Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 00:58:52.459 00:00:11.801 TCP 12.102.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:55:30.874 00:05:00.204 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 00:59:54.299 00:00:11.801 TCP 12.102.0.1:54510 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:00:56.137 00:00:11.860 TCP 12.102.0.1:43410 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:57:30.873 00:05:00.207 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:01:50.150 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:01:50.132 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:01:50.271 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:01:50.370 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:01:50.031 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:01:50.027 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:01:50.005 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:01:58.072 00:00:11.801 TCP 12.102.0.1:57028 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:02:59.915 00:00:11.792 TCP 12.102.0.1:42932 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:04:01.748 00:00:11.799 TCP 12.102.0.1:49088 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:05:03.584 00:00:11.761 TCP 12.102.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:01:30.876 00:05:00.202 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:06:05.387 00:00:11.808 TCP 12.102.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:06:50.466 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:06:50.307 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:06:50.271 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:06:50.362 00:00:00.029 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:06:50.270 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:06:50.436 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:06:50.249 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:07:07.237 00:00:12.121 TCP 12.102.0.1:40978 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:03:30.874 00:05:00.207 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:08:09.393 00:00:11.802 TCP 12.102.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:09:11.228 00:00:11.799 TCP 12.102.0.1:41076 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:10:13.084 00:00:11.811 TCP 12.102.0.1:49804 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:11:14.933 00:00:11.807 TCP 12.102.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:07:30.878 00:05:00.205 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:11:50.659 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:11:50.630 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:11:50.456 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:11:50.497 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:11:50.626 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:11:50.560 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:11:50.476 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:12:16.779 00:00:11.800 TCP 12.102.0.1:35802 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:09:30.875 00:05:00.212 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:13:18.617 00:00:11.761 TCP 12.102.0.1:60374 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:14:20.415 00:00:12.060 TCP 12.102.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:15:22.517 00:00:11.770 TCP 12.102.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:16:24.324 00:00:11.807 TCP 12.102.0.1:60642 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:16:50.454 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:16:50.478 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:16:50.464 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:16:50.671 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:16:50.476 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:16:50.734 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:16:50.548 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:13:30.878 00:05:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:17:26.161 00:00:11.818 TCP 12.102.0.1:43602 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:18:28.028 00:00:11.803 TCP 12.102.0.1:39732 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:15:30.876 00:05:00.214 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:19:29.868 00:00:11.799 TCP 12.102.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:20:31.705 00:00:11.824 TCP 12.102.0.1:50964 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:21:33.566 00:00:11.758 TCP 12.102.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:21:50.694 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:21:50.717 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:21:50.800 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:21:50.528 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:21:50.646 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:21:50.730 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:21:50.694 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:22:35.365 00:00:11.834 TCP 12.102.0.1:53284 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:19:30.879 00:05:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:23:37.233 00:00:11.800 TCP 12.102.0.1:35342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:24:39.082 00:00:11.762 TCP 12.102.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:21:30.877 00:05:00.214 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:25:40.896 00:00:11.809 TCP 12.102.0.1:49628 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:26:50.650 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:26:50.759 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:26:50.953 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:26:50.932 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:26:50.945 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:26:50.649 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:26:50.910 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:26:42.748 00:00:11.799 TCP 12.102.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:27:44.579 00:00:11.802 TCP 12.102.0.1:35438 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:28:46.422 00:00:11.761 TCP 12.102.0.1:34286 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:25:30.880 00:05:00.209 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:29:48.221 00:00:11.767 TCP 12.102.0.1:54520 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:30:50.043 00:00:11.891 TCP 12.102.0.1:49088 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:27:30.878 00:05:00.215 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:31:50.793 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:31:50.975 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:31:50.778 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:31:51.005 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:31:50.816 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:31:50.997 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:31:50.554 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:31:51.978 00:00:11.763 TCP 12.102.0.1:57058 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:32:53.785 00:00:11.763 TCP 12.102.0.1:41162 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:33:55.590 00:00:11.804 TCP 12.102.0.1:49420 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:34:57.435 00:00:11.779 TCP 12.102.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:31:30.887 00:05:00.205 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:35:59.243 00:00:11.805 TCP 12.102.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:36:51.130 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:36:51.278 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:36:50.858 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:36:51.168 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:36:50.985 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:36:51.223 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:36:51.145 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:37:01.092 00:00:11.801 TCP 12.102.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:33:30.885 00:05:00.210 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:38:02.934 00:00:11.814 TCP 12.102.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:39:04.785 00:00:11.809 TCP 12.102.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:40:06.629 00:00:11.768 TCP 12.102.0.1:32820 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:41:08.441 00:00:11.761 TCP 12.102.0.1:37088 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:37:30.891 00:05:00.203 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:41:51.107 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:41:51.020 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:41:50.950 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:41:50.884 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:41:51.154 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:41:50.970 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:41:50.862 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:42:10.243 00:00:11.771 TCP 12.102.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:43:12.073 00:00:11.825 TCP 12.102.0.1:38724 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:39:30.888 00:05:00.209 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:44:13.932 00:00:11.815 TCP 12.102.0.1:38214 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:45:15.788 00:00:11.806 TCP 12.102.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:46:17.635 00:00:11.803 TCP 12.102.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:46:51.009 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:46:51.211 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:46:51.051 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:46:50.978 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:46:51.104 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:46:51.061 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:46:50.954 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:43:30.891 00:05:00.203 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:47:19.475 00:00:11.805 TCP 12.102.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:48:21.311 00:00:12.192 TCP 12.102.0.1:59774 -> 1.101.0.1:3000 15 1926 1 2025-09-12 01:45:30.900 00:05:00.197 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:49:23.546 00:00:11.809 TCP 12.102.0.1:54470 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:50:25.395 00:00:11.803 TCP 12.102.0.1:53604 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:51:27.239 00:00:11.797 TCP 12.102.0.1:44854 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:51:50.987 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:51:50.946 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:51:51.274 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:51:50.982 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:51:51.372 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:51:50.980 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:51:50.959 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:52:29.084 00:00:11.815 TCP 12.102.0.1:46980 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:49:30.903 00:05:00.192 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-12 01:53:30.942 00:00:11.805 TCP 12.102.0.1:46686 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:54:32.790 00:00:11.808 TCP 12.102.0.1:42186 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:51:30.902 00:05:00.196 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-12 01:55:34.636 00:00:11.800 TCP 12.102.0.1:39230 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:56:36.475 00:00:11.809 TCP 12.102.0.1:57020 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:56:51.508 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 01:56:51.360 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:56:51.360 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 01:56:51.392 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 01:56:51.466 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 01:56:51.241 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 01:56:51.370 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 01:57:38.326 00:00:11.799 TCP 12.102.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:58:40.165 00:00:11.801 TCP 12.102.0.1:56720 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 125260, total packets: 1145, avg bps: 263, avg pps: 0, avg bpp: 109 Time window: 2025-09-12 00:55:30 - 2025-09-12 01:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0017s flows/second: 95658.5 Runtime: 0.0017s