Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 01:59:05.168 00:00:11.805 TCP 12.102.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:00:07.006 00:00:11.752 TCP 12.102.0.1:57494 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:00:39.366 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:00:39.542 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:00:39.389 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:00:39.513 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:00:39.596 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:00:39.570 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:00:39.313 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:01:08.800 00:00:11.807 TCP 12.102.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:57:17.462 00:06:00.349 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-20 01:57:17.460 00:06:00.354 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:02:10.643 00:00:11.799 TCP 12.102.0.1:46518 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:03:12.477 00:00:11.802 TCP 12.102.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:04:14.320 00:00:11.764 TCP 12.102.0.1:47872 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:05:16.124 00:00:11.803 TCP 12.102.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:05:39.833 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:05:39.952 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:05:39.745 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:05:39.775 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:05:39.854 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:05:39.781 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:05:39.860 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:06:17.964 00:00:11.806 TCP 12.102.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:07:19.814 00:00:11.858 TCP 12.102.0.1:48282 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:08:21.714 00:00:11.801 TCP 12.102.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:04:17.461 00:06:00.355 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:04:17.462 00:06:00.351 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-20 02:09:23.562 00:00:11.811 TCP 12.102.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:10:25.411 00:00:12.230 TCP 12.102.0.1:54686 -> 1.101.0.1:3000 15 1926 1 2025-08-20 02:10:39.815 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:10:39.859 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:10:39.726 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:10:39.610 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:10:39.722 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:10:39.682 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:10:39.587 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:11:27.685 00:00:11.798 TCP 12.102.0.1:48600 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:12:29.526 00:00:11.754 TCP 12.102.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:13:31.317 00:00:11.814 TCP 12.102.0.1:53798 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:14:33.170 00:00:11.799 TCP 12.102.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:15:39.880 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:15:39.857 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:15:39.924 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:15:39.857 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:15:39.878 00:00:00.031 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:15:39.850 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:15:39.835 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:15:35.009 00:00:11.800 TCP 12.102.0.1:55220 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:11:17.470 00:06:00.344 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-20 02:11:17.468 00:06:00.349 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:16:36.847 00:00:11.759 TCP 12.102.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:17:38.647 00:00:11.828 TCP 12.102.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:18:40.517 00:00:11.802 TCP 12.102.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:19:42.359 00:00:11.773 TCP 12.102.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:20:40.145 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:20:39.913 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:20:39.928 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:20:39.791 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:20:40.012 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:20:39.891 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:20:39.904 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:20:44.167 00:00:11.807 TCP 12.102.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:21:46.012 00:00:11.805 TCP 12.102.0.1:60338 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:22:47.864 00:00:11.806 TCP 12.102.0.1:53276 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:18:17.471 00:06:00.349 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-20 02:18:17.469 00:06:00.354 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:23:49.715 00:00:11.801 TCP 12.102.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:24:51.555 00:00:11.798 TCP 12.102.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:25:40.055 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:25:39.984 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:25:40.083 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:25:40.018 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:25:40.155 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:25:39.970 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:25:39.993 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:25:53.390 00:00:11.807 TCP 12.102.0.1:46872 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:26:55.235 00:00:11.797 TCP 12.102.0.1:41748 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:27:57.077 00:00:11.806 TCP 12.102.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:28:58.920 00:00:11.824 TCP 12.102.0.1:36854 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:30:00.780 00:00:11.763 TCP 12.102.0.1:53748 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:25:17.473 00:06:00.350 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:25:17.476 00:06:00.345 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-20 02:30:39.960 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:30:39.985 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:30:40.005 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:30:40.103 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:30:39.982 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:30:40.101 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:30:40.166 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:31:02.582 00:00:11.804 TCP 12.102.0.1:33048 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:32:04.425 00:00:11.803 TCP 12.102.0.1:55480 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:33:06.258 00:00:11.799 TCP 12.102.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:34:08.099 00:00:11.762 TCP 12.102.0.1:34714 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:35:09.900 00:00:11.795 TCP 12.102.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:35:40.141 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:35:40.144 00:00:00.032 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:35:40.185 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:35:40.186 00:00:00.039 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:35:40.164 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:35:40.172 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:35:40.226 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:36:11.733 00:00:11.767 TCP 12.102.0.1:44752 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:32:17.474 00:06:00.350 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:32:17.477 00:06:00.344 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-20 02:37:13.536 00:00:11.759 TCP 12.102.0.1:32884 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:38:15.333 00:00:11.764 TCP 12.102.0.1:39136 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:39:17.138 00:00:12.344 TCP 12.102.0.1:41042 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:40:19.518 00:00:11.813 TCP 12.102.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:40:40.236 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:40:40.427 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:40:40.360 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:40:40.325 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:40:40.341 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:40:40.346 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:40:40.302 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:41:21.371 00:00:11.781 TCP 12.102.0.1:53280 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:42:23.190 00:00:11.773 TCP 12.102.0.1:55650 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:43:25.002 00:00:11.802 TCP 12.102.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:39:17.476 00:06:00.350 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:39:17.478 00:06:00.346 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-20 02:44:26.846 00:00:11.761 TCP 12.102.0.1:42412 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:45:28.641 00:00:11.820 TCP 12.102.0.1:57704 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:45:40.137 00:00:00.032 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:45:40.550 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:45:40.171 00:00:00.044 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:45:40.363 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:45:40.413 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:45:40.362 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:45:40.342 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:46:30.502 00:00:11.801 TCP 12.102.0.1:52148 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:47:32.354 00:00:11.805 TCP 12.102.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:48:34.212 00:00:11.763 TCP 12.102.0.1:57464 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:49:36.028 00:00:11.813 TCP 12.102.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:50:40.480 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:50:40.527 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:50:40.292 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:50:40.667 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:50:40.504 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:50:40.469 00:00:00.018 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:50:40.587 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:50:37.879 00:00:11.802 TCP 12.102.0.1:52794 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:46:17.483 00:06:00.342 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-08-20 02:46:17.480 00:06:00.348 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:51:39.728 00:00:11.765 TCP 12.102.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:52:41.530 00:00:11.755 TCP 12.102.0.1:37378 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:53:43.325 00:00:11.755 TCP 12.102.0.1:60458 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:54:45.117 00:00:11.808 TCP 12.102.0.1:55630 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:55:40.647 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-20 02:55:40.811 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:55:40.603 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-20 02:55:40.671 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-20 02:55:40.689 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-20 02:55:40.733 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-20 02:55:40.649 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-20 02:55:46.957 00:00:11.765 TCP 12.102.0.1:33106 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:56:48.762 00:00:11.807 TCP 12.102.0.1:51202 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:57:50.608 00:00:11.803 TCP 12.102.0.1:47220 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:53:17.481 00:06:00.350 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-08-20 02:53:17.483 00:06:00.345 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 160, total bytes: 124491, total packets: 1146, avg bps: 267, avg pps: 0, avg bpp: 108 Time window: 2025-08-20 01:57:17 - 2025-08-20 02:59:17 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0039s User: 0.0010s Wall: 0.0023s flows/second: 68464.5 Runtime: 0.0024s