Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 00:59:39.288 00:00:11.805 TCP 12.102.0.1:35406 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:00:51.090 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:00:51.113 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:00:51.348 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:00:51.352 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:00:51.350 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:00:51.605 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:00:51.406 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:00:41.127 00:00:11.807 TCP 12.102.0.1:39206 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:01:42.977 00:00:11.869 TCP 12.102.0.1:60054 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:57:15.220 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:02:44.889 00:00:11.873 TCP 12.102.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:58:15.219 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 01:03:46.797 00:00:11.802 TCP 12.102.0.1:58912 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:04:48.639 00:00:11.820 TCP 12.102.0.1:51936 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:05:51.806 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:05:51.890 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:05:51.873 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:05:51.917 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:05:51.725 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:05:51.887 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:05:51.783 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:05:50.487 00:00:11.848 TCP 12.102.0.1:48450 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:06:52.374 00:00:11.818 TCP 12.102.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:07:54.232 00:00:12.146 TCP 12.102.0.1:43012 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:08:56.420 00:00:11.771 TCP 12.102.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:04:15.221 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:09:58.225 00:00:11.802 TCP 12.102.0.1:41792 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:05:15.219 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 01:10:51.436 00:00:00.019 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:10:51.459 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:10:51.829 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:10:51.774 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:10:51.670 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:10:51.824 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:10:51.719 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:11:00.089 00:00:11.799 TCP 12.102.0.1:44818 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:12:01.929 00:00:11.965 TCP 12.102.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:13:03.943 00:00:11.804 TCP 12.102.0.1:54158 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:14:05.788 00:00:11.803 TCP 12.102.0.1:59216 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:15:07.631 00:00:11.811 TCP 12.102.0.1:43304 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:15:51.624 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:15:51.648 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:15:51.792 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:15:51.870 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:15:51.965 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:15:51.582 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:15:51.802 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:11:15.224 00:06:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:16:09.486 00:00:11.769 TCP 12.102.0.1:43508 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:12:15.223 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 01:17:11.305 00:00:11.818 TCP 12.102.0.1:54222 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:18:13.164 00:00:11.802 TCP 12.102.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:19:15.008 00:00:11.767 TCP 12.102.0.1:39688 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:20:16.821 00:00:11.802 TCP 12.102.0.1:46122 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:20:51.862 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:20:51.884 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:20:51.822 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:20:51.791 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:20:51.962 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:20:51.693 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:20:51.833 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:21:18.661 00:00:11.866 TCP 12.102.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:22:20.560 00:00:11.802 TCP 12.102.0.1:48246 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:18:15.229 00:06:00.187 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:23:22.401 00:00:12.202 TCP 12.102.0.1:60926 -> 1.101.0.1:3000 15 1926 1 2025-12-02 01:19:15.227 00:06:00.192 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 01:24:24.637 00:00:11.798 TCP 12.102.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:25:26.474 00:00:11.804 TCP 12.102.0.1:51604 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:25:51.863 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:25:51.888 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:25:51.811 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:25:51.817 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:25:52.063 00:00:00.046 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:25:52.000 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:25:52.074 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:26:28.319 00:00:11.799 TCP 12.102.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:27:30.154 00:00:11.800 TCP 12.102.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:28:31.992 00:00:11.796 TCP 12.102.0.1:40080 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:29:33.829 00:00:11.800 TCP 12.102.0.1:40662 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:25:15.231 00:06:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:30:35.670 00:00:11.806 TCP 12.102.0.1:41106 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:30:51.934 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:30:51.911 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:30:52.149 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:30:52.014 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:30:52.116 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:30:52.064 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:30:52.018 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:26:15.231 00:06:00.191 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 01:31:37.517 00:00:11.812 TCP 12.102.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:32:39.375 00:00:11.816 TCP 12.102.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:33:41.226 00:00:11.812 TCP 12.102.0.1:56466 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:34:43.080 00:00:11.808 TCP 12.102.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:35:51.960 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:35:51.841 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:35:52.195 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:35:52.181 00:00:00.048 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:35:44.929 00:00:11.811 TCP 12.102.0.1:55036 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:35:52.290 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:35:52.206 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:35:52.172 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:36:46.774 00:00:11.806 TCP 12.102.0.1:47932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:32:15.232 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:37:48.615 00:00:11.799 TCP 12.102.0.1:56020 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:33:15.231 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 01:38:50.456 00:00:11.802 TCP 12.102.0.1:39162 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:39:52.298 00:00:11.802 TCP 12.102.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:40:52.952 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:40:52.863 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:40:53.036 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:40:52.799 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:40:52.781 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:40:52.912 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:40:52.928 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:40:54.150 00:00:11.811 TCP 12.102.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:41:55.997 00:00:11.796 TCP 12.102.0.1:35732 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:42:57.833 00:00:11.812 TCP 12.102.0.1:55030 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:43:59.680 00:00:11.776 TCP 12.102.0.1:48722 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:39:15.236 00:06:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:45:01.475 00:00:11.855 TCP 12.102.0.1:57400 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:40:15.232 00:06:00.194 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 01:45:52.387 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:45:52.502 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:45:52.368 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:45:52.407 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:45:52.443 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:45:52.373 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:45:52.364 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:46:03.367 00:00:11.803 TCP 12.102.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:47:05.216 00:00:11.763 TCP 12.102.0.1:60922 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:48:07.027 00:00:11.797 TCP 12.102.0.1:48172 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:49:08.869 00:00:11.805 TCP 12.102.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:50:10.709 00:00:11.786 TCP 12.102.0.1:50634 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:50:52.584 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:50:52.607 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:50:52.418 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:50:52.576 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:50:52.473 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:50:52.634 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:50:52.575 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:46:15.235 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:51:12.538 00:00:11.817 TCP 12.102.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:47:15.232 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 01:52:14.396 00:00:11.814 TCP 12.102.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:53:16.248 00:00:11.802 TCP 12.102.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:54:18.092 00:00:11.807 TCP 12.102.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:55:19.937 00:00:11.812 TCP 12.102.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:55:52.615 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 01:55:52.638 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 01:55:52.455 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:55:52.491 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 01:55:52.584 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 01:55:52.690 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 01:55:52.692 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 01:56:21.787 00:00:11.798 TCP 12.102.0.1:57278 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:57:23.627 00:00:11.765 TCP 12.102.0.1:43142 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:53:15.236 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 01:58:25.433 00:00:11.808 TCP 12.102.0.1:44794 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-12-02 00:57:15 - 2025-12-02 01:59:15 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0012s User: 0.0036s Wall: 0.0023s flows/second: 69861.1 Runtime: 0.0023s