Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 23:58:50.476 00:00:11.799 TCP 12.102.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:54:15.206 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 23:59:52.319 00:00:11.861 TCP 12.102.0.1:37380 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:55:15.204 00:06:00.189 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:00:50.212 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:00:50.234 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:00:50.432 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:00:50.371 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:00:50.390 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:00:50.148 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:00:50.032 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:00:54.224 00:00:11.801 TCP 12.102.0.1:47474 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:01:56.076 00:00:11.805 TCP 12.102.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:02:57.919 00:00:11.823 TCP 12.102.0.1:52678 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:03:59.779 00:00:11.824 TCP 12.102.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:05:01.642 00:00:11.818 TCP 12.102.0.1:42260 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:05:50.381 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:05:50.404 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:05:50.537 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:05:50.453 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:05:50.455 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:05:50.359 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:05:50.234 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:01:15.206 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 00:06:03.500 00:00:11.762 TCP 12.102.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:02:15.205 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:07:05.307 00:00:11.799 TCP 12.102.0.1:39342 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:08:07.141 00:00:11.840 TCP 12.102.0.1:45718 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:09:09.027 00:00:11.803 TCP 12.102.0.1:43216 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:10:10.869 00:00:11.801 TCP 12.102.0.1:40278 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:10:50.605 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:10:50.628 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:10:50.974 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:10:50.694 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:10:50.305 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:10:50.507 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:10:50.761 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:11:12.709 00:00:11.801 TCP 12.102.0.1:39010 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:12:14.545 00:00:11.803 TCP 12.102.0.1:55354 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:08:15.209 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 00:13:16.386 00:00:11.773 TCP 12.102.0.1:47922 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:09:15.209 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:14:18.194 00:00:11.801 TCP 12.102.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:15:20.033 00:00:11.801 TCP 12.102.0.1:47554 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:15:50.588 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:15:50.466 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:15:50.666 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:15:50.585 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:15:50.558 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:15:50.478 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:15:50.443 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:16:21.874 00:00:11.834 TCP 12.102.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:17:23.715 00:00:11.806 TCP 12.102.0.1:50364 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:18:25.559 00:00:11.805 TCP 12.102.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:19:27.410 00:00:11.812 TCP 12.102.0.1:38744 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:15:15.212 00:06:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 00:20:29.255 00:00:11.798 TCP 12.102.0.1:36536 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:20:50.550 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:20:50.573 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:20:50.856 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:20:50.792 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:20:50.380 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:20:50.861 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:20:50.743 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:16:15.210 00:06:00.194 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:21:31.095 00:00:11.801 TCP 12.102.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:22:32.945 00:00:11.819 TCP 12.102.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:23:34.805 00:00:11.796 TCP 12.102.0.1:40212 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:24:36.643 00:00:11.820 TCP 12.102.0.1:35504 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:25:50.813 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:25:50.835 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:25:50.923 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:25:50.715 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:25:38.477 00:00:11.797 TCP 12.102.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:25:50.798 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:25:50.821 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:25:50.851 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:26:40.314 00:00:11.800 TCP 12.102.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:22:15.213 00:06:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 00:27:42.160 00:00:11.907 TCP 12.102.0.1:52006 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:23:15.210 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:28:44.109 00:00:11.767 TCP 12.102.0.1:48262 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:29:45.914 00:00:11.831 TCP 12.102.0.1:43546 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:30:50.783 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:30:50.805 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:30:50.866 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:30:50.930 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:30:50.905 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:30:50.943 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:30:50.740 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:30:47.788 00:00:11.813 TCP 12.102.0.1:50050 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:31:49.640 00:00:11.810 TCP 12.102.0.1:46908 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:32:51.478 00:00:11.772 TCP 12.102.0.1:37840 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:33:53.292 00:00:11.757 TCP 12.102.0.1:36710 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:29:15.213 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 00:34:55.087 00:00:11.805 TCP 12.102.0.1:49088 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:30:15.211 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:35:50.904 00:00:00.046 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:35:51.125 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:35:51.015 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:35:50.863 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:35:51.089 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:35:50.840 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:35:50.881 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:35:56.929 00:00:11.820 TCP 12.102.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:36:58.788 00:00:11.766 TCP 12.102.0.1:53098 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:38:00.600 00:00:11.850 TCP 12.102.0.1:34372 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:39:02.491 00:00:11.763 TCP 12.102.0.1:39082 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:40:04.293 00:00:11.803 TCP 12.102.0.1:48300 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:40:51.086 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:40:51.110 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:40:51.013 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:40:51.122 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:40:51.122 00:00:00.047 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:40:51.329 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:40:51.084 00:00:00.040 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:36:15.220 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 00:41:06.131 00:00:11.755 TCP 12.102.0.1:60454 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:37:15.213 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:42:07.925 00:00:11.829 TCP 12.102.0.1:46778 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:43:09.795 00:00:11.803 TCP 12.102.0.1:50820 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:44:11.649 00:00:11.822 TCP 12.102.0.1:55876 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:45:13.500 00:00:11.772 TCP 12.102.0.1:42760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:45:51.009 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:45:51.181 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:45:51.032 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:45:51.144 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:45:51.247 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:45:51.126 00:00:00.045 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:45:51.148 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:46:15.312 00:00:11.773 TCP 12.102.0.1:41506 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:47:17.126 00:00:11.818 TCP 12.102.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:43:15.216 00:06:00.193 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 00:48:18.975 00:00:11.858 TCP 12.102.0.1:55502 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:44:15.214 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:49:20.871 00:00:11.765 TCP 12.102.0.1:36038 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:50:22.708 00:00:11.805 TCP 12.102.0.1:56664 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:50:51.353 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:50:51.376 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:50:51.235 00:00:00.035 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:50:51.443 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:50:51.259 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:50:51.282 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:50:51.059 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:51:24.551 00:00:11.796 TCP 12.102.0.1:42734 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:52:26.391 00:00:11.808 TCP 12.102.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:53:28.232 00:00:11.800 TCP 12.102.0.1:52752 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:54:30.076 00:00:11.803 TCP 12.102.0.1:58848 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:50:15.220 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 00:55:31.922 00:00:11.819 TCP 12.102.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:55:51.431 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 00:55:51.455 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 00:55:51.556 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:55:51.591 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 00:55:51.694 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 00:55:51.652 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 00:55:51.544 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 00:51:15.216 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 00:56:33.780 00:00:11.808 TCP 12.102.0.1:57076 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:57:35.628 00:00:11.764 TCP 12.102.0.1:39666 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:58:37.432 00:00:11.809 TCP 12.102.0.1:37440 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 125579, total packets: 1153, avg bps: 259, avg pps: 0, avg bpp: 108 Time window: 2025-12-01 23:54:15 - 2025-12-02 00:58:49 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0024s User: 0.0032s Wall: 0.0032s flows/second: 50564.1 Runtime: 0.0032s