Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 19:58:54.158 00:00:11.770 TCP 12.102.0.1:38752 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:55:24.962 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 19:59:55.966 00:00:11.850 TCP 12.102.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:56:24.965 00:05:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:00:57.859 00:00:11.816 TCP 12.102.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:01:59.717 00:00:11.805 TCP 12.102.0.1:47886 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:02:45.867 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:02:45.867 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:02:45.981 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:02:45.824 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:02:45.707 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:02:45.763 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:02:45.802 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:03:01.559 00:00:11.803 TCP 12.102.0.1:38116 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:04:03.398 00:00:11.763 TCP 12.102.0.1:34052 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:05:05.198 00:00:11.808 TCP 12.102.0.1:44550 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:01:24.963 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:06:07.068 00:00:12.247 TCP 12.102.0.1:60604 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:02:24.965 00:05:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:07:09.359 00:00:11.784 TCP 12.102.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:07:46.079 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:07:45.948 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:07:45.855 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:07:45.823 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:07:45.952 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:07:45.840 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:07:45.801 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:08:11.185 00:00:12.235 TCP 12.102.0.1:41312 -> 1.101.0.1:3000 15 1926 1 2025-09-03 20:09:13.463 00:00:11.800 TCP 12.102.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:10:15.302 00:00:11.802 TCP 12.102.0.1:51024 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:07:24.964 00:05:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:11:17.142 00:00:11.818 TCP 12.102.0.1:34080 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:08:24.966 00:05:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:12:19.006 00:00:11.754 TCP 12.102.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:12:46.168 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:12:46.134 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:12:46.299 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:12:46.082 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:12:46.192 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:12:45.962 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:12:46.088 00:00:00.043 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:13:20.799 00:00:11.803 TCP 12.102.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:14:22.641 00:00:11.800 TCP 12.102.0.1:46114 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:15:24.476 00:00:11.802 TCP 12.102.0.1:43518 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:16:26.316 00:00:11.802 TCP 12.102.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:13:24.968 00:05:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:17:28.163 00:00:11.801 TCP 12.102.0.1:54366 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:17:46.041 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:17:46.389 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:17:46.201 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:17:46.339 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:17:46.004 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:17:46.225 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:17:46.064 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:14:24.970 00:05:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:18:30.009 00:00:11.805 TCP 12.102.0.1:45182 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:19:31.852 00:00:11.810 TCP 12.102.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:20:33.697 00:00:11.808 TCP 12.102.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:21:35.540 00:00:11.800 TCP 12.102.0.1:47206 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:22:46.314 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:22:46.026 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:22:46.361 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:22:46.353 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:22:46.336 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:22:46.360 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:22:46.183 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:22:37.382 00:00:11.803 TCP 12.102.0.1:38224 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:19:24.971 00:05:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:23:39.226 00:00:11.798 TCP 12.102.0.1:50848 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:20:24.972 00:05:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:24:41.080 00:00:11.800 TCP 12.102.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:25:42.916 00:00:11.790 TCP 12.102.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:26:44.745 00:00:11.805 TCP 12.102.0.1:45028 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:27:46.184 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:27:46.514 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:27:46.388 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:27:46.190 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:27:46.519 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:27:46.559 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:27:46.162 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:27:46.581 00:00:11.766 TCP 12.102.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:28:48.390 00:00:11.764 TCP 12.102.0.1:44144 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:25:24.971 00:05:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:29:50.190 00:00:11.764 TCP 12.102.0.1:42146 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:26:24.973 00:05:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:30:51.997 00:00:11.801 TCP 12.102.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:31:53.831 00:00:11.810 TCP 12.102.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:32:46.714 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:32:46.545 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:32:46.758 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:32:46.539 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:32:46.668 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:32:46.546 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:32:46.517 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:32:55.677 00:00:11.811 TCP 12.102.0.1:49028 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:33:57.518 00:00:11.807 TCP 12.102.0.1:52658 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:34:59.365 00:00:11.834 TCP 12.102.0.1:40260 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:31:24.973 00:05:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:36:01.233 00:00:11.802 TCP 12.102.0.1:48652 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:32:24.976 00:05:00.144 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:37:03.084 00:00:11.796 TCP 12.102.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:37:46.313 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:37:46.477 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:37:46.707 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:37:46.481 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:37:46.336 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:37:46.577 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:37:46.635 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:38:04.920 00:00:11.824 TCP 12.102.0.1:39096 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:39:06.784 00:00:11.757 TCP 12.102.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:40:08.585 00:00:11.803 TCP 12.102.0.1:47078 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:41:10.422 00:00:11.761 TCP 12.102.0.1:42114 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:37:24.974 00:05:00.150 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:42:12.223 00:00:11.758 TCP 12.102.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:38:24.976 00:05:00.145 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:42:46.894 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:42:46.908 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:42:46.540 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:42:46.662 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:42:46.787 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:42:46.668 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:42:46.638 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:43:14.028 00:00:11.799 TCP 12.102.0.1:50372 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:44:15.866 00:00:11.801 TCP 12.102.0.1:51000 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:45:17.710 00:00:11.859 TCP 12.102.0.1:45088 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:46:19.606 00:00:11.809 TCP 12.102.0.1:55822 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:43:24.976 00:05:00.150 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:47:21.447 00:00:11.756 TCP 12.102.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:47:46.996 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:47:47.021 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:47:46.758 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:47:47.020 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:47:46.732 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:47:46.793 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:47:46.735 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:44:24.977 00:05:00.147 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:48:23.244 00:00:11.803 TCP 12.102.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:49:25.086 00:00:11.821 TCP 12.102.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:50:26.941 00:00:11.809 TCP 12.102.0.1:46792 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:51:28.791 00:00:11.809 TCP 12.102.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:52:30.642 00:00:11.798 TCP 12.102.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:52:47.005 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:52:46.773 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:52:47.226 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:52:47.002 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:52:47.026 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:52:46.994 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:52:47.083 00:00:00.036 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:49:24.979 00:05:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-03 20:53:32.485 00:00:11.799 TCP 12.102.0.1:50010 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:50:24.980 00:05:00.144 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-03 20:54:34.322 00:00:11.762 TCP 12.102.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:55:36.124 00:00:11.802 TCP 12.102.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:56:37.960 00:00:11.803 TCP 12.102.0.1:47406 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:57:46.985 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-03 20:57:46.918 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 20:57:46.863 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-03 20:57:47.020 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-03 20:57:47.022 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-03 20:57:46.916 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-03 20:57:46.997 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-03 20:57:39.801 00:00:11.766 TCP 12.102.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-09-03 20:58:41.611 00:00:11.797 TCP 12.102.0.1:55056 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 125260, total packets: 1145, avg bps: 263, avg pps: 0, avg bpp: 109 Time window: 2025-09-03 19:55:24 - 2025-09-03 20:58:53 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0010s Wall: 0.0028s flows/second: 59120.7 Runtime: 0.0028s