Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 23:59:32.230 00:00:11.759 TCP 12.102.0.1:41500 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:00:34.039 00:00:11.799 TCP 12.102.0.1:59828 -> 1.101.0.1:3000 11 1507 1 2025-08-24 23:57:19.778 00:05:00.461 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:01:35.878 00:00:11.758 TCP 12.102.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:02:37.679 00:00:11.803 TCP 12.102.0.1:53626 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:03:01.484 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:03:01.682 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:03:01.401 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:03:01.541 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:03:01.669 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:03:01.595 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:03:01.517 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:03:39.525 00:00:11.762 TCP 12.102.0.1:47254 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:00:19.780 00:05:00.456 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:04:41.328 00:00:11.802 TCP 12.102.0.1:34782 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:05:43.168 00:00:11.797 TCP 12.102.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:06:45.011 00:00:11.798 TCP 12.102.0.1:51568 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:03:19.779 00:05:00.461 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:07:46.858 00:00:11.822 TCP 12.102.0.1:45546 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:08:01.666 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:08:01.809 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:08:01.755 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:08:01.554 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:08:01.678 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:08:01.578 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:08:01.643 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:08:48.713 00:00:11.802 TCP 12.102.0.1:34692 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:09:50.551 00:00:11.802 TCP 12.102.0.1:54888 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:06:19.782 00:05:00.455 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:10:52.391 00:00:11.805 TCP 12.102.0.1:34818 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:11:54.237 00:00:11.757 TCP 12.102.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:13:01.824 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:13:01.830 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:13:02.013 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:13:01.808 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:13:01.831 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:13:01.949 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:13:01.785 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:12:56.062 00:00:11.765 TCP 12.102.0.1:55716 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:09:19.779 00:05:00.461 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:13:57.865 00:00:11.834 TCP 12.102.0.1:48814 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:14:59.736 00:00:11.806 TCP 12.102.0.1:49814 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:16:01.585 00:00:11.803 TCP 12.102.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:12:19.783 00:05:00.455 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:17:03.431 00:00:11.800 TCP 12.102.0.1:40100 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:18:01.785 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:18:01.839 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:18:02.067 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:18:01.847 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:18:01.809 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:18:01.936 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:18:01.893 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:18:05.270 00:00:11.803 TCP 12.102.0.1:39288 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:19:07.112 00:00:11.771 TCP 12.102.0.1:33594 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:15:19.783 00:05:00.460 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:20:08.922 00:00:11.814 TCP 12.102.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:21:10.784 00:00:11.757 TCP 12.102.0.1:60622 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:18:19.784 00:05:00.454 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:22:12.583 00:00:11.765 TCP 12.102.0.1:41844 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:23:02.025 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:23:02.171 00:00:00.046 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:23:01.954 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:23:01.912 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:23:01.963 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:23:01.990 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:23:01.890 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:23:14.381 00:00:11.811 TCP 12.102.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:24:16.230 00:00:11.814 TCP 12.102.0.1:47570 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:21:19.784 00:05:00.458 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:25:18.081 00:00:11.754 TCP 12.102.0.1:54232 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:26:19.873 00:00:11.805 TCP 12.102.0.1:40478 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:27:21.719 00:00:11.942 TCP 12.102.0.1:33102 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:28:02.222 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:28:02.020 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:28:01.887 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:28:01.931 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:28:02.047 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:28:02.070 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:28:01.866 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:24:19.787 00:05:00.453 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:28:23.699 00:00:11.808 TCP 12.102.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:29:25.543 00:00:11.798 TCP 12.102.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:30:27.387 00:00:11.801 TCP 12.102.0.1:42704 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:27:19.785 00:05:00.458 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:31:29.234 00:00:11.766 TCP 12.102.0.1:50874 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:32:31.064 00:00:11.762 TCP 12.102.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:33:01.995 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:33:01.959 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:33:02.085 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:33:02.196 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:33:02.090 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:33:01.862 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:33:02.175 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:33:32.863 00:00:11.799 TCP 12.102.0.1:33512 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:30:19.789 00:05:00.452 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:34:34.702 00:00:11.805 TCP 12.102.0.1:42586 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:35:36.547 00:00:11.797 TCP 12.102.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:36:38.382 00:00:11.814 TCP 12.102.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:33:19.788 00:05:00.456 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:37:40.234 00:00:11.760 TCP 12.102.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:38:02.412 00:00:00.008 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:38:02.407 00:00:00.013 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:38:02.318 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:38:02.126 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:38:01.990 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:38:02.193 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:38:02.103 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:38:42.048 00:00:11.919 TCP 12.102.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:39:44.006 00:00:11.803 TCP 12.102.0.1:52266 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:36:19.791 00:05:00.451 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:40:45.846 00:00:11.802 TCP 12.102.0.1:35168 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:41:47.688 00:00:11.805 TCP 12.102.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:43:02.074 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:43:02.432 00:00:00.033 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:42:49.530 00:00:11.804 TCP 12.102.0.1:48428 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:43:02.488 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:43:02.098 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:43:02.641 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:43:02.223 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:43:02.732 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:39:19.796 00:05:00.449 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:43:51.370 00:00:11.814 TCP 12.102.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:44:53.223 00:00:11.807 TCP 12.102.0.1:59392 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:45:55.085 00:00:11.804 TCP 12.102.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:42:19.798 00:05:00.445 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:46:56.924 00:00:11.870 TCP 12.102.0.1:38030 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:48:02.353 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:48:02.503 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:48:02.576 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:48:02.474 00:00:00.028 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:48:02.607 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:48:02.419 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:48:02.453 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:47:58.835 00:00:11.801 TCP 12.102.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:49:00.674 00:00:11.762 TCP 12.102.0.1:41668 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:45:19.798 00:05:00.448 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:50:02.477 00:00:12.389 TCP 12.102.0.1:48236 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:51:04.901 00:00:11.802 TCP 12.102.0.1:48924 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:52:06.741 00:00:11.852 TCP 12.102.0.1:51374 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:48:19.801 00:05:00.444 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:53:02.399 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:53:02.699 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:53:02.644 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:53:02.698 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:53:02.421 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:53:02.466 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:53:02.505 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:53:08.631 00:00:11.797 TCP 12.102.0.1:56068 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:54:10.465 00:00:11.807 TCP 12.102.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:51:19.799 00:05:00.452 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-08-25 00:55:12.314 00:00:11.803 TCP 12.102.0.1:48456 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:56:14.155 00:00:11.813 TCP 12.102.0.1:42196 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:57:16.005 00:00:11.783 TCP 12.102.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:58:02.774 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-08-25 00:58:02.936 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-08-25 00:58:02.706 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:58:03.109 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-08-25 00:58:02.797 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-08-25 00:58:03.049 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-08-25 00:58:03.148 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-08-25 00:54:19.803 00:05:00.448 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-08-25 00:58:17.826 00:00:11.771 TCP 12.102.0.1:40372 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123334, total packets: 1130, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-08-24 23:57:19 - 2025-08-25 00:59:20 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0043s User: 0.0009s Wall: 0.0036s flows/second: 45076.1 Runtime: 0.0036s