Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 01:59:31.693 00:00:11.814 TCP 12.102.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-09-10 01:55:29.325 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:00:53.813 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:00:33.544 00:00:11.765 TCP 12.102.0.1:60652 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:00:53.894 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:00:53.894 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:00:53.835 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:00:53.809 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:00:53.973 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:00:53.986 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:01:35.346 00:00:11.835 TCP 12.102.0.1:50190 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:02:37.218 00:00:11.761 TCP 12.102.0.1:54490 -> 1.101.0.1:3000 11 1507 1 2025-09-10 01:58:29.323 00:06:00.179 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 02:03:39.029 00:00:11.800 TCP 12.102.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:04:40.867 00:00:11.800 TCP 12.102.0.1:51546 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:05:53.616 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:05:53.733 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:05:53.434 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:05:53.683 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:05:53.811 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:05:53.607 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:05:53.661 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:05:42.709 00:00:11.808 TCP 12.102.0.1:37536 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:06:44.564 00:00:11.800 TCP 12.102.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:02:29.326 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:07:46.410 00:00:11.760 TCP 12.102.0.1:41926 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:08:48.208 00:00:12.195 TCP 12.102.0.1:36030 -> 1.101.0.1:3000 15 1926 1 2025-09-10 02:09:50.439 00:00:11.806 TCP 12.102.0.1:47912 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:05:29.325 00:06:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 02:10:53.763 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:10:53.636 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:10:53.911 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:10:53.765 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:10:53.786 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:10:53.853 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:10:53.897 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:10:52.287 00:00:11.860 TCP 12.102.0.1:49256 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:11:54.187 00:00:11.797 TCP 12.102.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:12:56.034 00:00:11.799 TCP 12.102.0.1:49988 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:13:57.872 00:00:12.231 TCP 12.102.0.1:50452 -> 1.101.0.1:3000 15 1926 1 2025-09-10 02:09:29.329 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:15:00.141 00:00:12.124 TCP 12.102.0.1:41688 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:15:53.776 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:15:53.822 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:15:53.890 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:15:53.800 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:15:53.944 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:15:54.014 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:15:54.064 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:16:02.305 00:00:11.805 TCP 12.102.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:17:04.148 00:00:11.817 TCP 12.102.0.1:33500 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:12:29.328 00:06:00.179 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 02:18:06.004 00:00:11.758 TCP 12.102.0.1:42954 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:19:07.800 00:00:11.800 TCP 12.102.0.1:49230 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:20:09.644 00:00:11.843 TCP 12.102.0.1:38746 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:20:53.801 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:20:54.103 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:20:54.177 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:20:54.033 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:20:54.222 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:20:54.205 00:00:00.048 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:20:54.200 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:21:11.525 00:00:11.904 TCP 12.102.0.1:37830 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:16:29.340 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:22:13.471 00:00:11.802 TCP 12.102.0.1:52174 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:23:15.310 00:00:11.811 TCP 12.102.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:24:17.160 00:00:11.803 TCP 12.102.0.1:59334 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:19:29.338 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 02:25:19.001 00:00:11.794 TCP 12.102.0.1:43066 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:25:53.935 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:25:53.826 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:25:54.007 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:25:54.145 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:25:54.245 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:25:54.030 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:25:54.086 00:00:00.029 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:26:20.838 00:00:11.808 TCP 12.102.0.1:39058 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:27:22.688 00:00:11.803 TCP 12.102.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:23:29.340 00:06:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:28:24.528 00:00:11.806 TCP 12.102.0.1:41264 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:29:26.377 00:00:11.812 TCP 12.102.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:30:28.226 00:00:11.807 TCP 12.102.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:30:54.237 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:30:54.357 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:30:54.223 00:00:00.031 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:30:54.344 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:30:54.259 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:30:54.340 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:30:54.276 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:26:29.340 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 02:31:30.080 00:00:11.801 TCP 12.102.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:32:31.918 00:00:11.843 TCP 12.102.0.1:33380 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:33:33.800 00:00:11.848 TCP 12.102.0.1:54052 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:34:35.687 00:00:11.807 TCP 12.102.0.1:35816 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:30:29.343 00:06:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:35:54.354 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:35:37.535 00:00:11.802 TCP 12.102.0.1:59756 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:35:54.477 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:35:54.479 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:35:54.387 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:35:54.377 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:35:54.555 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:35:54.373 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:36:39.379 00:00:11.869 TCP 12.102.0.1:45842 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:37:41.297 00:00:11.768 TCP 12.102.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:33:29.352 00:06:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 02:38:43.108 00:00:11.810 TCP 12.102.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:39:44.952 00:00:11.796 TCP 12.102.0.1:35632 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:40:54.554 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:40:54.554 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:40:54.138 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:40:46.788 00:00:11.800 TCP 12.102.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:40:54.510 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:40:54.550 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:40:54.560 00:00:00.033 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:40:54.487 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:41:48.626 00:00:11.756 TCP 12.102.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:37:29.354 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:42:50.421 00:00:11.795 TCP 12.102.0.1:58320 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:43:52.255 00:00:11.771 TCP 12.102.0.1:53508 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:44:54.084 00:00:11.810 TCP 12.102.0.1:60122 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:40:29.353 00:06:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 02:45:54.374 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:45:54.646 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:45:54.642 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:45:54.504 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:45:54.642 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:45:54.438 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:45:54.482 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:45:55.933 00:00:11.782 TCP 12.102.0.1:52744 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:46:57.755 00:00:11.803 TCP 12.102.0.1:54218 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:47:59.597 00:00:11.807 TCP 12.102.0.1:57318 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:49:01.448 00:00:12.240 TCP 12.102.0.1:49038 -> 1.101.0.1:3000 15 1926 1 2025-09-10 02:44:29.354 00:06:00.158 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:50:03.731 00:00:11.808 TCP 12.102.0.1:40886 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:50:54.680 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:50:54.691 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:50:54.713 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:50:54.569 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:50:54.721 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:50:54.571 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:50:54.545 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:51:05.576 00:00:11.763 TCP 12.102.0.1:45690 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:52:07.377 00:00:11.813 TCP 12.102.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:47:29.353 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 02:53:09.230 00:00:11.799 TCP 12.102.0.1:58652 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:54:11.078 00:00:11.803 TCP 12.102.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:55:12.916 00:00:11.819 TCP 12.102.0.1:38294 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:55:54.686 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 02:55:54.553 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 02:55:54.774 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:55:54.689 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 02:55:54.709 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 02:55:54.661 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 02:55:54.782 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 02:56:14.775 00:00:11.810 TCP 12.102.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:51:29.357 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 02:57:16.622 00:00:11.801 TCP 12.102.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:58:18.462 00:00:11.802 TCP 12.102.0.1:51408 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124468, total packets: 1140, avg bps: 263, avg pps: 0, avg bpp: 109 Time window: 2025-09-10 01:55:29 - 2025-09-10 02:58:30 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0030s User: 0.0020s Wall: 0.0016s flows/second: 96483.6 Runtime: 0.0017s