Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 10:59:05.833 00:00:11.802 TCP 12.102.0.1:47986 -> 1.101.0.1:3000 11 1507 1 2025-08-10 10:55:12.279 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:00:07.674 00:00:11.803 TCP 12.102.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:01:01.496 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:01:01.753 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:01:01.520 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:01:01.653 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:01:01.612 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:01:01.651 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:01:01.654 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 10:56:12.277 00:06:00.583 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:01:09.518 00:00:11.806 TCP 12.102.0.1:41020 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:02:11.366 00:00:11.818 TCP 12.102.0.1:56442 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:03:13.222 00:00:11.808 TCP 12.102.0.1:41606 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:04:15.080 00:00:11.803 TCP 12.102.0.1:49306 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:05:16.922 00:00:11.836 TCP 12.102.0.1:53326 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:06:01.633 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:06:01.741 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:06:01.743 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:06:01.704 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:06:01.743 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:06:01.503 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:06:01.681 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:06:18.803 00:00:11.833 TCP 12.102.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:02:12.281 00:06:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:07:20.675 00:00:11.806 TCP 12.102.0.1:44874 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:03:12.278 00:06:00.583 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:08:22.518 00:00:11.808 TCP 12.102.0.1:49082 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:09:24.362 00:00:11.766 TCP 12.102.0.1:59070 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:10:26.171 00:00:11.804 TCP 12.102.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:11:01.627 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:11:01.678 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:11:01.730 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:11:01.862 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:11:01.650 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:11:01.975 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:11:01.657 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:11:28.029 00:00:11.803 TCP 12.102.0.1:47334 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:12:29.871 00:00:11.759 TCP 12.102.0.1:34290 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:13:31.667 00:00:11.810 TCP 12.102.0.1:33390 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:09:12.282 00:06:00.580 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:14:33.513 00:00:11.830 TCP 12.102.0.1:32882 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:10:12.280 00:06:00.585 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:15:35.377 00:00:11.767 TCP 12.102.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:16:02.001 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:16:02.072 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:16:01.972 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:16:01.759 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:16:02.024 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:16:01.971 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:16:01.915 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:16:37.185 00:00:11.795 TCP 12.102.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:17:39.030 00:00:11.758 TCP 12.102.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:18:40.829 00:00:11.803 TCP 12.102.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:19:42.670 00:00:11.803 TCP 12.102.0.1:35828 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:20:44.510 00:00:11.766 TCP 12.102.0.1:41630 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:21:02.206 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:21:02.242 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:21:02.033 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:21:02.128 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:21:02.230 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:21:01.723 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:21:01.963 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:16:12.283 00:06:00.581 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:21:46.314 00:00:11.798 TCP 12.102.0.1:51760 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:17:12.280 00:06:00.587 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:22:48.148 00:00:11.857 TCP 12.102.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:23:50.072 00:00:11.793 TCP 12.102.0.1:36380 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:24:51.900 00:00:11.806 TCP 12.102.0.1:59492 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:26:01.981 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:26:01.878 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:26:02.103 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:26:01.869 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:26:02.068 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:26:02.038 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:26:01.845 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:25:53.744 00:00:11.804 TCP 12.102.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:26:55.593 00:00:11.770 TCP 12.102.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:23:12.285 00:06:00.580 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:27:57.402 00:00:11.761 TCP 12.102.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:28:59.205 00:00:11.805 TCP 12.102.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:24:12.285 00:06:00.584 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:30:01.078 00:00:11.803 TCP 12.102.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:31:02.303 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:31:02.122 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:31:02.243 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:31:02.054 00:00:00.049 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:31:02.357 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:31:02.063 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:31:02.032 00:00:00.047 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:31:02.917 00:00:11.774 TCP 12.102.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:32:04.729 00:00:11.813 TCP 12.102.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:33:06.577 00:00:11.810 TCP 12.102.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:34:08.428 00:00:11.799 TCP 12.102.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:30:12.288 00:06:00.580 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:35:10.267 00:00:11.760 TCP 12.102.0.1:58652 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:36:02.478 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:36:02.343 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:36:02.397 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:36:02.503 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:36:02.500 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:36:02.510 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:36:02.310 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:31:12.286 00:06:00.584 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:36:12.081 00:00:11.765 TCP 12.102.0.1:35018 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:37:13.880 00:00:11.758 TCP 12.102.0.1:47314 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:38:15.677 00:00:11.816 TCP 12.102.0.1:57830 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:39:17.533 00:00:11.800 TCP 12.102.0.1:38020 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:40:19.373 00:00:11.816 TCP 12.102.0.1:55038 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:41:02.619 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:41:02.731 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:41:02.556 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:41:02.806 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:41:02.642 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:41:02.675 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:41:02.651 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:41:21.229 00:00:11.803 TCP 12.102.0.1:57768 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:37:12.290 00:06:00.580 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:42:23.078 00:00:11.755 TCP 12.102.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:38:12.287 00:06:00.585 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:43:24.873 00:00:11.761 TCP 12.102.0.1:55734 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:44:26.678 00:00:11.802 TCP 12.102.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:45:28.521 00:00:11.806 TCP 12.102.0.1:57986 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:46:02.551 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:46:02.482 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:46:02.468 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:46:02.515 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:46:02.574 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:46:02.717 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:46:02.540 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:46:30.366 00:00:11.824 TCP 12.102.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:47:32.228 00:00:11.805 TCP 12.102.0.1:51188 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:48:34.083 00:00:11.810 TCP 12.102.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:44:12.292 00:06:00.579 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:49:35.930 00:00:11.814 TCP 12.102.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:45:12.289 00:06:00.586 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:50:37.783 00:00:11.762 TCP 12.102.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:51:02.620 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:51:02.602 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:51:02.779 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:51:02.562 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:51:02.643 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:51:02.649 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:51:02.514 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:51:39.584 00:00:11.811 TCP 12.102.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:52:41.426 00:00:11.878 TCP 12.102.0.1:43766 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:53:43.347 00:00:11.804 TCP 12.102.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:54:45.194 00:00:11.786 TCP 12.102.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:55:47.010 00:00:11.803 TCP 12.102.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:56:02.549 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-10 11:56:02.952 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-10 11:56:02.856 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:56:02.782 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-10 11:56:02.572 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-10 11:56:02.986 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-10 11:56:02.539 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-10 11:51:12.292 00:06:00.581 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-10 11:56:48.855 00:00:11.762 TCP 12.102.0.1:37662 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:52:12.290 00:06:00.592 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-10 11:57:50.659 00:00:11.814 TCP 12.102.0.1:58812 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 262, avg pps: 0, avg bpp: 108 Time window: 2025-08-10 10:55:12 - 2025-08-10 11:58:12 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0018s User: 0.0027s Wall: 0.0018s flows/second: 87666.7 Runtime: 0.0019s