Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 06:59:15.649 00:00:11.813 TCP 12.102.0.1:38930 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:59:54.572 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:59:54.360 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 06:59:54.449 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 06:59:54.732 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 06:59:54.602 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 06:59:54.672 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 06:59:54.426 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 06:56:28.186 00:04:00.007 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-08 07:00:17.503 00:00:11.801 TCP 12.102.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:01:19.341 00:00:11.803 TCP 12.102.0.1:43504 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:58:28.190 00:04:00.001 TCP 179.10.12.10:179 -> 179.10.12.12:58070 8 511 1 2025-09-08 07:02:21.182 00:00:11.796 TCP 12.102.0.1:59654 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:03:23.024 00:00:11.796 TCP 12.102.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:04:24.853 00:00:11.804 TCP 12.102.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:04:54.649 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:04:54.548 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:04:54.649 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:04:54.386 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:04:54.671 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:04:54.678 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:04:54.514 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:01:28.189 00:04:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-08 07:05:26.697 00:00:11.819 TCP 12.102.0.1:32926 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:06:28.554 00:00:11.757 TCP 12.102.0.1:38932 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:03:28.190 00:04:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 9 563 1 2025-09-08 07:06:28.191 00:01:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 4 246 1 2025-09-08 07:07:30.349 00:00:11.819 TCP 12.102.0.1:36996 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:08:32.210 00:00:11.801 TCP 12.102.0.1:42428 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:09:34.074 00:00:12.313 TCP 12.102.0.1:50022 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:09:55.024 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:09:55.073 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:09:55.119 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:09:55.055 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:09:55.047 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:09:54.860 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:09:54.986 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:10:36.432 00:00:11.828 TCP 12.102.0.1:43190 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:11:38.294 00:00:11.814 TCP 12.102.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:08:28.194 00:04:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:08:28.190 00:04:00.006 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-08 07:12:40.149 00:00:11.814 TCP 12.102.0.1:42626 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:13:42.006 00:00:11.803 TCP 12.102.0.1:41370 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:14:54.842 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:14:54.663 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:14:43.849 00:00:11.799 TCP 12.102.0.1:36724 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:14:54.861 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:14:54.924 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:14:54.864 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:14:54.763 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:14:54.970 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:15:45.686 00:00:11.787 TCP 12.102.0.1:49044 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:16:47.513 00:00:11.800 TCP 12.102.0.1:45354 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:13:28.193 00:04:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-08 07:13:28.194 00:04:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:17:49.353 00:00:11.820 TCP 12.102.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:18:51.213 00:00:11.814 TCP 12.102.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:18:28.196 00:01:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 4 246 1 2025-09-08 07:19:54.908 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:19:54.985 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:19:54.939 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:19:54.862 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:19:54.845 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:19:54.867 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:19:54.841 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:19:53.072 00:00:12.308 TCP 12.102.0.1:46214 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:20:55.423 00:00:11.801 TCP 12.102.0.1:47420 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:21:57.263 00:00:11.805 TCP 12.102.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:18:28.195 00:04:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-08 07:22:59.109 00:00:11.761 TCP 12.102.0.1:37722 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:24:00.909 00:00:11.827 TCP 12.102.0.1:36192 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:20:28.196 00:04:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:24:55.137 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:24:55.232 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:24:54.944 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:24:54.997 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:24:55.043 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:24:55.194 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:24:54.922 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:25:02.769 00:00:11.761 TCP 12.102.0.1:48836 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:26:04.566 00:00:11.803 TCP 12.102.0.1:37618 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:27:06.409 00:00:11.799 TCP 12.102.0.1:41794 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:23:28.197 00:04:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-08 07:28:08.248 00:00:11.797 TCP 12.102.