Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 03:59:19.785 00:00:11.808 TCP 12.102.0.1:52356 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:00:21.631 00:00:11.806 TCP 12.102.0.1:52734 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:01:23.479 00:00:11.779 TCP 12.102.0.1:57040 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:01:57.954 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:01:57.757 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:01:57.598 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:01:57.608 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:01:57.879 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:01:57.629 00:00:00.045 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:01:57.931 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 03:57:24.156 00:06:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 04:02:25.289 00:00:11.805 TCP 12.102.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:58:24.155 00:06:00.089 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 04:03:27.131 00:00:11.756 TCP 12.102.0.1:38002 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:04:28.935 00:00:11.810 TCP 12.102.0.1:48966 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:05:30.797 00:00:11.802 TCP 12.102.0.1:46868 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:06:32.640 00:00:11.836 TCP 12.102.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:06:57.689 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:06:57.954 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:06:58.048 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:06:57.831 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:06:57.966 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:06:58.051 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:06:57.809 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:07:34.513 00:00:11.761 TCP 12.102.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:08:36.319 00:00:11.813 TCP 12.102.0.1:57318 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:04:24.159 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 04:09:38.170 00:00:11.815 TCP 12.102.0.1:49038 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:05:24.156 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 04:10:40.042 00:00:11.763 TCP 12.102.0.1:34938 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:11:41.847 00:00:11.806 TCP 12.102.0.1:36968 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:11:58.038 00:00:00.047 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:11:57.958 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:11:58.159 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:11:57.809 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:11:58.060 00:00:00.047 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:11:58.117 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:11:57.917 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:12:43.696 00:00:11.808 TCP 12.102.0.1:60496 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:13:45.545 00:00:11.820 TCP 12.102.0.1:50920 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:14:47.406 00:00:11.810 TCP 12.102.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:15:49.263 00:00:11.816 TCP 12.102.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:11:24.159 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 04:16:58.100 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:16:58.020 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:16:58.125 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:16:58.123 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:16:58.218 00:00:00.039 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:16:57.976 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:16:58.101 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:16:51.122 00:00:11.802 TCP 12.102.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:12:24.159 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 04:17:52.963 00:00:11.762 TCP 12.102.0.1:40966 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:18:54.765 00:00:11.813 TCP 12.102.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:19:56.621 00:00:11.823 TCP 12.102.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:20:58.481 00:00:11.985 TCP 12.102.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:21:58.621 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:21:58.417 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:21:58.605 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:21:58.441 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:21:58.644 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:21:58.396 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:21:58.305 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:22:00.503 00:00:11.801 TCP 12.102.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:23:02.341 00:00:11.809 TCP 12.102.0.1:46456 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:18:24.162 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 04:24:04.185 00:00:11.854 TCP 12.102.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:19:24.158 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 04:25:06.090 00:00:11.818 TCP 12.102.0.1:59734 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:26:07.944 00:00:11.865 TCP 12.102.0.1:60604 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:26:58.103 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:26:58.342 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:26:58.106 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:26:58.328 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:26:58.126 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:26:58.125 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:26:58.205 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:27:09.850 00:00:11.813 TCP 12.102.0.1:43262 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:28:11.695 00:00:11.783 TCP 12.102.0.1:53360 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:29:13.511 00:00:11.831 TCP 12.102.0.1:48068 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:25:24.166 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 04:30:15.387 00:00:11.807 TCP 12.102.0.1:35512 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:26:24.162 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 04:31:17.231 00:00:11.809 TCP 12.102.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:31:58.318 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:31:58.095 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:31:58.442 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:31:58.278 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:31:58.398 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:31:58.397 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:31:58.341 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:32:19.088 00:00:11.766 TCP 12.102.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:33:20.892 00:00:11.764 TCP 12.102.0.1:45636 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:34:22.691 00:00:11.807 TCP 12.102.0.1:59364 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:35:24.549 00:00:11.805 TCP 12.102.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:36:26.404 00:00:11.809 TCP 12.102.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:36:58.364 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:36:58.438 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:36:58.293 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:36:58.669 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:36:58.554 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:36:58.399 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:36:58.647 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:32:24.166 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 04:37:28.249 00:00:11.803 TCP 12.102.0.1:43920 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:33:24.165 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 04:38:30.092 00:00:11.830 TCP 12.102.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:39:31.961 00:00:11.812 TCP 12.102.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:40:33.808 00:00:11.805 TCP 12.102.0.1:41806 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:41:35.651 00:00:11.870 TCP 12.102.0.1:41184 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:41:58.563 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:41:58.467 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:41:58.565 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:41:58.594 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:41:58.585 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:41:58.668 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:41:58.545 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:42:37.557 00:00:11.823 TCP 12.102.0.1:51878 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:43:39.398 00:00:11.800 TCP 12.102.0.1:56420 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:39:24.167 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 04:44:41.238 00:00:11.805 TCP 12.102.0.1:60970 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:40:24.165 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 04:45:43.083 00:00:11.801 TCP 12.102.0.1:39428 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:46:58.632 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:46:58.829 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:46:44.924 00:00:11.819 TCP 12.102.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:46:58.631 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:46:58.832 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:46:58.656 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:46:58.773 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:46:58.538 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:47:46.782 00:00:12.253 TCP 12.102.0.1:44514 -> 1.101.0.1:3000 15 1926 1 2025-09-02 04:48:49.080 00:00:11.808 TCP 12.102.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:49:50.927 00:00:11.811 TCP 12.102.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:50:52.772 00:00:11.806 TCP 12.102.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:46:24.169 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 04:51:58.676 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:51:58.809 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:51:58.901 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:51:58.837 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:51:58.699 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:51:58.820 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:51:58.570 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:51:54.615 00:00:11.758 TCP 12.102.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:47:24.167 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 04:52:56.412 00:00:11.807 TCP 12.102.0.1:59866 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:53:58.257 00:00:11.797 TCP 12.102.0.1:33788 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:55:00.094 00:00:11.803 TCP 12.102.0.1:59990 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:56:01.933 00:00:11.815 TCP 12.102.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:56:58.802 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 04:56:58.688 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 04:56:58.928 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:56:58.904 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 04:56:58.824 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 04:56:58.966 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 04:56:58.896 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 04:57:03.782 00:00:11.762 TCP 12.102.0.1:54362 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:58:05.584 00:00:11.802 TCP 12.102.0.1:50900 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:53:24.170 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-09-02 03:57:24 - 2025-09-02 04:59:24 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0031s User: 0.0021s Wall: 0.0026s flows/second: 61318.0 Runtime: 0.0026s