Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 12:59:36.577 00:00:11.764 TCP 12.102.0.1:36766 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:00:38.383 00:00:11.812 TCP 12.102.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-09-02 12:56:24.324 00:06:00.119 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:01:40.236 00:00:11.800 TCP 12.102.0.1:38822 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:02:08.774 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:02:08.359 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:02:08.486 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:02:08.671 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:02:08.797 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:02:08.474 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:02:08.638 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 12:57:24.324 00:06:00.122 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:02:42.078 00:00:11.799 TCP 12.102.0.1:43874 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:03:43.914 00:00:11.816 TCP 12.102.0.1:36206 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:04:45.770 00:00:11.801 TCP 12.102.0.1:58218 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:05:47.613 00:00:11.779 TCP 12.102.0.1:49274 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:06:49.426 00:00:11.815 TCP 12.102.0.1:53700 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:07:08.447 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:07:08.665 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:07:08.557 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:07:08.569 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:07:08.471 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:07:08.809 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:07:08.629 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:07:51.282 00:00:11.814 TCP 12.102.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:03:24.328 00:06:00.116 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:08:53.130 00:00:11.811 TCP 12.102.0.1:47882 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:04:24.325 00:06:00.122 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:09:54.981 00:00:11.802 TCP 12.102.0.1:39324 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:10:56.824 00:00:11.768 TCP 12.102.0.1:47806 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:12:08.980 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:12:08.922 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:12:08.931 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:12:08.825 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:12:09.047 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:12:09.018 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:11:58.635 00:00:11.850 TCP 12.102.0.1:41466 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:12:09.005 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:13:00.525 00:00:11.815 TCP 12.102.0.1:38684 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:14:02.376 00:00:11.858 TCP 12.102.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:15:04.276 00:00:11.812 TCP 12.102.0.1:36146 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:10:24.328 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:16:06.129 00:00:11.803 TCP 12.102.0.1:57602 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:11:24.326 00:06:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:17:08.627 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:17:08.738 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:17:08.763 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:17:08.970 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:17:08.650 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:17:08.917 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:17:08.976 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:17:07.972 00:00:11.805 TCP 12.102.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:18:09.819 00:00:11.804 TCP 12.102.0.1:53338 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:19:11.657 00:00:11.760 TCP 12.102.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:20:13.456 00:00:11.807 TCP 12.102.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:21:15.300 00:00:12.222 TCP 12.102.0.1:44176 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:22:08.888 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:22:08.905 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:22:08.906 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:22:08.911 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:22:08.853 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:22:08.994 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:22:09.044 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:17:24.329 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:22:17.560 00:00:11.799 TCP 12.102.0.1:52180 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:18:24.327 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:23:19.392 00:00:11.800 TCP 12.102.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:24:21.234 00:00:11.804 TCP 12.102.0.1:36826 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:25:23.082 00:00:11.795 TCP 12.102.0.1:45366 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:26:24.912 00:00:11.835 TCP 12.102.0.1:54632 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:27:09.089 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:27:08.956 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:27:08.937 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:27:09.223 00:00:00.046 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:27:09.267 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:27:09.114 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:27:09.020 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:27:26.778 00:00:11.812 TCP 12.102.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:28:28.633 00:00:11.975 TCP 12.102.0.1:37478 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:24:24.332 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:29:30.647 00:00:11.826 TCP 12.102.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:25:24.330 00:06:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:30:32.512 00:00:11.817 TCP 12.102.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:31:34.368 00:00:11.787 TCP 12.102.0.1:33776 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:32:08.944 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:32:09.229 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:32:09.014 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:32:09.211 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:32:09.253 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:32:09.125 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:32:09.083 00:00:00.047 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:32:36.193 00:00:11.800 TCP 12.102.0.1:58248 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:33:38.038 00:00:11.812 TCP 12.102.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:34:39.893 00:00:11.811 TCP 12.102.0.1:52768 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:35:41.741 00:00:11.800 TCP 12.102.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:31:24.334 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:36:43.577 00:00:11.761 TCP 12.102.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:37:09.134 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:37:09.249 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:37:09.283 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:37:09.363 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:37:09.157 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:37:09.354 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:37:09.228 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:32:24.336 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:37:45.377 00:00:11.775 TCP 12.102.0.1:34124 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:38:47.189 00:00:11.757 TCP 12.102.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:39:48.991 00:00:11.798 TCP 12.102.0.1:42160 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:40:50.828 00:00:11.808 TCP 12.102.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:41:52.674 00:00:11.790 TCP 12.102.0.1:55476 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:42:09.147 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:42:09.502 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:42:09.587 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:42:09.554 00:00:00.013 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:42:09.169 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:42:09.416 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:42:09.471 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:42:54.505 00:00:11.760 TCP 12.102.0.1:42962 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:38:24.336 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:43:56.307 00:00:11.802 TCP 12.102.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:39:24.334 00:06:00.125 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:44:58.173 00:00:11.757 TCP 12.102.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:45:59.968 00:00:11.797 TCP 12.102.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:47:09.232 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:47:09.551 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:47:09.647 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:47:09.399 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:47:09.257 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:47:09.387 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:47:01.811 00:00:11.817 TCP 12.102.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:47:09.441 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:48:03.676 00:00:11.800 TCP 12.102.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:49:05.516 00:00:11.804 TCP 12.102.0.1:41654 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:50:07.360 00:00:11.824 TCP 12.102.0.1:47328 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:45:24.337 00:06:00.120 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:51:09.224 00:00:11.810 TCP 12.102.0.1:56650 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:46:24.337 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:52:09.507 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:52:09.550 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:52:09.464 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:52:09.430 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:52:09.531 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:52:09.500 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:52:09.613 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:52:11.082 00:00:11.800 TCP 12.102.0.1:59570 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:53:12.922 00:00:11.829 TCP 12.102.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:54:14.789 00:00:11.803 TCP 12.102.0.1:33198 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:55:16.630 00:00:11.817 TCP 12.102.0.1:38614 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:56:18.485 00:00:11.811 TCP 12.102.0.1:36562 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:57:09.762 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 13:57:09.770 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 13:57:09.884 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 13:57:09.948 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 13:57:09.785 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 13:57:09.785 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 13:57:09.844 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 13:52:24.342 00:06:00.118 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 13:57:20.332 00:00:11.806 TCP 12.102.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-09-02 13:53:24.338 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 13:58:22.174 00:00:12.248 TCP 12.102.0.1:56320 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 160, total bytes: 124491, total packets: 1146, avg bps: 263, avg pps: 0, avg bpp: 108 Time window: 2025-09-02 12:56:24 - 2025-09-02 13:59:24 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0028s User: 0.0019s Wall: 0.0020s flows/second: 79758.6 Runtime: 0.0020s