Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 11:58:44.790 00:00:12.208 TCP 12.102.0.1:58376 -> 1.101.0.1:3000 11 1507 1 2025-09-02 11:54:24.303 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 11:59:47.061 00:00:11.819 TCP 12.102.0.1:47886 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:00:48.922 00:00:11.822 TCP 12.102.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:01:50.789 00:00:11.805 TCP 12.102.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:02:07.395 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:02:07.363 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:02:07.372 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:02:07.345 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:02:07.365 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:02:07.088 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:02:07.323 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:02:52.636 00:00:11.761 TCP 12.102.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:03:54.437 00:00:11.817 TCP 12.102.0.1:51754 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:04:56.289 00:00:11.812 TCP 12.102.0.1:35284 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:00:24.306 00:06:00.123 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 12:05:58.138 00:00:11.822 TCP 12.102.0.1:43880 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:01:24.304 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 12:07:07.502 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:07:07.448 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:07:07.544 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:07:07.533 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:07:07.483 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:07:07.403 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:07:07.510 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:07:00.004 00:00:11.803 TCP 12.102.0.1:32974 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:08:01.842 00:00:11.815 TCP 12.102.0.1:33140 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:09:03.679 00:00:11.810 TCP 12.102.0.1:60668 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:10:05.527 00:00:11.758 TCP 12.102.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:11:07.321 00:00:11.802 TCP 12.102.0.1:35908 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:12:07.351 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:12:07.644 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:12:07.878 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:12:07.663 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:12:07.372 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:12:07.528 00:00:00.034 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:12:07.741 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:12:09.164 00:00:11.761 TCP 12.102.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:07:24.309 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 12:13:10.964 00:00:11.771 TCP 12.102.0.1:48474 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:08:24.306 00:06:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 12:14:12.775 00:00:11.770 TCP 12.102.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:15:14.578 00:00:11.818 TCP 12.102.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:16:16.439 00:00:11.865 TCP 12.102.0.1:49708 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:17:07.722 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:17:07.903 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:17:07.757 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:17:07.715 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:17:07.809 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:17:07.791 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:17:07.692 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:17:18.349 00:00:11.803 TCP 12.102.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:18:20.191 00:00:11.761 TCP 12.102.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:14:24.310 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 12:19:21.989 00:00:11.808 TCP 12.102.0.1:49150 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:15:24.308 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 12:20:23.832 00:00:12.351 TCP 12.102.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:21:26.221 00:00:11.802 TCP 12.102.0.1:57504 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:22:07.660 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:22:07.778 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:22:07.800 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:22:07.699 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:22:07.683 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:22:07.710 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:22:07.772 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:22:28.083 00:00:11.804 TCP 12.102.0.1:35914 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:23:29.925 00:00:11.818 TCP 12.102.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:24:31.780 00:00:11.810 TCP 12.102.0.1:33056 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:25:33.627 00:00:11.804 TCP 12.102.0.1:53898 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:21:24.311 00:06:00.123 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 12:26:35.466 00:00:11.798 TCP 12.102.0.1:42856 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:27:07.796 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:27:07.743 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:27:08.068 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:27:07.943 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:27:07.901 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:27:07.995 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:27:07.921 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:22:24.309 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 12:27:37.304 00:00:11.799 TCP 12.102.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:28:39.146 00:00:11.809 TCP 12.102.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:29:40.992 00:00:11.767 TCP 12.102.0.1:43194 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:30:42.794 00:00:12.466 TCP 12.102.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:31:45.300 00:00:11.768 TCP 12.102.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:32:07.965 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:32:07.987 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:32:08.364 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:32:08.006 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:32:08.257 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:32:08.128 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:32:08.122 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:32:47.109 00:00:11.773 TCP 12.102.0.1:51042 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:28:24.314 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 12:33:48.919 00:00:11.836 TCP 12.102.0.1:40382 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:29:24.312 00:06:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 12:34:50.792 00:00:12.397 TCP 12.102.0.1:33268 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:35:53.227 00:00:11.808 TCP 12.102.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:37:07.825 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:37:07.980 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:36:55.083 00:00:11.801 TCP 12.102.0.1:49646 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:37:08.309 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:37:08.081 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:37:07.848 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:37:08.074 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:37:08.172 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:37:56.924 00:00:11.826 TCP 12.102.0.1:36220 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:38:58.791 00:00:11.809 TCP 12.102.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:40:00.641 00:00:11.807 TCP 12.102.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:35:24.316 00:06:00.120 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 12:41:02.489 00:00:11.803 TCP 12.102.0.1:55788 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:36:24.314 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 12:42:07.940 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:42:08.118 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:42:08.318 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:42:08.139 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:42:08.058 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:42:07.927 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:42:08.116 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:42:04.344 00:00:11.799 TCP 12.102.0.1:57774 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:43:06.182 00:00:11.807 TCP 12.102.0.1:56882 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:44:08.027 00:00:11.813 TCP 12.102.0.1:48710 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:45:09.879 00:00:11.761 TCP 12.102.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:46:11.676 00:00:11.802 TCP 12.102.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:47:08.305 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:47:08.294 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:47:08.368 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:47:08.336 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:47:08.329 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:47:08.491 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:47:08.254 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:47:13.517 00:00:11.801 TCP 12.102.0.1:46286 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:42:24.317 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 12:48:15.353 00:00:12.241 TCP 12.102.0.1:43266 -> 1.101.0.1:3000 15 1926 1 2025-09-02 12:43:24.314 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 12:49:17.637 00:00:11.802 TCP 12.102.0.1:34122 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:50:19.487 00:00:11.808 TCP 12.102.0.1:57608 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:51:21.337 00:00:11.806 TCP 12.102.0.1:43284 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:52:08.033 00:00:00.034 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:52:08.228 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:52:08.484 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:52:08.313 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:52:08.054 00:00:00.034 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:52:08.532 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:52:08.282 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:52:23.181 00:00:11.807 TCP 12.102.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:53:25.055 00:00:11.809 TCP 12.102.0.1:59716 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:49:24.320 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 12:54:26.899 00:00:11.803 TCP 12.102.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:50:24.319 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 12:55:28.741 00:00:11.807 TCP 12.102.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:56:30.590 00:00:11.818 TCP 12.102.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:57:08.395 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 12:57:08.739 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 12:57:08.722 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 12:57:08.934 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 12:57:08.416 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 12:57:08.744 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 12:57:08.396 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:57:32.445 00:00:11.816 TCP 12.102.0.1:51474 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:58:34.303 00:00:12.233 TCP 12.102.0.1:49366 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 160, total bytes: 125556, total packets: 1147, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-09-02 11:54:24 - 2025-09-02 12:58:46 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0032s User: 0.0008s Wall: 0.0025s flows/second: 62942.1 Runtime: 0.0026s