Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 17:58:47.523 00:00:11.803 TCP 12.102.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:59:49.369 00:00:11.824 TCP 12.102.0.1:52402 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:00:51.231 00:00:11.804 TCP 12.102.0.1:60602 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:01:11.897 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:01:11.976 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:01:12.030 00:00:00.052 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:01:12.053 00:00:00.051 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:01:12.030 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:01:12.007 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:01:12.101 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:01:53.080 00:00:11.803 TCP 12.102.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:02:54.919 00:00:11.819 TCP 12.102.0.1:50780 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:03:56.774 00:00:15.550 TCP 12.102.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:59:15.521 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 18:05:02.362 00:00:11.817 TCP 12.102.0.1:55240 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:00:15.520 00:06:00.207 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 18:06:11.815 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:06:04.216 00:00:11.808 TCP 12.102.0.1:45372 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:06:12.239 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:06:12.095 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:06:12.517 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:06:12.021 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:06:12.005 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:06:12.216 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:07:06.080 00:00:11.796 TCP 12.102.0.1:56896 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:08:07.917 00:00:11.844 TCP 12.102.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:09:09.802 00:00:11.798 TCP 12.102.0.1:33818 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:10:11.638 00:00:11.803 TCP 12.102.0.1:49070 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:11:11.937 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:11:11.932 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:11:11.932 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:11:12.098 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:06:15.524 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 18:11:12.120 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:11:12.145 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:11:12.085 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:11:13.482 00:00:11.804 TCP 12.102.0.1:43290 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:07:15.521 00:06:00.208 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 18:12:15.323 00:00:11.765 TCP 12.102.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:13:17.129 00:00:11.801 TCP 12.102.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:14:18.969 00:00:12.863 TCP 12.102.0.1:48140 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:15:21.873 00:00:11.804 TCP 12.102.0.1:52516 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:16:12.154 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:16:12.176 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:16:12.306 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:16:12.230 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:16:12.092 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:16:12.372 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:16:12.178 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:16:23.717 00:00:11.801 TCP 12.102.0.1:37860 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:17:25.550 00:00:11.799 TCP 12.102.0.1:51610 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:13:15.526 00:06:00.202 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 18:18:27.393 00:00:11.814 TCP 12.102.0.1:49722 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:14:15.524 00:06:00.207 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 18:19:29.250 00:00:11.804 TCP 12.102.0.1:53598 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:20:31.093 00:00:11.815 TCP 12.102.0.1:43562 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:21:12.659 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:21:12.681 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:21:12.610 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:21:12.368 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:21:12.673 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:21:12.510 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:21:12.587 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:21:32.950 00:00:11.865 TCP 12.102.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:22:34.853 00:00:12.203 TCP 12.102.0.1:59026 -> 1.101.0.1:3000 15 1926 1 2025-12-02 18:23:37.099 00:00:11.796 TCP 12.102.0.1:47842 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:24:38.931 00:00:11.820 TCP 12.102.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:20:15.527 00:06:00.202 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 18:25:40.782 00:00:11.823 TCP 12.102.0.1:34292 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:26:12.446 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:26:12.384 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:26:12.507 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:21:15.525 00:06:00.206 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 18:26:12.571 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:26:12.434 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:26:12.468 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:26:12.485 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:26:42.643 00:00:11.765 TCP 12.102.0.1:51450 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:27:44.449 00:00:11.757 TCP 12.102.0.1:60416 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:28:46.242 00:00:11.770 TCP 12.102.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:29:48.074 00:00:11.812 TCP 12.102.0.1:36948 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:30:49.923 00:00:11.821 TCP 12.102.0.1:37258 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:31:12.382 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:31:12.404 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:31:12.418 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:31:12.542 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:31:12.224 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:31:12.493 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:31:12.476 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:31:51.790 00:00:11.799 TCP 12.102.0.1:46458 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:27:15.529 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 18:32:53.632 00:00:11.810 TCP 12.102.0.1:58182 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:28:15.526 00:06:00.208 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 18:33:55.477 00:00:11.776 TCP 12.102.0.1:52586 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:34:57.288 00:00:11.801 TCP 12.102.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:35:59.131 00:00:11.762 TCP 12.102.0.1:38690 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:36:12.377 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:36:12.714 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:36:12.898 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:36:12.594 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:36:12.535 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:36:12.707 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:36:12.355 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:37:00.932 00:00:11.808 TCP 12.102.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:38:02.780 00:00:11.808 TCP 12.102.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:39:04.628 00:00:11.817 TCP 12.102.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:34:15.530 00:06:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 18:35:15.528 00:06:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 18:40:06.484 00:00:11.800 TCP 12.102.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:41:12.650 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:41:12.672 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:41:12.537 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:41:12.744 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:41:12.837 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:41:12.726 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:41:12.888 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:41:08.324 00:00:11.875 TCP 12.102.0.1:51326 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:42:10.239 00:00:11.810 TCP 12.102.0.1:37326 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:43:12.088 00:00:11.812 TCP 12.102.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:44:13.937 00:00:11.813 TCP 12.102.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:45:15.786 00:00:11.803 TCP 12.102.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:46:12.832 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:41:15.532 00:06:00.206 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 18:46:12.855 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:46:12.889 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:46:12.915 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:46:12.652 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:46:12.714 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:46:12.796 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:46:17.625 00:00:11.768 TCP 12.102.0.1:44344 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:42:15.530 00:06:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 18:47:19.429 00:00:11.813 TCP 12.102.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:48:21.276 00:00:11.813 TCP 12.102.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:49:23.126 00:00:11.842 TCP 12.102.0.1:50846 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:50:25.009 00:00:11.786 TCP 12.102.0.1:37320 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:51:12.804 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:51:12.820 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:51:12.940 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:51:12.821 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:51:12.915 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:51:12.890 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:51:12.782 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:51:26.832 00:00:11.806 TCP 12.102.0.1:50206 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:52:28.693 00:00:11.811 TCP 12.102.0.1:51528 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:48:15.537 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 18:53:30.551 00:00:11.772 TCP 12.102.0.1:57222 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:49:15.534 00:06:00.208 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 18:54:32.361 00:00:11.799 TCP 12.102.0.1:45358 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:55:34.198 00:00:11.812 TCP 12.102.0.1:41776 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:56:13.081 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 18:56:12.930 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:56:13.158 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 18:56:13.117 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 18:56:13.099 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 18:56:12.958 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 18:56:13.059 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 18:56:36.075 00:00:11.812 TCP 12.102.0.1:45138 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:57:37.927 00:00:11.814 TCP 12.102.0.1:40186 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:58:39.783 00:00:11.851 TCP 12.102.0.1:56554 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124276, total packets: 1129, avg bps: 275, avg pps: 0, avg bpp: 110 Time window: 2025-12-02 17:58:47 - 2025-12-02 18:58:51 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0044s User: 0.0011s Wall: 0.0024s flows/second: 65859.6 Runtime: 0.0024s