Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 09:59:21.409 00:00:11.866 TCP 12.102.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:00:23.306 00:00:11.803 TCP 12.102.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:56:31.198 00:06:00.105 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:01:25.154 00:00:11.917 TCP 12.102.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:02:01.148 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:02:00.906 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:02:01.115 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:02:00.960 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:02:01.170 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:02:01.030 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:02:01.053 00:00:00.038 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:02:27.108 00:00:11.803 TCP 12.102.0.1:60298 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:58:31.197 00:06:00.110 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 10:03:28.948 00:00:11.766 TCP 12.102.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:04:30.765 00:00:12.250 TCP 12.102.0.1:56604 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:05:33.070 00:00:11.801 TCP 12.102.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:06:34.915 00:00:11.821 TCP 12.102.0.1:49760 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:07:01.352 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:07:01.270 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:07:01.176 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:07:01.405 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:07:00.969 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:07:01.217 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:07:01.195 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:07:36.774 00:00:11.797 TCP 12.102.0.1:59492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:03:31.199 00:06:00.105 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:08:38.608 00:00:11.795 TCP 12.102.0.1:53554 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:09:40.442 00:00:11.803 TCP 12.102.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:05:31.196 00:06:00.111 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 10:10:42.278 00:00:11.803 TCP 12.102.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:11:44.118 00:00:11.800 TCP 12.102.0.1:44324 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:12:01.462 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:12:01.511 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:12:01.556 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:12:01.167 00:00:00.058 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:12:01.484 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:12:01.490 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:12:01.144 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:12:45.960 00:00:11.812 TCP 12.102.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:13:47.801 00:00:11.797 TCP 12.102.0.1:59596 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:14:49.638 00:00:11.804 TCP 12.102.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:10:31.204 00:06:00.101 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:15:51.482 00:00:11.801 TCP 12.102.0.1:45762 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:17:01.246 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:17:01.496 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:17:01.562 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:17:01.396 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:17:01.268 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:17:01.293 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:17:01.274 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:16:53.320 00:00:11.805 TCP 12.102.0.1:43792 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:12:31.201 00:06:00.108 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 10:17:55.159 00:00:11.812 TCP 12.102.0.1:42272 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:18:57.026 00:00:11.800 TCP 12.102.0.1:35788 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:19:58.877 00:00:11.806 TCP 12.102.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:21:00.723 00:00:12.208 TCP 12.102.0.1:34514 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:22:01.425 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:22:01.543 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:22:01.512 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:22:01.195 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:22:01.463 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:22:01.335 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:22:01.172 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:22:02.970 00:00:11.860 TCP 12.102.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:17:31.205 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:23:04.871 00:00:11.803 TCP 12.102.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:24:06.712 00:00:11.801 TCP 12.102.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:19:31.204 00:06:00.108 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 10:25:08.550 00:00:11.802 TCP 12.102.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:26:10.389 00:00:11.803 TCP 12.102.0.1:45824 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:27:01.613 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:27:01.616 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:27:01.675 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:27:01.719 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:27:01.634 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:27:01.367 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:27:01.612 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:27:12.234 00:00:11.763 TCP 12.102.0.1:48414 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:28:14.039 00:00:11.766 TCP 12.102.0.1:34616 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:29:15.839 00:00:12.194 TCP 12.102.0.1:51244 -> 1.101.0.1:3000 15 1926 1 2025-09-12 10:24:31.228 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:30:18.081 00:00:11.801 TCP 12.102.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:26:31.219 00:06:00.095 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 10:31:19.923 00:00:11.832 TCP 12.102.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:32:01.591 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:32:01.369 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:32:01.834 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:32:01.682 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:32:01.614 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:32:01.594 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:32:01.621 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:32:21.787 00:00:11.795 TCP 12.102.0.1:51282 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:33:23.619 00:00:11.809 TCP 12.102.0.1:39412 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:34:25.466 00:00:11.802 TCP 12.102.0.1:58838 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:35:27.302 00:00:11.803 TCP 12.102.0.1:38724 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:31:31.223 00:06:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:36:29.143 00:00:11.821 TCP 12.102.0.1:53432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:37:01.719 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:37:01.704 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:37:01.795 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:37:01.913 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:37:01.742 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:37:01.788 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:37:01.750 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:37:31.002 00:00:11.761 TCP 12.102.0.1:45112 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:33:31.223 00:06:00.092 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 10:38:32.798 00:00:11.798 TCP 12.102.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:39:34.635 00:00:11.805 TCP 12.102.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:40:36.478 00:00:11.803 TCP 12.102.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:41:38.324 00:00:11.759 TCP 12.102.0.1:43132 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:42:02.085 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:42:02.062 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:42:01.908 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:42:01.984 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:42:01.810 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:42:01.846 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:42:01.962 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:42:40.125 00:00:11.808 TCP 12.102.0.1:35520 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:38:31.227 00:06:00.087 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:43:41.969 00:00:11.796 TCP 12.102.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:44:43.805 00:00:11.805 TCP 12.102.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:40:31.233 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 10:45:45.648 00:00:11.828 TCP 12.102.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:47:01.725 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:47:02.086 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:47:02.015 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:46:47.511 00:00:11.800 TCP 12.102.0.1:34316 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:47:02.026 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:47:02.069 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:47:01.951 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:47:02.006 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:47:49.346 00:00:11.805 TCP 12.102.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:48:51.186 00:00:11.806 TCP 12.102.0.1:50320 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:49:53.038 00:00:11.810 TCP 12.102.0.1:55782 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:45:31.237 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:50:54.880 00:00:11.803 TCP 12.102.0.1:55910 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:52:01.864 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:52:02.233 00:00:00.038 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:52:02.118 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:52:01.851 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:52:02.322 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:52:02.156 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:52:01.828 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:51:56.733 00:00:11.802 TCP 12.102.0.1:42642 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:47:31.234 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 10:52:58.571 00:00:11.798 TCP 12.102.0.1:57748 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:54:00.411 00:00:11.760 TCP 12.102.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:55:02.209 00:00:11.825 TCP 12.102.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:56:04.083 00:00:11.846 TCP 12.102.0.1:56918 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:57:01.979 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 10:57:02.124 00:00:00.050 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 10:57:02.028 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 10:57:02.154 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 10:57:02.004 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 10:57:02.279 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 10:57:02.205 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 10:57:05.968 00:00:11.803 TCP 12.102.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:52:31.238 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 10:58:07.805 00:00:11.804 TCP 12.102.0.1:52668 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-09-12 09:56:31 - 2025-09-12 10:58:31 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0034s User: 0.0011s Wall: 0.0019s flows/second: 85160.8 Runtime: 0.0019s