Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 14:58:43.226 00:00:11.802 TCP 12.102.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:59:45.078 00:00:18.904 TCP 12.102.0.1:51304 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:00:54.026 00:00:11.802 TCP 12.102.0.1:55170 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:01:55.869 00:00:11.847 TCP 12.102.0.1:44102 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:57:24.873 00:06:00.119 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 15:02:40.320 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:02:40.507 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:02:40.422 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:02:40.545 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:02:40.343 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:02:40.468 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:02:40.666 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:02:57.756 00:00:11.805 TCP 12.102.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:58:24.871 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 15:03:59.601 00:00:11.823 TCP 12.102.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:05:01.459 00:00:11.860 TCP 12.102.0.1:41758 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:06:03.354 00:00:11.801 TCP 12.102.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:07:05.195 00:00:11.760 TCP 12.102.0.1:46690 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:07:39.769 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:07:40.067 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:07:39.922 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:07:39.792 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:07:39.922 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:07:39.705 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:07:39.839 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:08:06.993 00:00:11.801 TCP 12.102.0.1:36064 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:09:08.834 00:00:11.797 TCP 12.102.0.1:41606 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:04:24.875 00:06:00.119 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 15:10:10.670 00:00:11.802 TCP 12.102.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:05:24.871 00:06:00.125 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 15:11:12.510 00:00:11.806 TCP 12.102.0.1:45950 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:12:14.355 00:00:11.824 TCP 12.102.0.1:55460 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:12:40.186 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:12:40.104 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:12:40.230 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:12:40.031 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:12:39.811 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:12:40.188 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:12:40.008 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:13:16.222 00:00:11.803 TCP 12.102.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:14:18.084 00:00:11.796 TCP 12.102.0.1:55998 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:15:19.922 00:00:11.821 TCP 12.102.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:11:24.876 00:06:00.120 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 15:16:21.783 00:00:11.822 TCP 12.102.0.1:51488 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:12:24.875 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-03 15:17:23.646 00:00:11.806 TCP 12.102.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:17:40.129 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:17:40.263 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:17:40.256 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:17:40.119 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:17:40.001 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:17:40.035 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:17:40.234 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:18:25.487 00:00:11.865 TCP 12.102.0.1:56832 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:19:27.390 00:00:11.769 TCP 12.102.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:20:29.197 00:00:11.811 TCP 12.102.0.1:60210 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:21:31.066 00:00:11.802 TCP 12.102.0.1:59426 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:22:40.331 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:22:40.319 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:22:40.422 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:22:40.305 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:22:40.329 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:22:39.947 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:22:40.283 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:22:32.909 00:00:11.792 TCP 12.102.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:19:24.876 00:05:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 15:18:24.878 00:06:00.120 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 15:23:34.739 00:00:11.802 TCP 12.102.0.1:45168 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:24:36.587 00:00:11.763 TCP 12.102.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:25:38.387 00:00:11.791 TCP 12.102.0.1:53856 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:26:40.245 00:00:11.771 TCP 12.102.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:27:40.338 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:27:40.372 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:27:40.469 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:27:40.234 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:27:40.505 00:00:00.029 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:27:40.322 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:27:40.211 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:27:42.075 00:00:11.821 TCP 12.102.0.1:44686 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:28:43.939 00:00:11.810 TCP 12.102.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:25:24.878 00:05:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 15:29:45.788 00:00:11.807 TCP 12.102.0.1:44462 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:25:24.879 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-03 15:30:47.630 00:00:11.802 TCP 12.102.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:31:49.468 00:00:11.806 TCP 12.102.0.1:42388 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:32:40.514 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:32:40.537 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:32:40.761 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:32:40.525 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:32:40.656 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:32:40.550 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:32:40.744 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:32:51.317 00:00:11.838 TCP 12.102.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:33:53.163 00:00:11.816 TCP 12.102.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:34:55.007 00:00:11.808 TCP 12.102.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:31:24.878 00:05:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 15:35:56.850 00:00:11.803 TCP 12.102.0.1:42160 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:32:24.879 00:05:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 15:36:58.691 00:00:11.813 TCP 12.102.0.1:55106 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:37:40.636 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:37:40.678 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:37:40.591 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:37:40.596 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:37:40.660 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:37:40.383 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:37:40.446 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:38:00.540 00:00:12.241 TCP 12.102.0.1:40218 -> 1.101.0.1:3000 15 1926 1 2025-09-03 15:39:02.820 00:00:11.849 TCP 12.102.0.1:60384 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:40:04.711 00:00:11.799 TCP 12.102.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:41:06.546 00:00:11.803 TCP 12.102.0.1:56412 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:37:24.880 00:05:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 15:42:08.389 00:00:11.799 TCP 12.102.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:38:24.885 00:05:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 15:42:40.491 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:42:40.636 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:42:40.720 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:42:40.573 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:42:40.513 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:42:40.695 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:42:40.600 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:43:10.244 00:00:11.807 TCP 12.102.0.1:38526 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:44:12.087 00:00:11.795 TCP 12.102.0.1:52328 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:45:13.923 00:00:11.824 TCP 12.102.0.1:33114 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:46:15.787 00:00:11.806 TCP 12.102.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:43:24.881 00:05:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 15:47:17.629 00:00:11.799 TCP 12.102.0.1:33932 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:47:40.706 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:47:40.799 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:47:40.879 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:47:40.494 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:47:40.726 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:47:40.763 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:47:40.473 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:44:24.884 00:05:00.151 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 15:48:19.469 00:00:11.810 TCP 12.102.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:49:21.310 00:00:11.806 TCP 12.102.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:50:23.170 00:00:12.036 TCP 12.102.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:51:25.242 00:00:11.797 TCP 12.102.0.1:42016 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:52:40.833 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:52:27.083 00:00:11.798 TCP 12.102.0.1:45526 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:52:40.556 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:52:40.751 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:52:40.871 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:52:40.857 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:52:41.042 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:52:40.708 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:49:24.884 00:05:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 15:53:28.918 00:00:12.263 TCP 12.102.0.1:33860 -> 1.101.0.1:3000 15 1926 1 2025-09-03 15:50:24.887 00:05:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 15:54:31.223 00:00:12.051 TCP 12.102.0.1:38748 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:55:33.313 00:00:11.804 TCP 12.102.0.1:41218 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:56:35.157 00:00:11.799 TCP 12.102.0.1:58246 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:57:40.868 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 15:57:41.007 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 15:57:41.067 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 15:57:40.924 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 15:57:40.891 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 15:57:41.081 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 15:57:40.876 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 15:57:36.992 00:00:11.926 TCP 12.102.0.1:58818 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:58:38.943 00:00:11.801 TCP 12.102.0.1:53352 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 125187, total packets: 1141, avg bps: 271, avg pps: 0, avg bpp: 109 Time window: 2025-09-03 14:57:24 - 2025-09-03 15:58:50 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0032s User: 0.0008s Wall: 0.0020s flows/second: 80142.8 Runtime: 0.0020s