Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 03:58:52.900 00:00:11.806 TCP 12.102.0.1:52326 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:59:54.748 00:00:11.807 TCP 12.102.0.1:43902 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:00:56.590 00:00:11.809 TCP 12.102.0.1:47846 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:01:58.435 00:00:11.808 TCP 12.102.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:03:00.279 00:00:11.779 TCP 12.102.0.1:53956 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:03:24.399 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:03:24.438 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:03:24.549 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:03:24.400 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:03:24.424 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:03:24.485 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:03:24.418 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:04:02.102 00:00:11.803 TCP 12.102.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:59:25.825 00:06:00.132 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 04:05:03.940 00:00:11.808 TCP 12.102.0.1:43576 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:00:25.827 00:06:00.130 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 04:06:05.789 00:00:11.805 TCP 12.102.0.1:36664 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:07:07.638 00:00:11.804 TCP 12.102.0.1:52530 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:08:24.356 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:08:09.483 00:00:11.807 TCP 12.102.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:08:24.572 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:08:24.607 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:08:24.402 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:08:24.379 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:08:24.745 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:08:24.256 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:09:11.348 00:00:11.774 TCP 12.102.0.1:41578 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:10:13.162 00:00:11.801 TCP 12.102.0.1:51836 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:06:25.828 00:06:00.135 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 04:11:15.003 00:00:11.769 TCP 12.102.0.1:36172 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:12:16.807 00:00:11.807 TCP 12.102.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:07:25.832 00:06:00.130 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 04:13:24.605 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:13:24.591 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:13:24.608 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:13:24.615 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:13:24.508 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:13:24.565 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:13:24.593 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:13:18.660 00:00:12.303 TCP 12.102.0.1:48510 -> 1.101.0.1:3000 15 1926 1 2025-09-05 04:14:21.001 00:00:11.808 TCP 12.102.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:15:22.849 00:00:11.805 TCP 12.102.0.1:44860 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:16:24.691 00:00:11.796 TCP 12.102.0.1:55286 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:17:26.526 00:00:11.803 TCP 12.102.0.1:60860 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:13:25.830 00:06:00.136 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 04:18:24.904 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:18:24.928 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:18:24.939 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:18:24.633 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:18:25.000 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:18:24.733 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:18:24.610 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:18:28.366 00:00:11.822 TCP 12.102.0.1:60096 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:14:25.835 00:06:00.130 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 04:19:30.228 00:00:11.806 TCP 12.102.0.1:42660 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:20:32.077 00:00:11.779 TCP 12.102.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:21:33.898 00:00:11.800 TCP 12.102.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:22:35.750 00:00:11.800 TCP 12.102.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:23:24.664 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:23:25.024 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:23:24.722 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:23:24.722 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:23:24.687 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:23:24.734 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:23:24.789 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:23:37.587 00:00:11.779 TCP 12.102.0.1:53728 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:24:39.405 00:00:12.117 TCP 12.102.0.1:43562 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:20:25.841 00:06:00.132 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 04:25:41.557 00:00:11.765 TCP 12.102.0.1:59542 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:21:25.846 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 04:26:43.354 00:00:11.815 TCP 12.102.0.1:51580 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:27:45.208 00:00:11.806 TCP 12.102.0.1:59430 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:28:24.827 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:28:24.871 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:28:24.968 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:28:24.904 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:28:24.849 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:28:25.124 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:28:24.650 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:28:47.069 00:00:11.797 TCP 12.102.0.1:33220 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:29:48.905 00:00:11.794 TCP 12.102.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:30:50.739 00:00:11.804 TCP 12.102.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:31:52.577 00:00:11.799 TCP 12.102.0.1:41052 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:27:25.845 00:06:00.133 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 04:32:54.418 00:00:11.799 TCP 12.102.0.1:41706 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:33:25.180 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:33:24.875 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:33:25.003 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:33:25.062 00:00:00.042 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:33:24.899 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:33:24.885 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:33:25.041 00:00:00.042 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:28:25.848 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 04:33:56.262 00:00:11.797 TCP 12.102.0.1:44486 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:34:58.097 00:00:11.798 TCP 12.102.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:35:59.932 00:00:11.868 TCP 12.102.0.1:53494 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:37:01.841 00:00:12.125 TCP 12.102.0.1:34132 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:38:04.010 00:00:11.810 TCP 12.102.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:38:25.266 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:38:25.476 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:38:25.556 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:38:25.622 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:38:25.290 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:38:25.467 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:38:25.437 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:39:05.858 00:00:11.800 TCP 12.102.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:34:25.848 00:06:00.133 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 04:40:07.699 00:00:11.806 TCP 12.102.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:35:25.851 00:06:00.128 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 04:41:09.544 00:00:11.797 TCP 12.102.0.1:50084 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:42:11.387 00:00:11.806 TCP 12.102.0.1:49964 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:43:25.171 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:43:25.128 00:00:00.046 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:43:25.108 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:43:25.160 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:43:25.194 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:43:13.230 00:00:11.811 TCP 12.102.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:43:25.140 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:43:25.149 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:44:15.079 00:00:11.820 TCP 12.102.0.1:46626 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:45:16.924 00:00:11.814 TCP 12.102.0.1:43702 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:41:25.849 00:06:00.136 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 04:46:18.788 00:00:11.762 TCP 12.102.0.1:45854 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:42:25.852 00:06:00.131 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 04:47:20.586 00:00:11.803 TCP 12.102.0.1:52580 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:48:25.268 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:48:25.350 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:48:25.441 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:48:25.365 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:48:25.291 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:48:25.361 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:48:25.247 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:48:22.441 00:00:11.837 TCP 12.102.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:49:24.313 00:00:11.757 TCP 12.102.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:50:26.116 00:00:11.762 TCP 12.102.0.1:45186 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:51:27.923 00:00:11.825 TCP 12.102.0.1:34314 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:52:29.782 00:00:11.858 TCP 12.102.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:48:25.850 00:06:00.137 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-05 04:53:25.754 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:53:25.614 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:53:25.782 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:53:25.397 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:53:25.533 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:53:25.363 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-05 04:53:25.374 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:53:31.679 00:00:11.808 TCP 12.102.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:49:25.853 00:06:00.131 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-05 04:54:33.524 00:00:11.799 TCP 12.102.0.1:59962 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:55:35.360 00:00:13.180 TCP 12.102.0.1:47676 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:56:38.578 00:00:11.772 TCP 12.102.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:57:40.392 00:00:11.809 TCP 12.102.0.1:50506 -> 1.101.0.1:3000 11 1507 1 2025-09-05 04:58:25.873 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-05 04:58:25.444 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-05 04:58:25.756 00:00:00.032 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 04:58:25.722 00:00:00.034 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-05 04:58:25.897 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-05 04:58:25.535 00:00:00.043 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-05 04:58:25.666 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 158, total bytes: 122769, total packets: 1118, avg bps: 274, avg pps: 0, avg bpp: 109 Time window: 2025-09-05 03:58:52 - 2025-09-05 04:58:25 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0031s User: 0.0008s Wall: 0.0017s flows/second: 93667.8 Runtime: 0.0017s