 TCP 12.102.0.1:51782 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:47:15.087 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 16:52:42.478 00:00:11.773 TCP 12.102.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:48:15.082 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 16:53:44.295 00:00:11.807 TCP 12.102.0.1:56762 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:54:46.136 00:00:11.822 TCP 12.102.0.1:57004 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:55:42.005 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 16:55:41.786 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:55:41.814 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 16:55:41.957 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 16:55:41.755 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 16:55:42.027 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 16:55:42.016 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 16:55:47.993 00:00:11.807 TCP 12.102.0.1:59618 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:56:49.838 00:00:12.578 TCP 12.102.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:57:52.457 00:00:11.815 TCP 12.102.0.1:44236 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122350, total packets: 1114, avg bps: 272, avg pps: 0, avg bpp: 109 Time window: 2025-12-01 15:58:15 - 2025-12-01 16:58:04 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0027s User: 0.0027s Wall: 0.0025s flows/second: 62231.2 Runtime: 0.0026s