Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 13:59:21.478 00:00:11.804 TCP 12.102.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:00:23.322 00:00:11.770 TCP 12.102.0.1:47894 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:01:08.116 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:01:08.085 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:01:08.321 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:01:08.097 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:01:08.138 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:01:08.263 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:01:08.188 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 13:56:29.677 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:01:25.122 00:00:11.803 TCP 12.102.0.1:54918 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:02:26.965 00:00:11.806 TCP 12.102.0.1:55452 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:03:28.809 00:00:11.806 TCP 12.102.0.1:44872 -> 1.101.0.1:3000 11 1507 1 2025-09-10 13:59:29.676 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 14:04:30.646 00:00:11.831 TCP 12.102.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:05:32.515 00:00:11.823 TCP 12.102.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:06:08.329 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:06:08.133 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:06:08.311 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:06:08.225 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:06:08.047 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:06:08.334 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:06:08.203 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:06:34.375 00:00:11.812 TCP 12.102.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:07:36.238 00:00:11.806 TCP 12.102.0.1:34198 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:03:29.679 00:06:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:08:38.087 00:00:11.761 TCP 12.102.0.1:43060 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:09:39.885 00:00:11.767 TCP 12.102.0.1:54196 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:10:41.695 00:00:11.797 TCP 12.102.0.1:54452 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:11:08.302 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:11:08.336 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:11:08.435 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:11:08.467 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:11:08.325 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:11:08.642 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:11:08.301 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:06:29.678 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 14:11:43.532 00:00:11.802 TCP 12.102.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:12:45.373 00:00:11.818 TCP 12.102.0.1:52942 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:13:47.227 00:00:12.197 TCP 12.102.0.1:38690 -> 1.101.0.1:3000 15 1926 1 2025-09-10 14:14:49.463 00:00:11.812 TCP 12.102.0.1:37608 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:10:29.685 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:15:51.313 00:00:11.816 TCP 12.102.0.1:39752 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:16:08.447 00:00:00.033 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:16:08.206 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:16:08.322 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:16:08.256 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:16:08.502 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:16:08.195 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:16:08.233 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:16:53.173 00:00:11.803 TCP 12.102.0.1:34018 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:17:55.032 00:00:11.803 TCP 12.102.0.1:59580 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:13:29.682 00:06:00.163 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 14:18:56.877 00:00:11.804 TCP 12.102.0.1:48428 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:19:58.723 00:00:11.811 TCP 12.102.0.1:55080 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:21:08.556 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:21:08.299 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:21:08.445 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:21:08.466 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:21:08.610 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:21:08.452 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:21:08.442 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:21:00.566 00:00:11.779 TCP 12.102.0.1:36952 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:22:02.385 00:00:11.831 TCP 12.102.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:17:29.687 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:23:04.228 00:00:11.821 TCP 12.102.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:24:06.090 00:00:11.813 TCP 12.102.0.1:33036 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:25:07.937 00:00:11.805 TCP 12.102.0.1:40786 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:20:29.684 00:06:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 14:26:08.887 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:26:08.914 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:26:08.910 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:26:08.738 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:26:09.017 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:26:09.029 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:26:09.022 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:26:09.777 00:00:11.826 TCP 12.102.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:27:11.642 00:00:11.823 TCP 12.102.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:28:13.501 00:00:11.858 TCP 12.102.0.1:37152 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:29:15.400 00:00:11.811 TCP 12.102.0.1:48710 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:24:29.691 00:06:00.154 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:30:17.262 00:00:11.799 TCP 12.102.0.1:37316 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:31:08.678 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:31:08.695 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:31:08.843 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:31:08.580 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:31:08.777 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:31:08.568 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:31:08.556 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:31:19.102 00:00:11.800 TCP 12.102.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:27:29.689 00:06:00.158 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 14:32:20.941 00:00:11.808 TCP 12.102.0.1:60500 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:33:22.786 00:00:11.804 TCP 12.102.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:34:24.635 00:00:11.813 TCP 12.102.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:35:26.478 00:00:11.800 TCP 12.102.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:36:08.671 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:36:08.608 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:36:08.630 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:36:08.762 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:36:08.692 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:36:08.731 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:36:08.787 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:31:29.693 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:36:28.315 00:00:11.813 TCP 12.102.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:37:30.171 00:00:11.803 TCP 12.102.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:38:32.019 00:00:11.798 TCP 12.102.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:34:29.690 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 14:39:33.857 00:00:11.775 TCP 12.102.0.1:59608 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:40:35.666 00:00:11.755 TCP 12.102.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:41:08.888 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:41:08.862 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:41:08.812 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:41:08.717 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:41:08.967 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:41:08.789 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:41:09.073 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:41:37.460 00:00:11.804 TCP 12.102.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:42:39.304 00:00:11.802 TCP 12.102.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:38:29.694 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:43:41.145 00:00:11.762 TCP 12.102.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:44:42.942 00:00:12.215 TCP 12.102.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:45:45.198 00:00:11.794 TCP 12.102.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:46:08.790 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:46:09.090 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:46:09.141 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:46:09.045 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:46:09.137 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:46:09.092 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:46:09.113 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:41:29.698 00:06:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 14:46:47.047 00:00:11.801 TCP 12.102.0.1:59118 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:47:48.885 00:00:12.397 TCP 12.102.0.1:50626 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:48:51.320 00:00:11.812 TCP 12.102.0.1:59008 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:49:53.172 00:00:11.759 TCP 12.102.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:45:29.702 00:06:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:50:54.979 00:00:11.804 TCP 12.102.0.1:51096 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:51:08.883 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:51:09.128 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:51:09.440 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:51:09.103 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:51:09.128 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:51:09.349 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:51:09.150 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:51:56.820 00:00:11.800 TCP 12.102.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:52:58.654 00:00:11.770 TCP 12.102.0.1:55078 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:48:29.700 00:06:00.152 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-10 14:54:00.462 00:00:12.633 TCP 12.102.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:55:03.132 00:00:11.805 TCP 12.102.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:56:09.491 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-10 14:56:09.547 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 14:56:09.442 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-10 14:56:09.407 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-10 14:56:09.043 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-10 14:56:09.169 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-10 14:56:09.386 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-10 14:56:04.973 00:00:11.832 TCP 12.102.0.1:37688 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:57:06.843 00:00:11.800 TCP 12.102.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-09-10 14:52:29.704 00:06:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-10 14:58:08.683 00:00:11.786 TCP 12.102.0.1:42000 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-09-10 13:56:29 - 2025-09-10 14:58:29 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0024s User: 0.0024s Wall: 0.0027s flows/second: 59752.2 Runtime: 0.0027s