Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 22:55:08.561 00:05:00.704 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 22:59:41.705 00:00:11.806 TCP 12.102.0.1:48278 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:56:08.557 00:05:00.710 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:00:43.550 00:00:11.808 TCP 12.102.0.1:53154 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:01:45.400 00:00:11.858 TCP 12.102.0.1:54438 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:02:25.187 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:02:25.015 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:02:25.052 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:02:25.018 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:02:25.210 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:02:25.184 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:02:25.185 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:02:47.297 00:00:11.803 TCP 12.102.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:03:49.137 00:00:12.260 TCP 12.102.0.1:35700 -> 1.101.0.1:3000 15 1926 1 2025-08-02 23:04:51.436 00:00:11.811 TCP 12.102.0.1:46898 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:01:08.560 00:05:00.711 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:05:53.292 00:00:11.812 TCP 12.102.0.1:58056 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:02:08.558 00:05:00.716 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:06:55.137 00:00:11.809 TCP 12.102.0.1:35080 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:07:24.731 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:07:25.109 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:07:25.109 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:07:25.041 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:07:25.118 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:07:25.053 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:07:25.019 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:07:56.986 00:00:11.806 TCP 12.102.0.1:39796 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:08:58.832 00:00:11.801 TCP 12.102.0.1:47966 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:10:00.671 00:00:11.809 TCP 12.102.0.1:54764 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:07:08.568 00:05:00.703 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:11:02.518 00:00:12.974 TCP 12.102.0.1:34990 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:08:08.566 00:05:00.708 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:12:05.542 00:00:11.754 TCP 12.102.0.1:45522 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:12:25.038 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:12:25.158 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:12:25.315 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:12:25.034 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:12:25.161 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:12:25.147 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:12:25.013 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:13:07.333 00:00:11.802 TCP 12.102.0.1:42412 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:14:09.174 00:00:11.813 TCP 12.102.0.1:43692 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:15:11.037 00:00:11.817 TCP 12.102.0.1:48886 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:16:12.889 00:00:11.763 TCP 12.102.0.1:43250 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:13:08.570 00:05:00.704 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:17:25.139 00:00:00.046 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:17:25.114 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:17:14.690 00:00:11.804 TCP 12.102.0.1:53104 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:17:25.150 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:17:25.311 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:17:25.116 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:17:25.322 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:17:25.289 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:14:08.568 00:05:00.709 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:18:16.533 00:00:11.796 TCP 12.102.0.1:38732 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:19:18.373 00:00:11.818 TCP 12.102.0.1:49730 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:20:20.236 00:00:11.796 TCP 12.102.0.1:51248 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:21:22.083 00:00:11.803 TCP 12.102.0.1:60538 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:22:25.092 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:22:25.515 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:22:25.542 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:22:25.426 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:22:25.649 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:22:25.444 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:22:25.402 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:22:23.921 00:00:11.828 TCP 12.102.0.1:59568 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:19:08.571 00:05:00.709 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:23:25.783 00:00:11.802 TCP 12.102.0.1:40808 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:20:08.568 00:05:00.715 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:24:27.629 00:00:11.873 TCP 12.102.0.1:50200 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:25:29.518 00:00:11.818 TCP 12.102.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:26:31.368 00:00:11.786 TCP 12.102.0.1:56586 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:27:25.531 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:27:25.344 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:27:25.447 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:27:25.466 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:27:25.553 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:27:25.538 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:27:25.405 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:27:33.193 00:00:11.808 TCP 12.102.0.1:60346 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:28:35.070 00:00:11.801 TCP 12.102.0.1:51968 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:25:08.570 00:05:00.714 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:29:36.904 00:00:11.838 TCP 12.102.0.1:56388 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:26:08.569 00:05:00.719 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:30:38.785 00:00:11.768 TCP 12.102.0.1:36186 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:31:40.591 00:00:11.805 TCP 12.102.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:32:25.671 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:32:25.495 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:32:25.625 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:32:25.492 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:32:25.704 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:32:25.634 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:32:25.470 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:32:42.433 00:00:11.803 TCP 12.102.0.1:53666 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:33:44.281 00:00:11.801 TCP 12.102.0.1:43076 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:34:46.122 00:00:11.810 TCP 12.102.0.1:59214 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:31:08.572 00:05:00.714 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:35:47.967 00:00:11.825 TCP 12.102.0.1:35620 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:32:08.569 00:05:00.720 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:36:49.825 00:00:11.799 TCP 12.102.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:37:25.957 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:37:25.875 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:37:25.981 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:37:26.175 00:00:00.038 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:37:25.980 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:37:26.094 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:37:26.057 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:37:51.674 00:00:11.760 TCP 12.102.0.1:58076 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:38:53.473 00:00:12.233 TCP 12.102.0.1:33128 -> 1.101.0.1:3000 15 1926 1 2025-08-02 23:39:55.749 00:00:11.801 TCP 12.102.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:37:08.575 00:05:00.713 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:40:57.590 00:00:11.809 TCP 12.102.0.1:44502 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:41:59.442 00:00:11.814 TCP 12.102.0.1:38678 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:38:08.574 00:05:00.717 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:42:25.919 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:42:25.818 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:42:25.885 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:42:25.829 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:42:26.010 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:42:25.896 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:42:25.807 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:43:01.303 00:00:11.803 TCP 12.102.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:44:03.146 00:00:11.771 TCP 12.102.0.1:34692 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:45:04.969 00:00:11.801 TCP 12.102.0.1:60300 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:46:06.809 00:00:11.815 TCP 12.102.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:43:08.578 00:05:00.714 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:47:08.662 00:00:11.813 TCP 12.102.0.1:53578 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:47:25.967 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:47:26.060 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:47:25.949 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:47:25.956 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:47:26.004 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:47:25.929 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:47:25.935 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:44:08.575 00:05:00.721 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:48:10.514 00:00:11.800 TCP 12.102.0.1:41954 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:49:12.357 00:00:11.833 TCP 12.102.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:50:14.225 00:00:11.807 TCP 12.102.0.1:47418 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:51:16.080 00:00:11.813 TCP 12.102.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:52:26.205 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:52:26.067 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:52:25.944 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:52:25.898 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:52:26.012 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:52:26.197 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:52:25.922 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:52:17.931 00:00:11.820 TCP 12.102.0.1:54346 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:49:08.578 00:05:00.716 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-02 23:53:19.786 00:00:11.799 TCP 12.102.0.1:44872 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:50:08.578 00:05:00.720 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-02 23:54:21.627 00:00:11.760 TCP 12.102.0.1:55358 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:55:23.425 00:00:11.804 TCP 12.102.0.1:49434 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:56:25.264 00:00:11.805 TCP 12.102.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:57:25.986 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-02 23:57:26.097 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-02 23:57:26.172 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:57:26.061 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-02 23:57:26.012 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-02 23:57:26.128 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-02 23:57:26.070 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-02 23:57:27.109 00:00:11.834 TCP 12.102.0.1:45798 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:58:28.984 00:00:11.800 TCP 12.102.0.1:38074 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-08-02 22:55:08 - 2025-08-02 23:58:40 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0051s User: 0.0000s Wall: 0.0024s flows/second: 67785.0 Runtime: 0.0024s