Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 11:58:58.362 00:00:11.923 TCP 12.102.0.1:37942 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:00:00.318 00:00:11.759 TCP 12.102.0.1:37512 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:01:02.117 00:00:11.801 TCP 12.102.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:01:33.437 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:01:33.461 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:01:33.721 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:01:33.662 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:01:33.719 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:01:33.717 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:01:33.457 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:02:03.959 00:00:11.758 TCP 12.102.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-12-03 11:59:15.890 00:05:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:03:05.757 00:00:12.410 TCP 12.102.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:00:15.893 00:05:00.174 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:04:08.203 00:00:11.855 TCP 12.102.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:05:10.099 00:00:11.860 TCP 12.102.0.1:33982 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:06:11.995 00:00:11.795 TCP 12.102.0.1:46276 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:06:33.525 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:06:33.547 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:06:33.843 00:00:00.015 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:06:33.876 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:06:33.741 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:06:33.733 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:06:33.634 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:07:13.831 00:00:12.895 TCP 12.102.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:08:16.773 00:00:11.803 TCP 12.102.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:05:15.894 00:05:00.178 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:09:18.617 00:00:11.874 TCP 12.102.0.1:35756 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:06:15.896 00:05:00.173 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:10:20.539 00:00:11.761 TCP 12.102.0.1:59816 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:11:33.643 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:11:33.905 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:11:33.788 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:11:33.650 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:11:33.682 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:11:33.728 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:11:33.621 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:11:22.343 00:00:15.065 TCP 12.102.0.1:53172 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:12:27.456 00:00:11.821 TCP 12.102.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:13:29.326 00:00:11.816 TCP 12.102.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:14:31.187 00:00:11.809 TCP 12.102.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:11:15.897 00:05:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:15:33.064 00:00:11.808 TCP 12.102.0.1:53662 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:12:15.899 00:05:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:16:33.756 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:16:33.807 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:16:33.915 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:16:33.883 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:16:34.060 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:16:33.868 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:16:33.734 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:16:34.926 00:00:11.792 TCP 12.102.0.1:39348 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:17:36.757 00:00:11.808 TCP 12.102.0.1:40556 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:18:38.608 00:00:11.774 TCP 12.102.0.1:35204 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:19:40.421 00:00:11.806 TCP 12.102.0.1:59172 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:20:42.265 00:00:11.801 TCP 12.102.0.1:59278 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:17:15.898 00:05:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:21:33.944 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:21:34.089 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:21:34.031 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:21:34.217 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:21:34.068 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:21:34.257 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:21:33.922 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:21:44.109 00:00:11.827 TCP 12.102.0.1:41210 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:18:15.900 00:05:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:22:45.974 00:00:11.801 TCP 12.102.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:23:47.818 00:00:12.403 TCP 12.102.0.1:50214 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:24:50.262 00:00:11.805 TCP 12.102.0.1:36274 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:25:52.104 00:00:11.806 TCP 12.102.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:26:33.860 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:26:34.228 00:00:00.041 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:26:33.989 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:26:33.989 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:26:33.998 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:26:34.032 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:26:33.838 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:26:53.949 00:00:11.801 TCP 12.102.0.1:36346 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:23:15.901 00:05:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:27:55.802 00:00:11.805 TCP 12.102.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:24:15.902 00:05:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:28:57.640 00:00:11.857 TCP 12.102.0.1:49990 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:29:59.542 00:00:11.797 TCP 12.102.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:31:01.377 00:00:11.804 TCP 12.102.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:31:34.153 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:31:33.936 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:31:34.219 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:31:34.201 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:31:34.298 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:31:34.221 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:31:34.130 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:32:03.215 00:00:11.808 TCP 12.102.0.1:43674 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:33:05.076 00:00:11.802 TCP 12.102.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:29:15.900 00:05:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:30:15.904 00:05:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:34:06.918 00:00:11.820 TCP 12.102.0.1:37038 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:35:08.779 00:00:11.803 TCP 12.102.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:36:10.618 00:00:11.804 TCP 12.102.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:36:33.976 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:36:34.001 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:36:34.145 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:36:34.177 00:00:00.051 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:36:34.373 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:36:34.136 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:36:34.335 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:37:12.461 00:00:11.801 TCP 12.102.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:38:14.300 00:00:11.807 TCP 12.102.0.1:49468 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:35:15.901 00:05:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:39:16.153 00:00:11.809 TCP 12.102.0.1:60622 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:36:15.904 00:05:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:40:17.998 00:00:11.803 TCP 12.102.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:41:34.480 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:41:19.841 00:00:11.799 TCP 12.102.0.1:57506 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:41:34.505 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:41:34.501 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:41:34.556 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:41:34.398 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:41:34.600 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:41:34.172 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:42:21.677 00:00:11.802 TCP 12.102.0.1:49648 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:43:23.520 00:00:11.820 TCP 12.102.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:44:25.376 00:00:11.829 TCP 12.102.0.1:58908 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:41:15.904 00:05:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:45:27.246 00:00:11.800 TCP 12.102.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:42:15.905 00:05:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:46:34.473 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:46:34.455 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:46:34.473 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:46:34.435 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:46:34.491 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:46:34.545 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:46:34.469 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:46:29.086 00:00:11.801 TCP 12.102.0.1:45562 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:47:30.921 00:00:11.867 TCP 12.102.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:48:32.828 00:00:11.807 TCP 12.102.0.1:35730 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:49:34.674 00:00:11.809 TCP 12.102.0.1:47244 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:50:36.523 00:00:11.812 TCP 12.102.0.1:48062 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:47:15.909 00:05:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:51:34.334 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:51:34.643 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:51:34.393 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:51:34.554 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:51:34.787 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:51:34.517 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:51:34.311 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:51:38.377 00:00:11.814 TCP 12.102.0.1:56916 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:48:15.907 00:05:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:52:40.238 00:00:11.763 TCP 12.102.0.1:43940 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:53:42.064 00:00:24.291 TCP 12.102.0.1:54768 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:54:56.400 00:00:11.817 TCP 12.102.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:55:58.262 00:00:11.806 TCP 12.102.0.1:52762 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:56:34.734 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-03 12:56:34.756 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-03 12:56:34.388 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:56:34.751 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-03 12:56:34.711 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-03 12:56:34.563 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-03 12:56:34.615 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-03 12:57:00.115 00:00:11.822 TCP 12.102.0.1:47976 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:53:15.907 00:05:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-03 12:54:15.909 00:05:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-03 12:58:01.975 00:00:11.800 TCP 12.102.0.1:46188 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123334, total packets: 1130, avg bps: 272, avg pps: 0, avg bpp: 109 Time window: 2025-12-03 11:58:58 - 2025-12-03 12:59:16 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0040s User: 0.0013s Wall: 0.0033s flows/second: 49723.9 Runtime: 0.0033s