Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 23:58:57.191 00:00:11.797 TCP 12.102.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-09-01 23:59:59.032 00:00:11.808 TCP 12.102.0.1:35484 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:01:00.880 00:00:11.801 TCP 12.102.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:01:52.988 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:01:52.957 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:01:52.860 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:01:53.171 00:00:00.038 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:01:53.011 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:01:53.086 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:01:52.856 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:02:02.721 00:00:11.812 TCP 12.102.0.1:43920 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:03:04.572 00:00:11.807 TCP 12.102.0.1:47282 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:04:06.422 00:00:11.799 TCP 12.102.0.1:55758 -> 1.101.0.1:3000 11 1507 1 2025-09-01 23:59:24.079 00:06:00.070 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 00:05:08.260 00:00:11.807 TCP 12.102.0.1:45258 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:00:24.075 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 00:06:10.105 00:00:11.802 TCP 12.102.0.1:48890 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:06:52.934 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:06:52.966 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:06:53.109 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:06:52.900 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:06:52.899 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:06:53.042 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:06:52.877 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:07:11.941 00:00:11.809 TCP 12.102.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:08:13.791 00:00:11.760 TCP 12.102.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:09:15.600 00:00:11.800 TCP 12.102.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:10:17.440 00:00:11.812 TCP 12.102.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:06:24.080 00:06:00.069 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 00:11:19.287 00:00:11.804 TCP 12.102.0.1:39872 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:11:53.273 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:11:52.939 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:11:53.136 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:11:53.297 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:11:53.285 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:11:53.307 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:11:53.108 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:07:24.079 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 00:12:21.130 00:00:11.773 TCP 12.102.0.1:33390 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:13:22.938 00:00:11.804 TCP 12.102.0.1:56806 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:14:24.777 00:00:11.802 TCP 12.102.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:15:26.620 00:00:11.798 TCP 12.102.0.1:56410 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:16:28.470 00:00:11.907 TCP 12.102.0.1:51596 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:16:53.182 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:16:53.385 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:16:53.187 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:16:53.420 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:16:53.206 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:16:53.341 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:16:53.206 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:17:30.431 00:00:11.818 TCP 12.102.0.1:37516 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:13:24.083 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 00:18:32.287 00:00:12.303 TCP 12.102.0.1:55436 -> 1.101.0.1:3000 15 1926 1 2025-09-02 00:14:24.082 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 00:19:34.640 00:00:11.805 TCP 12.102.0.1:52052 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:20:36.488 00:00:11.767 TCP 12.102.0.1:38954 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:21:53.154 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:21:53.390 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:21:53.541 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:21:53.289 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:21:53.178 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:21:38.304 00:00:11.814 TCP 12.102.0.1:47038 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:21:53.546 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:21:53.450 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:22:40.153 00:00:11.768 TCP 12.102.0.1:43660 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:23:41.964 00:00:11.816 TCP 12.102.0.1:56754 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:24:43.825 00:00:11.805 TCP 12.102.0.1:49030 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:20:24.084 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 00:25:45.668 00:00:11.809 TCP 12.102.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:21:24.083 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 00:26:53.496 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:26:53.532 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:26:53.393 00:00:00.039 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:26:53.760 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:26:53.519 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:26:53.460 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:26:53.514 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:26:47.521 00:00:11.854 TCP 12.102.0.1:59704 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:27:49.412 00:00:11.801 TCP 12.102.0.1:38504 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:28:51.251 00:00:11.802 TCP 12.102.0.1:49942 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:29:53.102 00:00:11.804 TCP 12.102.0.1:45434 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:30:54.943 00:00:11.809 TCP 12.102.0.1:44218 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:31:53.800 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:31:53.949 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:31:53.974 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:31:53.824 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:31:54.068 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:31:54.052 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:31:54.056 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:31:56.787 00:00:11.804 TCP 12.102.0.1:41144 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:27:24.086 00:06:00.070 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 00:32:58.632 00:00:11.794 TCP 12.102.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:28:24.084 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 00:34:00.467 00:00:11.802 TCP 12.102.0.1:39098 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:35:02.306 00:00:11.811 TCP 12.102.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:36:04.155 00:00:11.812 TCP 12.102.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:36:53.562 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:36:53.751 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:36:53.718 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:36:53.776 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:36:53.584 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:36:53.785 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:36:53.863 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:37:06.002 00:00:11.805 TCP 12.102.0.1:60674 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:38:07.842 00:00:12.895 TCP 12.102.0.1:41146 -> 1.101.0.1:3000 15 1926 1 2025-09-02 00:39:10.781 00:00:11.800 TCP 12.102.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:34:24.091 00:06:00.067 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 00:35:24.088 00:06:00.072 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 00:40:12.618 00:00:11.794 TCP 12.102.0.1:39416 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:41:14.452 00:00:11.804 TCP 12.102.0.1:51696 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:41:53.788 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:41:53.948 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:41:53.753 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:41:53.813 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:41:53.942 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:41:53.825 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:41:53.484 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:42:16.296 00:00:11.838 TCP 12.102.0.1:57304 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:43:18.138 00:00:11.823 TCP 12.102.0.1:59442 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:44:19.996 00:00:11.847 TCP 12.102.0.1:36926 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:45:21.882 00:00:11.763 TCP 12.102.0.1:60006 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:41:24.094 00:06:00.066 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 00:46:23.686 00:00:11.801 TCP 12.102.0.1:45750 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:46:53.951 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:46:53.923 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:46:53.643 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:46:53.855 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:46:53.900 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:46:54.015 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:46:53.994 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:42:24.090 00:06:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 00:47:25.525 00:00:11.770 TCP 12.102.0.1:52968 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:48:27.330 00:00:11.798 TCP 12.102.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:49:29.168 00:00:11.811 TCP 12.102.0.1:34582 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:50:31.024 00:00:11.802 TCP 12.102.0.1:45468 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:51:32.867 00:00:11.810 TCP 12.102.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:51:53.765 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:51:53.959 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:51:53.844 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:51:53.822 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:51:54.014 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:51:54.099 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:51:54.015 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:52:34.713 00:00:11.766 TCP 12.102.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:48:24.095 00:06:00.071 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 00:53:36.517 00:00:11.801 TCP 12.102.0.1:53922 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:49:24.092 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 00:54:38.357 00:00:11.828 TCP 12.102.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:55:40.224 00:00:11.806 TCP 12.102.0.1:45562 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:56:42.080 00:00:11.764 TCP 12.102.0.1:58206 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:56:54.165 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 00:56:54.029 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 00:56:54.017 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 00:56:54.150 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 00:56:54.188 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 00:56:54.156 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 00:56:54.004 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 00:57:43.891 00:00:11.799 TCP 12.102.0.1:35024 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 278, avg pps: 0, avg bpp: 109 Time window: 2025-09-01 23:58:57 - 2025-09-02 00:57:55 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0044s User: 0.0011s Wall: 0.1680s flows/second: 940.5 Runtime: 0.1680s