Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 03:58:46.705 00:00:11.802 TCP 12.102.0.1:42558 -> 1.101.0.1:3000 11 1507 1 2025-08-15 03:55:14.832 00:05:00.247 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 03:59:48.549 00:00:11.798 TCP 12.102.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:00:50.386 00:00:11.772 TCP 12.102.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:01:52.199 00:00:11.763 TCP 12.102.0.1:37770 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:02:54.002 00:00:11.810 TCP 12.102.0.1:55512 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:03:17.666 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:03:17.648 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:03:17.485 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:03:17.787 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:03:17.702 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:03:17.658 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:03:17.765 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:03:55.848 00:00:11.798 TCP 12.102.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:00:14.836 00:05:00.242 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:04:57.684 00:00:11.760 TCP 12.102.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:01:14.835 00:05:00.246 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:05:59.486 00:00:11.803 TCP 12.102.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:07:01.329 00:00:11.801 TCP 12.102.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:08:17.631 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:08:17.384 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:08:17.560 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:08:17.728 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:08:17.654 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:08:03.168 00:00:11.805 TCP 12.102.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:08:17.492 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:08:17.555 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:09:05.012 00:00:11.803 TCP 12.102.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:06:14.838 00:05:00.241 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:10:06.857 00:00:11.761 TCP 12.102.0.1:52404 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:07:14.836 00:05:00.246 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:11:08.659 00:00:11.817 TCP 12.102.0.1:37124 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:12:10.513 00:00:11.807 TCP 12.102.0.1:52558 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:13:17.879 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:13:17.875 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:13:17.719 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:13:17.657 00:00:00.032 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:13:17.633 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:13:17.766 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:13:17.634 00:00:00.032 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:13:12.360 00:00:12.030 TCP 12.102.0.1:47200 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:14:14.430 00:00:11.813 TCP 12.102.0.1:57494 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:15:16.283 00:00:11.805 TCP 12.102.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:12:14.839 00:05:00.241 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:16:18.133 00:00:11.797 TCP 12.102.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:13:14.836 00:05:00.245 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:17:19.967 00:00:11.828 TCP 12.102.0.1:39914 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:18:17.668 00:00:00.036 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:18:17.534 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:18:17.638 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:18:18.109 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:18:17.691 00:00:00.036 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:18:17.937 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:18:17.914 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:18:21.834 00:00:11.799 TCP 12.102.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:19:23.675 00:00:11.769 TCP 12.102.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:20:25.484 00:00:11.803 TCP 12.102.0.1:45230 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:21:27.323 00:00:11.815 TCP 12.102.0.1:34162 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:18:14.839 00:05:00.241 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:22:29.177 00:00:11.832 TCP 12.102.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:23:17.809 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:23:17.893 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:23:17.741 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:23:17.982 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:23:18.052 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:23:17.932 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:23:17.960 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:19:14.837 00:05:00.246 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:23:31.069 00:00:11.800 TCP 12.102.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:24:32.904 00:00:11.804 TCP 12.102.0.1:55142 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:25:34.745 00:00:11.767 TCP 12.102.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:26:36.553 00:00:11.795 TCP 12.102.0.1:54304 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:27:38.386 00:00:11.807 TCP 12.102.0.1:48406 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:28:17.833 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:24:14.839 00:05:00.242 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:28:18.020 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:28:17.782 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:28:18.053 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:28:17.855 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:28:18.079 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:28:18.041 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:28:40.233 00:00:11.767 TCP 12.102.0.1:58508 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:25:14.837 00:05:00.247 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:29:42.063 00:00:11.761 TCP 12.102.0.1:52724 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:30:43.867 00:00:11.802 TCP 12.102.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:31:45.709 00:00:11.805 TCP 12.102.0.1:56924 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:32:47.553 00:00:11.797 TCP 12.102.0.1:37446 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:33:18.237 00:00:00.053 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:33:18.167 00:00:00.039 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:33:18.043 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:33:18.455 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:33:18.214 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:33:18.020 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:33:18.021 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:33:49.390 00:00:11.803 TCP 12.102.0.1:52932 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:30:14.840 00:05:00.244 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:34:51.229 00:00:11.802 TCP 12.102.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:31:14.860 00:05:00.227 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:35:53.081 00:00:11.806 TCP 12.102.0.1:48694 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:36:54.929 00:00:11.820 TCP 12.102.0.1:51136 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:37:56.793 00:00:11.801 TCP 12.102.0.1:58784 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:38:18.222 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:38:18.108 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:38:18.106 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:38:18.354 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:38:18.245 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:38:18.219 00:00:00.037 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:38:18.015 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:38:58.634 00:00:11.802 TCP 12.102.0.1:34260 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:40:00.473 00:00:11.804 TCP 12.102.0.1:51976 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:36:14.862 00:05:00.223 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:37:14.859 00:05:00.228 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:41:02.315 00:00:11.803 TCP 12.102.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:42:04.159 00:00:11.815 TCP 12.102.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:43:18.234 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:43:18.406 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:43:18.328 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:43:18.125 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:43:06.028 00:00:11.803 TCP 12.102.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:43:18.154 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:43:18.130 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:43:18.102 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:44:07.869 00:00:11.818 TCP 12.102.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:45:09.731 00:00:11.800 TCP 12.102.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:42:14.864 00:05:00.221 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:46:11.574 00:00:11.770 TCP 12.102.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:43:14.862 00:05:00.227 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:47:13.384 00:00:11.827 TCP 12.102.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:48:18.265 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:48:18.481 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:48:18.486 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:48:18.427 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:48:18.287 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:48:18.497 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:48:18.286 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:48:15.252 00:00:11.808 TCP 12.102.0.1:40584 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:49:17.097 00:00:11.759 TCP 12.102.0.1:55076 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:50:18.898 00:00:12.242 TCP 12.102.0.1:60740 -> 1.101.0.1:3000 15 1926 1 2025-08-15 04:51:21.172 00:00:11.802 TCP 12.102.0.1:59184 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:48:14.866 00:05:00.221 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:52:23.032 00:00:11.805 TCP 12.102.0.1:36838 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:53:18.575 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:49:14.863 00:05:00.226 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-15 04:53:18.576 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:53:18.210 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:53:18.670 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:53:18.599 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:53:18.439 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:53:18.407 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:53:24.876 00:00:11.802 TCP 12.102.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:54:26.716 00:00:12.040 TCP 12.102.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:55:28.793 00:00:11.811 TCP 12.102.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:56:30.638 00:00:11.804 TCP 12.102.0.1:58440 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:57:32.479 00:00:11.797 TCP 12.102.0.1:47622 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:58:18.570 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-15 04:54:14.867 00:05:00.220 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-15 04:58:18.606 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-15 04:58:18.618 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:58:18.534 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-15 04:58:18.509 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-15 04:58:18.702 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-15 04:58:18.488 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-15 04:58:34.310 00:00:11.809 TCP 12.102.0.1:54276 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 125260, total packets: 1145, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-08-15 03:55:14 - 2025-08-15 04:59:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0019s Wall: 0.0024s flows/second: 68662.4 Runtime: 0.0024s