Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 16:59:00.081 00:00:11.756 TCP 12.102.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:00:01.873 00:00:11.812 TCP 12.102.0.1:40780 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:01:10.681 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 16:56:15.504 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:01:10.705 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:01:10.737 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:01:10.756 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:01:10.661 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:01:10.885 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:01:10.522 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:01:03.725 00:00:11.769 TCP 12.102.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:57:15.502 00:06:00.209 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 17:02:05.530 00:00:11.795 TCP 12.102.0.1:48558 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:03:07.369 00:00:11.817 TCP 12.102.0.1:53330 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:04:09.226 00:00:11.801 TCP 12.102.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:05:11.082 00:00:11.850 TCP 12.102.0.1:41740 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:06:10.812 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:06:10.926 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:06:10.959 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:06:10.964 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:06:11.007 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:06:10.627 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:06:10.789 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:06:12.975 00:00:11.810 TCP 12.102.0.1:48992 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:07:14.823 00:00:11.798 TCP 12.102.0.1:43294 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:03:15.507 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:08:16.659 00:00:11.808 TCP 12.102.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:04:15.504 00:06:00.208 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 17:09:18.507 00:00:11.768 TCP 12.102.0.1:59820 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:10:20.316 00:00:11.761 TCP 12.102.0.1:44040 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:11:10.682 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:11:10.998 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:11:10.919 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:11:10.961 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:11:10.807 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:11:10.932 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:11:10.659 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:11:22.112 00:00:11.807 TCP 12.102.0.1:45970 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:12:23.964 00:00:11.804 TCP 12.102.0.1:36584 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:13:25.809 00:00:11.814 TCP 12.102.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:14:27.662 00:00:11.811 TCP 12.102.0.1:52632 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:10:15.506 00:06:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:15:29.515 00:00:11.796 TCP 12.102.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:16:11.427 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:16:11.803 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:16:11.604 00:00:00.016 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:16:11.374 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:16:11.262 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:16:11.366 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:16:11.450 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:11:15.506 00:06:00.208 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 17:16:31.347 00:00:11.814 TCP 12.102.0.1:41964 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:17:33.197 00:00:11.795 TCP 12.102.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:18:35.048 00:00:11.796 TCP 12.102.0.1:55378 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:19:36.885 00:00:11.763 TCP 12.102.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:20:38.687 00:00:11.807 TCP 12.102.0.1:34848 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:21:11.222 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:21:11.246 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:21:11.465 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:21:11.554 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:21:11.401 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:21:11.387 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:21:11.494 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:21:40.534 00:00:11.808 TCP 12.102.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:17:15.509 00:06:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:22:42.379 00:00:11.819 TCP 12.102.0.1:33812 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:18:15.507 00:06:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 17:23:44.236 00:00:11.801 TCP 12.102.0.1:59310 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:24:46.076 00:00:11.816 TCP 12.102.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:25:47.930 00:00:11.821 TCP 12.102.0.1:48618 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:26:11.052 00:00:00.040 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:26:11.279 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:26:11.113 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:26:11.198 00:00:00.032 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:26:10.988 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:26:11.272 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:26:11.029 00:00:00.034 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:26:49.788 00:00:11.817 TCP 12.102.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:27:51.642 00:00:12.236 TCP 12.102.0.1:53634 -> 1.101.0.1:3000 15 1926 1 2025-12-02 17:28:53.912 00:00:11.830 TCP 12.102.0.1:44140 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:24:15.512 00:06:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:29:55.782 00:00:11.799 TCP 12.102.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:25:15.509 00:06:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 17:31:11.164 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:30:57.615 00:00:11.801 TCP 12.102.0.1:58020 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:31:11.188 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:31:11.408 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:31:11.396 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:31:11.219 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:31:11.321 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:31:11.184 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:31:59.463 00:00:11.810 TCP 12.102.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:33:01.314 00:00:11.811 TCP 12.102.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:34:03.169 00:00:11.768 TCP 12.102.0.1:39472 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:35:04.978 00:00:11.804 TCP 12.102.0.1:37280 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:36:11.339 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:36:11.777 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:36:11.525 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:36:11.531 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:36:11.431 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:36:11.497 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:36:11.316 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:31:15.512 00:06:00.206 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:32:15.509 00:06:00.212 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 17:36:06.837 00:01:13.602 TCP 12.102.0.1:39720 -> 1.101.0.1:3000 22 3014 1 2025-12-02 17:38:10.476 00:00:11.805 TCP 12.102.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:39:12.318 00:00:11.858 TCP 12.102.0.1:48728 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:40:14.218 00:00:11.806 TCP 12.102.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:41:11.612 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:41:11.636 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:41:11.648 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:41:11.729 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:41:11.571 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:41:11.557 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:41:11.445 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:41:16.080 00:00:11.799 TCP 12.102.0.1:35200 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:42:17.921 00:00:11.817 TCP 12.102.0.1:33076 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:38:15.517 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:43:19.774 00:00:11.857 TCP 12.102.0.1:51108 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:39:15.514 00:06:00.209 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 17:44:21.665 00:00:11.763 TCP 12.102.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:45:23.467 00:00:11.807 TCP 12.102.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:46:11.509 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:46:11.534 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:46:11.486 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:46:11.749 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:46:11.443 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:46:11.635 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:46:11.503 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:46:25.311 00:00:11.760 TCP 12.102.0.1:47950 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:47:27.111 00:00:11.799 TCP 12.102.0.1:53008 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:48:28.948 00:00:11.811 TCP 12.102.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:49:30.799 00:00:11.809 TCP 12.102.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:45:15.518 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:50:32.643 00:00:11.830 TCP 12.102.0.1:55506 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:51:11.615 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:51:11.638 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:51:11.796 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:51:11.625 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:51:11.660 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:51:11.763 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:51:11.640 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:46:15.516 00:06:00.207 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 17:51:34.514 00:00:11.805 TCP 12.102.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:52:36.356 00:00:11.831 TCP 12.102.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:53:38.252 00:00:11.809 TCP 12.102.0.1:43368 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:54:40.099 00:00:11.808 TCP 12.102.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:55:41.945 00:00:11.805 TCP 12.102.0.1:35108 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:56:11.678 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 17:56:11.700 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 17:56:11.968 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:56:11.803 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 17:56:11.896 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 17:56:11.839 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 17:56:11.991 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 17:56:43.788 00:00:11.850 TCP 12.102.0.1:44110 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:52:15.519 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 17:57:45.677 00:00:11.807 TCP 12.102.0.1:55690 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:53:15.517 00:06:00.209 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 Summary: total flows: 159, total bytes: 124491, total packets: 1146, avg bps: 263, avg pps: 0, avg bpp: 108 Time window: 2025-12-02 16:56:15 - 2025-12-02 17:59:15 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0033s User: 0.0022s Wall: 0.0040s flows/second: 40203.4 Runtime: 0.0040s