Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 03:59:05.452 00:00:11.800 TCP 12.102.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:00:07.294 00:00:11.807 TCP 12.102.0.1:55698 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:00:55.116 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:00:55.138 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:00:55.263 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:00:55.288 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:00:55.105 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:00:55.070 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:00:54.988 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:01:09.139 00:00:11.957 TCP 12.102.0.1:56634 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:02:11.136 00:00:11.798 TCP 12.102.0.1:42612 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:03:12.970 00:00:11.800 TCP 12.102.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:59:15.283 00:06:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 04:04:14.805 00:00:11.802 TCP 12.102.0.1:34892 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:00:15.282 00:06:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 04:05:16.642 00:00:11.784 TCP 12.102.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:05:55.053 00:00:00.040 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:05:55.075 00:00:00.040 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.201 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.392 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.088 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.197 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.080 00:00:00.048 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:06:18.465 00:00:11.803 TCP 12.102.0.1:52956 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:07:20.300 00:00:11.798 TCP 12.102.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:08:22.136 00:00:12.247 TCP 12.102.0.1:37288 -> 1.101.0.1:3000 15 1926 1 2025-12-02 04:09:24.418 00:00:11.761 TCP 12.102.0.1:37066 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:10:26.218 00:00:11.761 TCP 12.102.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:10:55.461 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:10:55.482 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.595 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.633 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.689 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.686 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.582 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:06:15.286 00:06:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 04:11:28.022 00:00:11.815 TCP 12.102.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:07:15.282 00:06:00.192 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 04:12:29.874 00:00:11.803 TCP 12.102.0.1:33254 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:13:31.717 00:00:11.763 TCP 12.102.0.1:42572 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:14:33.518 00:00:11.800 TCP 12.102.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:15:35.359 00:00:11.801 TCP 12.102.0.1:33686 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:15:55.282 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.412 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.499 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.292 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.526 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.166 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.262 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:16:37.200 00:00:11.802 TCP 12.102.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:17:39.052 00:00:11.800 TCP 12.102.0.1:42430 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:13:15.285 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 04:18:40.896 00:00:11.798 TCP 12.102.0.1:43906 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:14:15.283 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 04:19:42.730 00:00:11.800 TCP 12.102.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:20:55.695 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:20:55.717 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.628 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:20:44.566 00:00:11.801 TCP 12.102.0.1:44022 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:20:55.594 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.763 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.440 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.612 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:21:46.404 00:00:11.817 TCP 12.102.0.1:34646 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:22:48.260 00:00:11.759 TCP 12.102.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:23:50.077 00:00:12.197 TCP 12.102.0.1:45260 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:24:52.310 00:00:11.811 TCP 12.102.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:20:15.289 00:06:00.186 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 04:25:55.664 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:25:55.686 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.879 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.528 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.704 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.702 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.690 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:25:54.162 00:00:11.810 TCP 12.102.0.1:55066 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:21:15.286 00:06:00.192 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 04:26:56.021 00:00:11.801 TCP 12.102.0.1:36006 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:27:57.875 00:00:11.764 TCP 12.102.0.1:41446 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:28:59.682 00:00:11.801 TCP 12.102.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:30:01.521 00:00:11.760 TCP 12.102.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:30:55.605 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.440 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.554 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.700 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.807 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.621 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.582 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:31:03.320 00:00:11.831 TCP 12.102.0.1:47588 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:32:05.191 00:00:11.793 TCP 12.102.0.1:36040 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:27:15.305 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 04:28:15.303 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 04:33:07.025 00:00:12.084 TCP 12.102.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:34:09.148 00:00:11.763 TCP 12.102.0.1:59924 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:35:10.944 00:00:11.767 TCP 12.102.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:35:55.668 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:35:55.692 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.796 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.827 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.471 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.818 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.688 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:36:12.750 00:00:11.771 TCP 12.102.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:37:14.559 00:00:11.801 TCP 12.102.0.1:39638 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:38:16.400 00:00:11.802 TCP 12.102.0.1:39528 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:34:15.307 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 04:39:18.240 00:00:11.822 TCP 12.102.0.1:58960 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:35:15.303 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 04:40:20.099 00:00:11.851 TCP 12.102.0.1:32834 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:40:55.900 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:40:55.965 00:00:00.019 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:40:55.906 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:40:55.764 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:40:56.056 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:40:55.835 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:40:55.879 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:41:21.990 00:00:11.796 TCP 12.102.0.1:41560 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:42:23.828 00:00:11.799 TCP 12.102.0.1:41936 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:43:25.671 00:00:11.802 TCP 12.102.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:44:27.511 00:00:11.798 TCP 12.102.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:45:29.347 00:00:11.802 TCP 12.102.0.1:34214 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:45:55.840 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:45:55.864 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:45:56.066 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:45:55.987 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:45:56.045 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:45:56.080 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:45:55.943 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:41:15.307 00:06:00.173 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 04:46:31.186 00:00:11.802 TCP 12.102.0.1:56270 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:42:15.306 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 04:47:33.041 00:00:11.800 TCP 12.102.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:48:34.882 00:00:11.800 TCP 12.102.0.1:39004 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:49:36.722 00:00:11.832 TCP 12.102.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:50:38.591 00:00:11.804 TCP 12.102.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:50:55.928 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:50:55.952 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:50:55.875 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:50:56.090 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:50:56.058 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:50:56.197 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:50:55.948 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:51:40.429 00:00:11.820 TCP 12.102.0.1:54826 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:52:42.287 00:00:12.004 TCP 12.102.0.1:48150 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:48:15.309 00:06:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 04:53:44.325 00:00:11.799 TCP 12.102.0.1:49300 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:49:15.308 00:06:00.180 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 04:54:46.191 00:00:11.794 TCP 12.102.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:55:56.179 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 04:55:56.315 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:55:56.259 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 04:55:56.348 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 04:55:56.005 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 04:55:56.063 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 04:55:56.156 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 04:55:48.031 00:00:11.828 TCP 12.102.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:56:49.903 00:00:11.807 TCP 12.102.0.1:54160 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:57:51.751 00:00:11.758 TCP 12.102.0.1:52648 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122769, total packets: 1118, avg bps: 277, avg pps: 0, avg bpp: 109 Time window: 2025-12-02 03:59:05 - 2025-12-02 04:58:03 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0032s User: 0.0021s Wall: 0.0027s flows/second: 58583.8 Runtime: 0.0027s