Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 13:59:32.635 00:00:11.832 TCP 12.102.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:00:34.504 00:00:11.801 TCP 12.102.0.1:55120 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:01:36.341 00:00:11.852 TCP 12.102.0.1:47360 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:02:38.233 00:00:11.800 TCP 12.102.0.1:36320 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:03:07.333 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:03:07.554 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:03:07.435 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:03:07.675 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:03:07.357 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:03:07.781 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:03:07.541 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:03:40.078 00:00:12.251 TCP 12.102.0.1:51290 -> 1.101.0.1:3000 15 1926 1 2025-09-04 13:59:25.478 00:06:00.046 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 14:04:42.371 00:00:12.050 TCP 12.102.0.1:34460 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:00:25.518 00:06:00.004 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-04 14:05:44.457 00:00:11.754 TCP 12.102.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:06:46.252 00:00:11.800 TCP 12.102.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:08:07.442 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:07:48.099 00:00:11.804 TCP 12.102.0.1:56796 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:08:07.459 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:08:07.571 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:08:07.760 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:08:07.463 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:08:07.670 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:08:07.792 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:08:49.941 00:00:11.818 TCP 12.102.0.1:44514 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:09:51.800 00:00:11.801 TCP 12.102.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:10:53.642 00:00:11.805 TCP 12.102.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:06:25.483 00:06:00.045 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 14:11:55.486 00:00:11.797 TCP 12.102.0.1:43514 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:07:25.524 00:06:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-04 14:13:07.434 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:13:07.855 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:13:07.819 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:13:07.497 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:13:07.456 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:13:07.947 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:13:07.855 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:12:57.320 00:00:11.805 TCP 12.102.0.1:41258 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:13:59.162 00:00:11.797 TCP 12.102.0.1:44136 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:15:01.001 00:00:11.800 TCP 12.102.0.1:60316 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:16:02.843 00:00:11.797 TCP 12.102.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:17:04.678 00:00:11.772 TCP 12.102.0.1:46256 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:18:07.848 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:18:07.962 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:18:07.771 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:18:07.955 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:18:08.063 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:18:07.976 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:18:07.932 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:18:06.489 00:00:11.759 TCP 12.102.0.1:57802 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:13:25.490 00:06:00.039 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 14:19:08.287 00:00:11.760 TCP 12.102.0.1:54732 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:14:25.526 00:06:00.001 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-04 14:20:10.088 00:00:11.808 TCP 12.102.0.1:35942 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:21:11.932 00:00:11.771 TCP 12.102.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:22:13.742 00:00:11.797 TCP 12.102.0.1:44690 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:23:07.942 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:23:07.851 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:23:07.632 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:23:07.664 00:00:00.019 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:23:07.708 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:23:07.735 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:23:07.608 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:23:15.579 00:00:11.805 TCP 12.102.0.1:35752 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:24:17.425 00:00:11.828 TCP 12.102.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:20:25.490 00:06:00.042 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 14:25:19.289 00:00:11.795 TCP 12.102.0.1:60898 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:21:25.526 00:06:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-04 14:26:21.123 00:00:11.758 TCP 12.102.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:27:22.918 00:00:11.819 TCP 12.102.0.1:52512 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:28:08.114 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:28:08.031 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:28:07.830 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:28:07.890 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:28:08.144 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:28:07.980 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:28:07.866 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:28:24.773 00:00:11.800 TCP 12.102.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:29:26.613 00:00:11.796 TCP 12.102.0.1:52646 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:30:28.449 00:00:11.767 TCP 12.102.0.1:35432 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:31:30.254 00:00:11.816 TCP 12.102.0.1:52894 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:27:25.491 00:06:00.049 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 14:32:32.107 00:00:11.795 TCP 12.102.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:33:08.267 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:33:08.647 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:33:08.229 00:00:00.055 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:33:08.415 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:33:08.289 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:33:08.363 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:33:08.379 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:28:25.529 00:06:00.008 TCP 179.10.12.10:179 -> 179.10.12.12:58070 13 809 1 2025-09-04 14:33:33.943 00:00:12.123 TCP 12.102.0.1:59330 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:34:36.106 00:00:11.809 TCP 12.102.0.1:51350 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:35:37.965 00:00:11.806 TCP 12.102.0.1:47388 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:36:39.811 00:00:11.803 TCP 12.102.0.1:59068 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:37:41.651 00:00:11.817 TCP 12.102.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:38:08.148 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:38:08.337 00:00:00.017 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:38:08.031 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:38:08.317 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:38:08.170 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:38:08.286 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:38:08.036 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:38:43.502 00:00:11.797 TCP 12.102.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:34:25.492 00:06:00.050 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 14:39:45.341 00:00:11.800 TCP 12.102.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:35:25.496 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 14:40:47.182 00:00:11.825 TCP 12.102.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:41:49.066 00:00:11.817 TCP 12.102.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:42:50.921 00:00:11.892 TCP 12.102.0.1:41228 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:43:08.543 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:43:08.573 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:43:08.635 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:43:08.322 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:43:08.440 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:43:08.510 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:43:08.300 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:43:52.854 00:00:11.810 TCP 12.102.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:44:54.702 00:00:11.821 TCP 12.102.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:45:56.566 00:00:11.759 TCP 12.102.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:41:25.495 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 14:46:58.362 00:00:11.886 TCP 12.102.0.1:46602 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:42:25.496 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 14:48:08.368 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:48:08.513 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:48:08.383 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:48:08.526 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:48:08.389 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:48:08.598 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:48:08.226 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:48:00.286 00:00:11.800 TCP 12.102.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:49:02.124 00:00:11.800 TCP 12.102.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:50:03.956 00:00:11.804 TCP 12.102.0.1:36968 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:51:05.797 00:00:11.812 TCP 12.102.0.1:37026 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:52:07.648 00:00:11.802 TCP 12.102.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:53:08.619 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:53:08.808 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:53:08.647 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:53:08.590 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:53:08.888 00:00:00.014 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:53:08.677 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:53:08.568 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:53:09.490 00:00:12.252 TCP 12.102.0.1:41010 -> 1.101.0.1:3000 15 1926 1 2025-09-04 14:48:25.498 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 14:54:11.780 00:00:11.805 TCP 12.102.0.1:59782 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:49:25.498 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 14:55:13.622 00:00:11.796 TCP 12.102.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:56:15.456 00:00:11.766 TCP 12.102.0.1:35804 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:57:17.260 00:00:11.801 TCP 12.102.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-09-04 14:58:08.677 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 14:58:08.527 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 14:58:08.579 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 14:58:08.586 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 14:58:08.773 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 14:58:08.503 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 14:58:08.562 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 14:58:19.099 00:00:12.287 TCP 12.102.0.1:53998 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 158, total bytes: 122099, total packets: 1097, avg bps: 275, avg pps: 0, avg bpp: 111 Time window: 2025-09-04 13:59:25 - 2025-09-04 14:58:31 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0028s User: 0.0019s Wall: 0.0023s flows/second: 70097.3 Runtime: 0.0023s