Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 12:59:32.973 00:00:11.803 TCP 12.102.0.1:55272 -> 1.101.0.1:3000 11 1507 1 2025-08-09 12:56:11.831 00:05:00.613 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:00:35.007 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:00:35.118 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:00:34.955 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:00:34.889 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:00:35.311 00:00:00.029 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:00:35.063 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:00:34.868 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:00:34.817 00:00:11.815 TCP 12.102.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:01:36.677 00:00:11.806 TCP 12.102.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-08-09 12:58:11.829 00:05:00.617 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:02:38.519 00:00:11.768 TCP 12.102.0.1:51136 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:03:40.318 00:00:11.803 TCP 12.102.0.1:48094 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:04:42.160 00:00:11.813 TCP 12.102.0.1:59028 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:05:35.012 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:05:35.049 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:05:35.204 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:05:35.154 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:05:35.033 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:05:35.142 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:05:35.139 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:05:44.012 00:00:11.759 TCP 12.102.0.1:56760 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:02:11.832 00:05:00.612 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:06:45.804 00:00:11.801 TCP 12.102.0.1:52516 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:07:47.646 00:00:11.827 TCP 12.102.0.1:50322 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:04:11.831 00:05:00.616 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:08:49.513 00:00:11.806 TCP 12.102.0.1:37266 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:09:51.361 00:00:11.834 TCP 12.102.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:10:35.222 00:00:00.018 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:10:35.373 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:10:35.321 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:10:35.185 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:10:35.446 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:10:35.255 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:10:35.163 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:10:53.234 00:00:11.806 TCP 12.102.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:11:55.080 00:00:11.817 TCP 12.102.0.1:40252 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:08:11.834 00:05:00.611 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:12:56.937 00:00:11.807 TCP 12.102.0.1:53050 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:13:58.781 00:00:12.243 TCP 12.102.0.1:34256 -> 1.101.0.1:3000 15 1926 1 2025-08-09 13:10:11.832 00:05:00.615 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:15:01.079 00:00:11.812 TCP 12.102.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:15:35.098 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:15:35.530 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:15:35.368 00:00:00.029 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:15:35.387 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:15:35.345 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:15:35.349 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:15:35.363 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:16:02.928 00:00:11.818 TCP 12.102.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:17:04.788 00:00:11.825 TCP 12.102.0.1:42958 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:14:11.835 00:05:00.610 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:18:06.646 00:00:11.817 TCP 12.102.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:19:08.505 00:00:11.804 TCP 12.102.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:16:11.832 00:05:00.616 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:20:10.347 00:00:11.804 TCP 12.102.0.1:53634 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:20:35.609 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:20:35.942 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:20:35.795 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:20:35.631 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:20:35.816 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:20:35.596 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:20:35.703 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:21:12.188 00:00:11.799 TCP 12.102.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:22:14.046 00:00:11.796 TCP 12.102.0.1:45830 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:23:15.884 00:00:11.763 TCP 12.102.0.1:37516 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:20:11.836 00:05:00.610 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:24:17.685 00:00:11.811 TCP 12.102.0.1:40444 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:25:19.520 00:00:11.805 TCP 12.102.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:25:35.297 00:00:00.031 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:25:35.594 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:25:35.632 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:25:35.551 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:25:35.320 00:00:00.031 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:25:35.544 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:25:35.497 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:22:11.834 00:05:00.615 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:26:21.368 00:00:11.821 TCP 12.102.0.1:52136 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:27:23.225 00:00:11.804 TCP 12.102.0.1:59092 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:28:25.081 00:00:11.819 TCP 12.102.0.1:59150 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:29:26.940 00:00:11.806 TCP 12.102.0.1:34888 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:26:11.837 00:05:00.610 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:30:35.548 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:30:35.745 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:30:35.693 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:30:35.790 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:30:35.571 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:30:35.703 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:30:35.567 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:30:28.782 00:00:11.783 TCP 12.102.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:31:30.578 00:00:11.802 TCP 12.102.0.1:58710 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:28:11.835 00:05:00.614 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:32:32.417 00:00:11.811 TCP 12.102.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:33:34.258 00:00:11.851 TCP 12.102.0.1:35168 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:34:36.150 00:00:11.808 TCP 12.102.0.1:45830 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:35:35.732 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:35:35.922 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:35:35.813 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:35:35.788 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:35:35.763 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:35:35.852 00:00:00.018 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:35:35.765 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:35:37.996 00:00:11.799 TCP 12.102.0.1:35510 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:32:11.838 00:05:00.612 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:36:39.831 00:00:11.815 TCP 12.102.0.1:49288 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:37:41.679 00:00:11.803 TCP 12.102.0.1:39220 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:34:11.839 00:05:00.613 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:38:43.521 00:00:12.241 TCP 12.102.0.1:48098 -> 1.101.0.1:3000 15 1926 1 2025-08-09 13:39:45.797 00:00:11.758 TCP 12.102.0.1:34272 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:40:36.269 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:40:36.063 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:40:35.756 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:40:35.964 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:40:36.113 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:40:35.831 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:40:35.808 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:40:47.594 00:00:11.761 TCP 12.102.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:41:49.399 00:00:11.804 TCP 12.102.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:38:11.841 00:05:00.608 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:42:51.260 00:00:11.809 TCP 12.102.0.1:35406 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:43:53.112 00:00:11.811 TCP 12.102.0.1:49858 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:40:11.839 00:05:00.613 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:44:54.965 00:00:11.805 TCP 12.102.0.1:53440 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:45:36.049 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:45:36.147 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:45:35.811 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:45:36.006 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:45:35.907 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:45:35.942 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:45:35.983 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:45:56.808 00:00:11.800 TCP 12.102.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:46:58.649 00:00:11.765 TCP 12.102.0.1:58342 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:44:11.844 00:05:00.608 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:48:00.467 00:00:11.779 TCP 12.102.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:49:02.283 00:00:11.798 TCP 12.102.0.1:42292 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:46:11.839 00:05:00.614 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:50:04.122 00:00:11.858 TCP 12.102.0.1:52524 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:50:36.112 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:50:36.224 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:50:35.885 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:50:36.096 00:00:00.032 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:50:36.135 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:50:36.159 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:50:36.132 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:51:06.037 00:00:11.811 TCP 12.102.0.1:46446 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:52:07.870 00:00:11.813 TCP 12.102.0.1:40792 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:53:09.717 00:00:11.806 TCP 12.102.0.1:41878 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:50:11.845 00:05:00.608 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-09 13:54:11.558 00:00:11.806 TCP 12.102.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:55:13.400 00:00:11.806 TCP 12.102.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:55:36.174 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-09 13:55:36.122 00:00:00.036 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-09 13:55:36.233 00:00:00.048 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 13:55:36.157 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-09 13:55:36.196 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-09 13:55:36.282 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-09 13:55:36.127 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-09 13:52:11.842 00:05:00.615 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-09 13:56:15.246 00:00:11.808 TCP 12.102.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:57:17.107 00:00:11.809 TCP 12.102.0.1:55764 -> 1.101.0.1:3000 11 1507 1 2025-08-09 13:58:18.953 00:00:11.768 TCP 12.102.0.1:59032 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-08-09 12:56:11 - 2025-08-09 13:58:30 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0015s User: 0.0030s Wall: 0.0030s flows/second: 54712.7 Runtime: 0.0030s