Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 19:59:22.775 00:00:11.774 TCP 12.102.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:00:24.589 00:00:11.828 TCP 12.102.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:00:45.460 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:00:45.519 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:00:45.547 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:00:45.557 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:00:45.276 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:00:45.403 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:00:45.439 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 19:56:15.145 00:06:00.158 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:01:26.454 00:00:11.811 TCP 12.102.0.1:38922 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:57:15.143 00:06:00.162 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:02:28.303 00:00:11.800 TCP 12.102.0.1:42398 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:03:30.142 00:00:11.810 TCP 12.102.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:04:31.983 00:00:11.763 TCP 12.102.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:05:33.785 00:00:12.090 TCP 12.102.0.1:41432 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:05:45.876 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:05:45.827 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:05:45.647 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:05:45.682 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:05:45.827 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:05:46.010 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:05:45.854 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:06:35.914 00:00:11.787 TCP 12.102.0.1:52750 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:07:37.739 00:00:11.801 TCP 12.102.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:03:15.145 00:06:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:08:39.588 00:00:11.810 TCP 12.102.0.1:43426 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:04:15.143 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:09:41.434 00:00:11.824 TCP 12.102.0.1:43616 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:10:45.684 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:10:45.707 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:10:45.541 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:10:45.661 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:10:45.696 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:10:45.643 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:10:45.399 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:10:43.293 00:00:11.802 TCP 12.102.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:11:45.131 00:00:11.800 TCP 12.102.0.1:50130 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:12:46.968 00:00:11.812 TCP 12.102.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:13:48.820 00:00:11.802 TCP 12.102.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:14:50.658 00:00:11.817 TCP 12.102.0.1:43356 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:10:15.147 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:15:45.849 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:15:45.872 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:15:45.822 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:15:45.943 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:15:45.905 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:15:45.730 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:15:45.944 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:15:52.514 00:00:11.819 TCP 12.102.0.1:51120 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:11:15.145 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:16:54.375 00:00:11.814 TCP 12.102.0.1:47176 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:17:56.227 00:00:12.242 TCP 12.102.0.1:60246 -> 1.101.0.1:3000 15 1926 1 2025-12-01 20:18:58.512 00:00:11.799 TCP 12.102.0.1:56234 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:20:00.350 00:00:16.758 TCP 12.102.0.1:60530 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:20:45.816 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:20:45.841 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:20:45.727 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:20:45.769 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:20:45.853 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:20:46.011 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:20:45.757 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:21:07.137 00:00:11.821 TCP 12.102.0.1:53698 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:17:15.148 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:22:09.000 00:00:11.800 TCP 12.102.0.1:51620 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:18:15.147 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:23:10.842 00:00:12.248 TCP 12.102.0.1:53580 -> 1.101.0.1:3000 15 1926 1 2025-12-01 20:24:13.135 00:00:11.801 TCP 12.102.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:25:14.974 00:00:11.805 TCP 12.102.0.1:60532 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:25:45.649 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:25:46.009 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:25:45.779 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:25:46.021 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:25:46.017 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:25:46.034 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:25:45.626 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:26:16.815 00:00:11.809 TCP 12.102.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:27:18.668 00:00:11.756 TCP 12.102.0.1:42974 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:28:20.461 00:00:11.803 TCP 12.102.0.1:41200 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:24:15.150 00:06:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:29:22.303 00:00:11.833 TCP 12.102.0.1:41892 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:25:15.148 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:30:24.176 00:00:11.796 TCP 12.102.0.1:51560 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:30:45.890 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:30:46.074 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:30:46.024 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:30:46.002 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:30:45.913 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:30:45.966 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:30:45.868 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:31:26.019 00:00:11.808 TCP 12.102.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:32:27.876 00:00:12.239 TCP 12.102.0.1:59682 -> 1.101.0.1:3000 15 1926 1 2025-12-01 20:33:30.160 00:00:11.815 TCP 12.102.0.1:52524 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:34:32.024 00:00:11.764 TCP 12.102.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:35:46.005 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:35:46.276 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:35:46.041 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:35:46.028 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:35:33.827 00:00:11.820 TCP 12.102.0.1:55952 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:35:46.295 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:35:46.186 00:00:00.038 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:35:46.041 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:31:15.152 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:36:35.701 00:00:11.778 TCP 12.102.0.1:53368 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:32:15.148 00:06:00.169 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:37:37.524 00:00:11.823 TCP 12.102.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:38:39.380 00:00:11.818 TCP 12.102.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:39:41.238 00:00:11.803 TCP 12.102.0.1:35252 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:40:46.256 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:40:46.507 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:40:46.215 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:40:46.285 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:40:46.410 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:40:46.323 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:40:46.232 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:40:43.085 00:00:11.800 TCP 12.102.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:41:44.927 00:00:11.783 TCP 12.102.0.1:41656 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:42:46.747 00:00:11.803 TCP 12.102.0.1:59754 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:38:15.153 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:43:48.589 00:00:12.161 TCP 12.102.0.1:55234 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:39:15.151 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:44:50.792 00:00:11.802 TCP 12.102.0.1:32978 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:45:46.473 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:45:46.556 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:45:46.571 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:45:46.369 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:45:46.383 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:45:46.384 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:45:46.451 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:45:52.629 00:00:11.813 TCP 12.102.0.1:37854 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:46:54.481 00:00:11.802 TCP 12.102.0.1:57276 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:47:56.320 00:00:11.806 TCP 12.102.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:48:58.162 00:00:11.805 TCP 12.102.0.1:52238 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:50:00.005 00:00:11.835 TCP 12.102.0.1:45074 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:45:15.155 00:06:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:50:46.552 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:50:46.576 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:50:46.616 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:50:46.502 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:50:46.532 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:50:46.560 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:50:46.348 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:46:15.153 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:51:01.875 00:00:11.767 TCP 12.102.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:52:03.692 00:00:11.811 TCP 12.102.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:53:05.543 00:00:11.811 TCP 12.102.0.1:54216 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:54:07.391 00:00:11.805 TCP 12.102.0.1:45264 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:55:09.232 00:00:11.811 TCP 12.102.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:55:46.672 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 20:55:46.693 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 20:55:46.660 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:55:46.486 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 20:55:46.362 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 20:55:46.650 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 20:55:46.594 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 20:56:11.082 00:00:11.809 TCP 12.102.0.1:45222 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:52:15.157 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 20:57:12.931 00:00:11.824 TCP 12.102.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:53:15.155 00:06:00.169 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 20:58:14.797 00:00:11.801 TCP 12.102.0.1:37222 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125329, total packets: 1154, avg bps: 265, avg pps: 0, avg bpp: 108 Time window: 2025-12-01 19:56:15 - 2025-12-01 20:59:15 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0048s User: 0.0010s Wall: 0.0063s flows/second: 25452.8 Runtime: 0.0063s