Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 21:59:06.086 00:00:11.756 TCP 12.102.0.1:55578 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:55:15.173 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:00:07.883 00:00:11.814 TCP 12.102.0.1:51576 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:00:47.828 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:00:47.847 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:00:47.890 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:00:48.054 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:00:47.940 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:00:47.644 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:00:47.805 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 21:56:15.170 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:01:09.739 00:00:11.815 TCP 12.102.0.1:49052 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:02:11.588 00:00:11.800 TCP 12.102.0.1:52232 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:03:13.429 00:00:11.763 TCP 12.102.0.1:56128 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:04:15.232 00:00:11.799 TCP 12.102.0.1:46970 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:05:17.082 00:00:21.662 TCP 12.102.0.1:47708 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:05:47.880 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:05:47.903 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:05:48.120 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:05:48.108 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:05:48.167 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:05:48.120 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:05:47.891 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:06:28.772 00:00:11.824 TCP 12.102.0.1:54424 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:02:15.176 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:07:30.628 00:00:11.848 TCP 12.102.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:03:15.175 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:08:32.513 00:00:11.811 TCP 12.102.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:09:34.367 00:00:11.830 TCP 12.102.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:10:48.261 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:10:48.176 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:10:36.230 00:00:11.803 TCP 12.102.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:10:48.288 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:10:47.951 00:00:00.036 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:10:48.041 00:00:00.031 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:10:48.038 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:10:48.239 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:11:38.079 00:00:11.800 TCP 12.102.0.1:40496 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:12:39.918 00:00:11.836 TCP 12.102.0.1:43156 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:13:41.787 00:00:11.799 TCP 12.102.0.1:41630 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:09:15.181 00:06:00.166 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:14:43.627 00:00:11.803 TCP 12.102.0.1:39466 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:10:15.179 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:15:48.228 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:15:48.252 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:15:48.107 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:15:48.170 00:00:00.042 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:15:48.423 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:15:48.505 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:15:48.243 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:15:45.466 00:00:11.804 TCP 12.102.0.1:54868 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:16:47.314 00:00:11.817 TCP 12.102.0.1:49810 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:17:49.172 00:00:11.802 TCP 12.102.0.1:34742 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:18:51.021 00:00:11.801 TCP 12.102.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:19:52.860 00:00:11.824 TCP 12.102.0.1:52264 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:20:48.317 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:20:48.221 00:00:00.043 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:20:48.269 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:20:48.368 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:20:48.285 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:20:48.092 00:00:00.040 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:20:48.295 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:20:54.733 00:00:11.800 TCP 12.102.0.1:39806 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:16:15.182 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:21:56.569 00:00:11.821 TCP 12.102.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:17:15.180 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:22:58.446 00:00:11.812 TCP 12.102.0.1:50762 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:24:00.299 00:00:11.761 TCP 12.102.0.1:47492 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:25:02.097 00:00:11.806 TCP 12.102.0.1:52994 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:25:48.365 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:25:48.389 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:25:48.452 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:25:48.569 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:25:48.432 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:25:48.479 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:25:48.349 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:26:03.939 00:00:11.819 TCP 12.102.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:27:05.799 00:00:11.804 TCP 12.102.0.1:46602 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:23:15.185 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:28:07.643 00:00:11.803 TCP 12.102.0.1:47824 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:24:15.182 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:29:09.485 00:00:11.809 TCP 12.102.0.1:33296 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:30:11.332 00:00:11.803 TCP 12.102.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:30:48.538 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:30:48.561 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:30:48.643 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:30:48.696 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:30:48.512 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:30:48.751 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:30:48.532 00:00:00.014 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:31:13.173 00:00:11.795 TCP 12.102.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:32:15.019 00:00:11.823 TCP 12.102.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:33:16.872 00:00:11.858 TCP 12.102.0.1:54062 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:34:18.763 00:00:11.763 TCP 12.102.0.1:34816 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:30:15.187 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:35:20.565 00:00:11.805 TCP 12.102.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:35:48.494 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:35:48.843 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:35:48.782 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:35:48.507 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:35:48.637 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:35:48.481 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:35:48.471 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:31:15.183 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:36:22.408 00:00:11.812 TCP 12.102.0.1:36962 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:37:24.255 00:00:11.805 TCP 12.102.0.1:36880 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:38:26.103 00:00:11.801 TCP 12.102.0.1:53992 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:39:27.940 00:00:11.811 TCP 12.102.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:40:29.788 00:00:11.802 TCP 12.102.0.1:53528 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:40:48.757 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:40:48.780 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:40:48.584 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:40:48.627 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:40:48.816 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:40:48.576 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:40:48.649 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:41:31.626 00:00:11.761 TCP 12.102.0.1:53078 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:37:15.187 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:42:33.426 00:00:11.820 TCP 12.102.0.1:60818 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:38:15.185 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:43:35.287 00:00:11.761 TCP 12.102.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:44:37.089 00:00:11.758 TCP 12.102.0.1:46364 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:45:48.709 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:45:48.734 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:45:38.889 00:00:11.805 TCP 12.102.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:45:48.876 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:45:48.918 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:45:48.733 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:45:48.882 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:45:48.801 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:46:40.743 00:00:11.829 TCP 12.102.0.1:34064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:47:42.615 00:00:11.800 TCP 12.102.0.1:57316 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:48:44.456 00:00:11.799 TCP 12.102.0.1:57730 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:44:15.189 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:49:46.293 00:00:11.814 TCP 12.102.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:45:15.187 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:50:48.846 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:50:49.129 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:50:48.791 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:50:48.865 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:50:48.970 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:50:48.836 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:50:48.823 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:50:48.132 00:00:11.766 TCP 12.102.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:51:49.938 00:00:11.809 TCP 12.102.0.1:47936 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:52:51.789 00:00:11.764 TCP 12.102.0.1:47472 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:53:53.595 00:00:11.804 TCP 12.102.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:54:55.438 00:00:11.818 TCP 12.102.0.1:50072 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:55:49.028 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 22:55:49.049 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 22:55:48.941 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:55:49.128 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 22:55:48.855 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 22:55:49.037 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 22:55:49.097 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 22:55:57.295 00:00:11.758 TCP 12.102.0.1:49554 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:51:15.190 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 22:56:59.096 00:00:11.759 TCP 12.102.0.1:34948 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:52:15.189 00:06:00.178 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 22:58:00.894 00:00:12.236 TCP 12.102.0.1:60282 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 160, total bytes: 124491, total packets: 1146, avg bps: 263, avg pps: 0, avg bpp: 108 Time window: 2025-12-01 21:55:15 - 2025-12-01 22:58:15 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0044s User: 0.0011s Wall: 0.0047s flows/second: 34188.6 Runtime: 0.0047s