Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 22:59:43.325 00:00:11.807 TCP 12.102.0.1:47442 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:00:45.163 00:00:11.808 TCP 12.102.0.1:48534 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:01:47.007 00:00:11.762 TCP 12.102.0.1:43906 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:02:20.639 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:02:20.662 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:02:20.640 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:02:20.279 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:02:20.565 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:02:20.713 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:02:20.256 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:02:48.805 00:00:11.799 TCP 12.102.0.1:44500 -> 1.101.0.1:3000 11 1507 1 2025-09-02 22:58:24.502 00:06:00.146 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 23:03:50.643 00:00:11.801 TCP 12.102.0.1:46016 -> 1.101.0.1:3000 11 1507 1 2025-09-02 22:59:24.500 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 23:04:52.486 00:00:11.818 TCP 12.102.0.1:36358 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:05:54.329 00:00:11.800 TCP 12.102.0.1:59382 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:06:56.169 00:00:11.814 TCP 12.102.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:07:20.503 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:07:20.792 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:07:20.538 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:07:20.755 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:07:20.526 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:07:20.886 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:07:20.698 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:07:58.039 00:00:11.821 TCP 12.102.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:08:59.906 00:00:11.799 TCP 12.102.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:10:01.746 00:00:11.764 TCP 12.102.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:05:24.504 00:06:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 23:11:03.555 00:00:11.805 TCP 12.102.0.1:40374 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:06:24.501 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 23:12:20.956 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:12:05.398 00:00:11.800 TCP 12.102.0.1:53228 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:12:20.989 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:12:21.177 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:12:21.079 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:12:20.979 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:12:21.062 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:12:20.964 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:13:07.238 00:00:11.806 TCP 12.102.0.1:46348 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:14:09.083 00:00:11.802 TCP 12.102.0.1:46984 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:15:10.920 00:00:11.824 TCP 12.102.0.1:42330 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:16:12.787 00:00:11.765 TCP 12.102.0.1:51658 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:17:20.662 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:17:20.864 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:17:20.977 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:17:20.796 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:17:20.684 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:17:21.048 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:17:20.915 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:12:24.507 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 23:17:14.589 00:00:11.802 TCP 12.102.0.1:52462 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:13:24.505 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 23:18:16.433 00:00:11.762 TCP 12.102.0.1:37154 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:19:18.230 00:00:11.805 TCP 12.102.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:20:20.078 00:00:11.808 TCP 12.102.0.1:38282 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:21:21.921 00:00:11.831 TCP 12.102.0.1:37254 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:22:21.066 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:22:20.851 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:22:21.104 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:22:20.903 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:22:21.026 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:22:20.981 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:22:20.880 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:22:23.793 00:00:11.766 TCP 12.102.0.1:36720 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:23:25.600 00:00:11.812 TCP 12.102.0.1:52466 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:19:24.510 00:06:00.161 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 23:24:27.453 00:00:11.817 TCP 12.102.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:20:24.507 00:06:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 23:25:29.302 00:00:11.764 TCP 12.102.0.1:39478 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:26:31.106 00:00:11.803 TCP 12.102.0.1:37288 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:27:21.241 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:27:21.172 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:27:21.346 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:27:21.085 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:27:21.264 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:27:21.446 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:27:21.027 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:27:32.947 00:00:11.767 TCP 12.102.0.1:57068 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:28:34.751 00:00:12.189 TCP 12.102.0.1:48024 -> 1.101.0.1:3000 15 1926 1 2025-09-02 23:29:36.986 00:00:11.762 TCP 12.102.0.1:52748 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:30:38.786 00:00:11.809 TCP 12.102.0.1:46356 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:26:24.511 00:06:00.161 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 23:31:40.636 00:00:11.871 TCP 12.102.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:32:21.097 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:32:21.122 00:00:00.035 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:32:21.360 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:32:21.264 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:32:21.120 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:32:21.307 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:32:21.185 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:27:24.509 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 23:32:42.537 00:00:11.803 TCP 12.102.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:33:44.376 00:00:11.815 TCP 12.102.0.1:41592 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:34:46.229 00:00:11.801 TCP 12.102.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:35:48.082 00:00:12.426 TCP 12.102.0.1:41746 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:36:50.547 00:00:11.803 TCP 12.102.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:37:21.261 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:37:21.317 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:37:21.179 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:37:21.385 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:37:21.166 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:37:21.349 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:37:21.155 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:37:52.389 00:00:11.813 TCP 12.102.0.1:58414 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:33:24.511 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 23:38:54.243 00:00:11.802 TCP 12.102.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:34:24.517 00:06:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 23:39:56.084 00:00:11.775 TCP 12.102.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:40:57.901 00:00:11.847 TCP 12.102.0.1:48122 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:41:59.782 00:00:11.801 TCP 12.102.0.1:59008 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:42:21.282 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:42:21.418 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:42:21.234 00:00:00.044 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:42:21.425 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:42:21.306 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:42:21.422 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:42:21.530 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:43:01.631 00:00:11.806 TCP 12.102.0.1:50174 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:44:03.479 00:00:11.806 TCP 12.102.0.1:60480 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:45:05.325 00:00:11.766 TCP 12.102.0.1:50196 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:40:24.521 00:06:00.156 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 23:46:07.133 00:00:11.787 TCP 12.102.0.1:36492 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:41:24.518 00:06:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 23:47:21.423 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:47:08.964 00:00:11.803 TCP 12.102.0.1:34974 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:47:21.394 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:47:21.564 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:47:21.510 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:47:21.446 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:47:21.303 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:47:21.380 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:48:10.806 00:00:11.807 TCP 12.102.0.1:34790 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:49:12.648 00:00:11.820 TCP 12.102.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:50:14.521 00:00:11.805 TCP 12.102.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:51:16.363 00:00:11.826 TCP 12.102.0.1:42754 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:52:21.587 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:52:21.761 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:52:21.715 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:52:21.711 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:52:21.724 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:52:21.817 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:52:21.693 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:47:24.522 00:06:00.156 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-02 23:52:18.235 00:00:11.800 TCP 12.102.0.1:37260 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:48:24.520 00:06:00.161 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-02 23:53:20.091 00:00:11.802 TCP 12.102.0.1:59712 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:54:21.929 00:00:11.810 TCP 12.102.0.1:53490 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:55:23.778 00:00:11.800 TCP 12.102.0.1:38662 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:56:25.616 00:00:11.794 TCP 12.102.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:57:21.525 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-02 23:57:21.375 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-02 23:57:21.766 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 23:57:21.678 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-02 23:57:21.547 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-02 23:57:21.757 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-02 23:57:21.552 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-02 23:57:27.453 00:00:11.807 TCP 12.102.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:58:29.299 00:00:11.759 TCP 12.102.0.1:51090 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122769, total packets: 1118, avg bps: 271, avg pps: 0, avg bpp: 109 Time window: 2025-09-02 22:58:24 - 2025-09-02 23:58:41 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 74003.4 Runtime: 0.0021s