Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 08:58:51.321 00:00:11.785 TCP 12.102.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:54:24.711 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 08:59:53.143 00:00:11.779 TCP 12.102.0.1:44056 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:00:54.955 00:00:11.801 TCP 12.102.0.1:50432 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:01:56.798 00:00:11.818 TCP 12.102.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:02:32.609 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:02:32.771 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:02:32.676 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:02:32.763 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:02:32.631 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:02:32.757 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:02:32.640 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:02:58.654 00:00:11.820 TCP 12.102.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:04:00.509 00:00:11.798 TCP 12.102.0.1:38386 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:05:02.347 00:00:11.800 TCP 12.102.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:00:24.716 00:06:00.144 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 09:06:04.183 00:00:11.808 TCP 12.102.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:01:24.716 00:06:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 09:07:06.035 00:00:11.803 TCP 12.102.0.1:41212 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:07:33.222 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:07:33.085 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:07:33.109 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:07:32.982 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:07:32.930 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:07:33.187 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:07:32.959 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:08:07.874 00:00:11.802 TCP 12.102.0.1:51056 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:09:09.714 00:00:11.800 TCP 12.102.0.1:60966 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:10:11.552 00:00:11.810 TCP 12.102.0.1:52486 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:11:13.401 00:00:11.803 TCP 12.102.0.1:60198 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:12:15.239 00:00:11.798 TCP 12.102.0.1:37952 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:12:32.670 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:12:32.880 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:12:32.982 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:12:32.768 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:12:33.036 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:12:32.916 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:07:24.721 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 09:12:32.745 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:08:24.719 00:06:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 09:13:17.083 00:00:11.806 TCP 12.102.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:14:18.925 00:00:11.819 TCP 12.102.0.1:53124 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:15:20.783 00:00:11.800 TCP 12.102.0.1:40648 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:16:22.618 00:00:11.792 TCP 12.102.0.1:35768 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:17:32.942 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:17:33.022 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:17:33.074 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:17:32.819 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:17:33.087 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:17:32.963 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:17:32.796 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:17:24.445 00:00:11.813 TCP 12.102.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:18:26.296 00:00:11.799 TCP 12.102.0.1:55818 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:14:24.722 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 09:19:28.133 00:00:11.826 TCP 12.102.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:15:24.719 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 09:20:29.997 00:00:11.797 TCP 12.102.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:21:31.836 00:00:11.767 TCP 12.102.0.1:36462 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:22:32.926 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:22:33.095 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:22:32.737 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:22:33.131 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:22:32.950 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:22:32.998 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:22:33.132 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:22:33.638 00:00:11.797 TCP 12.102.0.1:35426 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:23:35.475 00:00:11.801 TCP 12.102.0.1:43386 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:24:37.313 00:00:11.811 TCP 12.102.0.1:50952 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:25:39.161 00:00:11.769 TCP 12.102.0.1:39682 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:21:24.723 00:06:00.147 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 09:26:40.982 00:00:11.802 TCP 12.102.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:22:24.721 00:06:00.152 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 09:27:33.276 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:27:33.301 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:27:33.234 00:00:00.037 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:27:33.026 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:27:33.297 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:27:33.267 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:27:33.275 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:27:42.817 00:00:11.813 TCP 12.102.0.1:60506 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:28:44.669 00:00:11.807 TCP 12.102.0.1:43006 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:29:46.514 00:00:11.801 TCP 12.102.0.1:53714 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:30:48.349 00:00:11.757 TCP 12.102.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:31:50.144 00:00:11.811 TCP 12.102.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:32:33.118 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:32:33.322 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:32:33.450 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:32:33.198 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:32:33.339 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:32:33.086 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:32:33.175 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:32:51.990 00:00:11.760 TCP 12.102.0.1:45050 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:28:24.749 00:06:00.130 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 09:33:53.788 00:00:11.802 TCP 12.102.0.1:53162 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:29:24.732 00:06:00.150 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 09:34:55.626 00:00:11.812 TCP 12.102.0.1:55632 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:35:57.484 00:00:11.806 TCP 12.102.0.1:46430 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:36:59.330 00:00:11.804 TCP 12.102.0.1:36754 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:37:33.256 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:37:33.411 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:37:33.659 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:37:33.671 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:37:33.279 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:37:33.583 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:37:33.454 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:38:01.172 00:00:11.801 TCP 12.102.0.1:50950 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:39:03.013 00:00:11.799 TCP 12.102.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:40:04.849 00:00:11.811 TCP 12.102.0.1:36912 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:35:24.735 00:06:00.145 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 09:41:06.697 00:00:11.779 TCP 12.102.0.1:42310 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:36:24.734 00:06:00.150 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 09:42:08.517 00:00:11.801 TCP 12.102.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:42:33.303 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:42:33.438 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:42:33.202 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:42:33.277 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:42:33.530 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:42:33.284 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:42:33.256 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:43:10.362 00:00:11.832 TCP 12.102.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:44:12.234 00:00:11.812 TCP 12.102.0.1:38162 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:45:14.088 00:00:11.952 TCP 12.102.0.1:48364 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:46:16.082 00:00:11.799 TCP 12.102.0.1:48750 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:47:33.548 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:47:33.354 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:47:33.495 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:47:17.917 00:00:11.818 TCP 12.102.0.1:48360 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:47:33.454 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:47:33.566 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:47:33.526 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:42:24.738 00:06:00.144 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 09:47:33.431 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:43:24.735 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 09:48:19.778 00:00:12.253 TCP 12.102.0.1:51550 -> 1.101.0.1:3000 15 1926 1 2025-09-03 09:49:22.083 00:00:11.758 TCP 12.102.0.1:47854 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:50:23.877 00:00:11.800 TCP 12.102.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:51:25.715 00:00:11.799 TCP 12.102.0.1:39054 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:52:33.743 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:52:33.649 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:52:33.607 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:52:33.818 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:52:33.766 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:52:33.606 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:52:33.615 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:52:27.557 00:00:11.825 TCP 12.102.0.1:52278 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:53:29.417 00:00:12.240 TCP 12.102.0.1:51692 -> 1.101.0.1:3000 15 1926 1 2025-09-03 09:49:24.753 00:06:00.131 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 09:54:31.696 00:00:11.760 TCP 12.102.0.1:50106 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:50:24.745 00:06:00.141 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 09:55:33.496 00:00:11.802 TCP 12.102.0.1:48488 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:56:35.340 00:00:11.811 TCP 12.102.0.1:41398 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:57:33.589 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 09:57:33.651 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 09:57:33.664 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 09:57:33.807 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 09:57:33.611 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 09:57:33.860 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 09:57:33.778 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 09:57:37.195 00:00:11.813 TCP 12.102.0.1:46906 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:58:39.076 00:00:11.812 TCP 12.102.0.1:40544 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125556, total packets: 1147, avg bps: 259, avg pps: 0, avg bpp: 109 Time window: 2025-09-03 08:54:24 - 2025-09-03 09:58:50 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0033s User: 0.0011s Wall: 0.0022s flows/second: 74038.9 Runtime: 0.0022s