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:29:10.084 00:00:11.804 TCP 12.102.0.1:38790 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:25:28.196 00:04:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:29:54.929 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:29:55.065 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:29:55.287 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:29:55.284 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:29:54.951 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:29:55.278 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:29:54.957 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:30:11.925 00:00:12.270 TCP 12.102.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:31:14.234 00:00:11.806 TCP 12.102.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:28:28.196 00:04:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-08 07:32:16.088 00:00:11.799 TCP 12.102.0.1:60410 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:33:17.926 00:00:11.817 TCP 12.102.0.1:52062 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:30:28.197 00:04:00.003 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:34:19.780 00:00:11.803 TCP 12.102.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:34:55.085 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:34:55.621 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:34:55.459 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:34:55.516 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:34:55.183 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:34:55.456 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:34:55.493 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:35:21.625 00:00:11.755 TCP 12.102.0.1:45282 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:36:23.418 00:00:11.834 TCP 12.102.0.1:56546 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:33:28.197 00:04:00.047 TCP 179.10.12.12:58070 -> 179.10.12.10:179 9 563 1 2025-09-08 07:37:25.294 00:00:11.802 TCP 12.102.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:38:27.134 00:00:12.423 TCP 12.102.0.1:50532 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:35:28.198 00:04:00.009 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:38:28.203 00:01:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 4 246 1 2025-09-08 07:39:29.610 00:00:11.798 TCP 12.102.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:39:55.496 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:39:55.295 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:39:55.602 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:39:55.409 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:39:55.177 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:39:55.285 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:39:55.388 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:40:31.456 00:00:11.816 TCP 12.102.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:41:33.314 00:00:11.857 TCP 12.102.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:40:28.205 00:02:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 3 213 1 2025-09-08 07:42:35.209 00:00:11.799 TCP 12.102.0.1:52192 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:43:37.069 00:00:11.813 TCP 12.102.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:43:28.206 00:01:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 2 142 1 2025-09-08 07:40:28.203 00:04:00.007 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:44:55.401 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:44:38.921 00:00:11.823 TCP 12.102.0.1:56282 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:44:55.442 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:44:55.152 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:44:55.555 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:44:55.424 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:44:55.487 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:44:55.422 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:45:40.785 00:00:11.804 TCP 12.102.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:46:42.632 00:00:11.761 TCP 12.102.0.1:60194 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:47:44.432 00:00:11.813 TCP 12.102.0.1:38324 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:48:46.284 00:00:11.777 TCP 12.102.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:45:28.202 00:04:00.006 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:45:28.206 00:04:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 5 355 1 2025-09-08 07:49:55.748 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:49:55.760 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:49:55.829 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:49:55.569 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:49:55.348 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:49:55.561 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:49:55.547 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:49:48.101 00:00:11.812 TCP 12.102.0.1:53308 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:50:49.957 00:00:11.857 TCP 12.102.0.1:48236 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:51:51.854 00:00:11.812 TCP 12.102.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:52:53.707 00:00:11.805 TCP 12.102.0.1:57228 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:53:55.554 00:00:11.805 TCP 12.102.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:50:28.203 00:04:00.008 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-08 07:50:28.206 00:04:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 5 355 1 2025-09-08 07:54:55.688 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-08 07:54:55.647 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-08 07:54:55.744 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:54:55.771 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-08 07:54:55.710 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-08 07:54:55.731 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-08 07:54:55.770 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-08 07:54:57.405 00:00:11.804 TCP 12.102.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:55:59.246 00:00:11.804 TCP 12.102.0.1:60552 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:55:28.203 00:01:00.007 TCP 179.10.12.10:179 -> 179.10.12.12:58070 4 246 1 2025-09-08 07:57:01.089 00:00:11.800 TCP 12.102.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:58:02.931 00:00:11.772 TCP 12.102.0.1:39652 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 169, total bytes: 122100, total packets: 1107, avg bps: 263, avg pps: 0, avg bpp: 110 Time window: 2025-09-08 06:56:28 - 2025-09-08 07:58:14 Total flows processed: 169, passed: 169, Blocks skipped: 0, Bytes read: 17640 Sys: 0.0032s User: 0.0021s Wall: 0.0026s flows/second: 64977.3 Runtime: 0.0026s