Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 00:59:27.748 00:00:11.831 TCP 12.102.0.1:45392 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:00:29.621 00:00:11.795 TCP 12.102.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:01:31.455 00:00:11.807 TCP 12.102.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-09-05 00:57:25.720 00:06:00.112 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:02:33.294 00:00:11.797 TCP 12.102.0.1:52166 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:03:20.744 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:03:20.838 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:03:20.906 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:03:20.551 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:03:20.959 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:03:20.439 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:03:20.529 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 00:58:25.723 00:06:00.106 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 01:03:35.128 00:00:11.801 TCP 12.102.0.1:46460 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:04:36.968 00:00:11.802 TCP 12.102.0.1:60410 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:05:38.808 00:00:11.761 TCP 12.102.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:06:40.609 00:00:11.801 TCP 12.102.0.1:46254 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:07:42.445 00:00:11.766 TCP 12.102.0.1:37870 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:08:21.056 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:08:20.723 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:08:20.792 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:08:20.927 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:08:20.951 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:08:20.905 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:08:20.768 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:08:44.253 00:00:11.801 TCP 12.102.0.1:43948 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:04:25.722 00:06:00.116 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:09:46.092 00:00:11.761 TCP 12.102.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:05:25.725 00:06:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 01:10:47.888 00:00:11.797 TCP 12.102.0.1:43078 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:11:49.726 00:00:11.781 TCP 12.102.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:12:51.546 00:00:11.800 TCP 12.102.0.1:43032 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:13:21.141 00:00:00.036 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:13:20.822 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:13:21.014 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:13:20.890 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:13:21.137 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:13:20.957 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:13:20.868 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:13:53.390 00:00:11.803 TCP 12.102.0.1:60994 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:14:55.231 00:00:11.761 TCP 12.102.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:15:57.036 00:00:11.800 TCP 12.102.0.1:54538 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:11:25.724 00:06:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:16:58.870 00:00:11.803 TCP 12.102.0.1:35274 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:12:25.726 00:06:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 01:18:00.712 00:00:11.799 TCP 12.102.0.1:57346 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:18:21.120 00:00:00.050 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:18:21.136 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:18:21.156 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:18:21.034 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:18:21.144 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:18:21.266 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:18:21.012 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:19:02.548 00:00:11.808 TCP 12.102.0.1:34436 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:20:04.395 00:00:11.851 TCP 12.102.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:21:06.301 00:00:11.805 TCP 12.102.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:22:08.144 00:00:11.829 TCP 12.102.0.1:42048 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:23:21.129 00:00:00.028 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:23:21.247 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:23:21.236 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:23:10.010 00:00:11.797 TCP 12.102.0.1:33630 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:23:21.269 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:23:21.138 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:23:21.361 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:23:21.152 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:18:25.724 00:06:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:24:11.847 00:00:11.801 TCP 12.102.0.1:45150 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:19:25.726 00:06:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 01:25:13.683 00:00:11.805 TCP 12.102.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:26:15.524 00:00:11.767 TCP 12.102.0.1:42894 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:27:17.330 00:00:11.809 TCP 12.102.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:28:21.303 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:28:21.296 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:28:21.494 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:28:21.325 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:28:21.327 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:28:21.189 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:28:21.322 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:28:19.173 00:00:11.807 TCP 12.102.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:29:21.018 00:00:12.397 TCP 12.102.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:25:25.733 00:06:00.116 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:30:23.448 00:00:11.756 TCP 12.102.0.1:57576 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:26:25.735 00:06:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 01:31:25.243 00:00:11.763 TCP 12.102.0.1:38236 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:32:27.070 00:00:11.766 TCP 12.102.0.1:50276 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:33:21.344 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:33:21.297 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:33:21.147 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:33:21.370 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:33:21.373 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:33:21.241 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:33:21.350 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:33:28.878 00:00:12.235 TCP 12.102.0.1:34504 -> 1.101.0.1:3000 15 1926 1 2025-09-05 01:34:31.153 00:00:11.759 TCP 12.102.0.1:51104 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:35:32.958 00:00:11.800 TCP 12.102.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:36:34.798 00:00:11.833 TCP 12.102.0.1:40278 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:32:25.732 00:06:00.117 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:37:36.648 00:00:11.827 TCP 12.102.0.1:46996 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:38:21.332 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:38:21.460 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:38:21.690 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:38:21.542 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:38:21.355 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:38:21.465 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:38:21.259 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:33:25.737 00:06:00.111 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 01:38:38.519 00:00:12.196 TCP 12.102.0.1:56184 -> 1.101.0.1:3000 15 1926 1 2025-09-05 01:39:40.750 00:00:11.857 TCP 12.102.0.1:36254 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:40:42.651 00:00:11.825 TCP 12.102.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:41:44.534 00:00:11.800 TCP 12.102.0.1:54908 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:42:46.375 00:00:11.812 TCP 12.102.0.1:54768 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:43:21.865 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:43:21.937 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:43:21.895 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:43:21.845 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:43:21.865 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:43:21.548 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:43:21.822 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:43:48.225 00:00:11.810 TCP 12.102.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:39:25.735 00:06:00.116 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:44:50.080 00:00:11.797 TCP 12.102.0.1:50420 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:40:25.739 00:06:00.112 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 01:45:51.916 00:00:11.837 TCP 12.102.0.1:39682 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:46:53.796 00:00:11.765 TCP 12.102.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:47:55.610 00:00:11.817 TCP 12.102.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:48:21.744 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:48:21.837 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:48:21.730 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:48:21.539 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:48:21.544 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:48:21.610 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:48:21.517 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:48:57.483 00:00:11.769 TCP 12.102.0.1:54700 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:49:59.295 00:00:11.759 TCP 12.102.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:51:01.101 00:00:11.801 TCP 12.102.0.1:57348 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:46:25.737 00:06:00.118 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:52:02.951 00:00:11.811 TCP 12.102.0.1:47876 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:47:25.739 00:06:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 01:53:04.801 00:00:11.813 TCP 12.102.0.1:33838 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:53:21.607 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:53:21.734 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:53:21.837 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:53:21.689 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:53:21.630 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:53:21.553 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:53:21.709 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:54:06.661 00:00:11.811 TCP 12.102.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:55:08.506 00:00:11.854 TCP 12.102.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:56:10.401 00:00:11.761 TCP 12.102.0.1:43152 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:57:12.216 00:00:11.805 TCP 12.102.0.1:55514 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:58:21.954 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 01:58:21.948 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 01:58:22.186 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 01:58:21.879 00:00:00.037 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 01:58:21.976 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 01:58:21.859 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 01:58:21.985 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 01:53:25.737 00:06:00.138 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 01:58:14.085 00:00:11.806 TCP 12.102.0.1:45308 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-09-05 00:57:25 - 2025-09-05 01:59:25 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0011s User: 0.0042s Wall: 0.0022s flows/second: 73951.5 Runtime: 0.0022s