Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 12:58:52.381 00:00:11.803 TCP 12.102.0.1:60996 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:59:54.221 00:00:11.804 TCP 12.102.0.1:43630 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:00:56.087 00:00:11.800 TCP 12.102.0.1:37260 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:02:04.433 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:02:04.732 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:02:04.564 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:02:04.670 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:02:04.456 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:02:04.665 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:02:04.704 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:01:57.925 00:00:11.825 TCP 12.102.0.1:57424 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:02:59.789 00:00:11.803 TCP 12.102.0.1:41554 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:58:31.319 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 13:04:01.630 00:00:11.777 TCP 12.102.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:05:03.443 00:00:11.803 TCP 12.102.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:00:31.316 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 13:06:05.282 00:00:11.801 TCP 12.102.0.1:33142 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:07:04.652 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:07:04.934 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:07:04.664 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:07:04.676 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:07:04.654 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:07:04.613 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:07:04.675 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:07:07.122 00:00:11.816 TCP 12.102.0.1:39970 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:08:08.976 00:00:11.804 TCP 12.102.0.1:57432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:09:10.810 00:00:11.813 TCP 12.102.0.1:39918 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:10:12.657 00:00:11.816 TCP 12.102.0.1:56212 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:05:31.319 00:06:00.059 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 13:11:14.511 00:00:11.801 TCP 12.102.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:12:04.772 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:12:05.019 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:12:04.964 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:12:04.818 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:12:04.958 00:00:00.029 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:12:04.636 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:12:04.798 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:12:16.352 00:00:11.798 TCP 12.102.0.1:36164 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:07:31.319 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 13:13:18.187 00:00:11.803 TCP 12.102.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:14:20.031 00:00:11.799 TCP 12.102.0.1:37298 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:15:21.882 00:00:11.812 TCP 12.102.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:16:23.732 00:00:11.809 TCP 12.102.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:17:04.868 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:17:05.289 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:17:05.216 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:17:05.164 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:17:05.287 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:17:05.048 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:17:05.194 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:12:31.325 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 13:17:25.578 00:00:11.798 TCP 12.102.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:18:27.416 00:00:11.808 TCP 12.102.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:14:31.322 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 13:19:29.260 00:00:11.801 TCP 12.102.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:20:31.099 00:00:11.822 TCP 12.102.0.1:60698 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:21:32.963 00:00:11.801 TCP 12.102.0.1:59034 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:22:05.273 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:22:05.232 00:00:00.045 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:22:05.302 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:22:05.232 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:22:05.412 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:22:04.987 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:22:05.210 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:22:34.801 00:00:11.801 TCP 12.102.0.1:58756 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:23:36.648 00:00:11.837 TCP 12.102.0.1:46002 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:19:31.330 00:06:00.050 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 13:24:38.523 00:00:11.818 TCP 12.102.0.1:42758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:25:40.372 00:00:11.914 TCP 12.102.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:21:31.329 00:06:00.054 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 13:26:42.322 00:00:11.776 TCP 12.102.0.1:36682 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:27:05.149 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:27:05.272 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:27:05.273 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:27:05.299 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:27:05.171 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:27:05.176 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:27:05.137 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:27:44.140 00:00:11.824 TCP 12.102.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:28:46.006 00:00:11.794 TCP 12.102.0.1:32894 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:29:47.838 00:00:11.810 TCP 12.102.0.1:50596 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:30:49.684 00:00:11.806 TCP 12.102.0.1:54870 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:26:31.334 00:06:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 13:31:51.536 00:00:12.349 TCP 12.102.0.1:49190 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:32:05.279 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:32:05.406 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:32:05.233 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:32:05.303 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:32:05.444 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:32:05.176 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:32:05.281 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:32:53.918 00:00:11.819 TCP 12.102.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:28:31.332 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 13:33:55.776 00:00:11.768 TCP 12.102.0.1:38708 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:34:57.587 00:00:11.775 TCP 12.102.0.1:37562 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:35:59.400 00:00:11.809 TCP 12.102.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:37:05.413 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:37:05.382 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:37:05.478 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:37:05.398 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:37:05.435 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:37:05.310 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:37:05.279 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:37:01.237 00:00:11.800 TCP 12.102.0.1:34986 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:38:03.081 00:00:11.801 TCP 12.102.0.1:44198 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:33:31.335 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 13:39:04.918 00:00:11.837 TCP 12.102.0.1:52378 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:40:06.797 00:00:11.817 TCP 12.102.0.1:34102 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:35:31.333 00:06:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 13:41:08.648 00:00:11.810 TCP 12.102.0.1:45522 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:42:05.172 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:42:05.462 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:42:05.599 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:42:05.539 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:42:05.486 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:42:05.371 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:42:05.517 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:42:10.490 00:00:11.775 TCP 12.102.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:43:12.304 00:00:11.852 TCP 12.102.0.1:55050 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:44:14.198 00:00:11.761 TCP 12.102.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:45:15.998 00:00:11.802 TCP 12.102.0.1:49630 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:40:31.336 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 13:46:17.838 00:00:11.813 TCP 12.102.0.1:59260 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:47:05.662 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:47:05.659 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:47:05.623 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:47:05.614 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:47:05.756 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:47:05.721 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:47:05.592 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:47:19.692 00:00:11.796 TCP 12.102.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:42:31.333 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 13:48:21.525 00:00:11.798 TCP 12.102.0.1:44772 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:49:23.363 00:00:12.189 TCP 12.102.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:50:25.590 00:00:11.820 TCP 12.102.0.1:54436 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:51:27.449 00:00:11.806 TCP 12.102.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:52:05.749 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:52:05.917 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:52:05.804 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:52:05.990 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:52:05.773 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:52:05.719 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:52:05.884 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:47:31.338 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 13:52:29.292 00:00:12.208 TCP 12.102.0.1:51190 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:53:31.532 00:00:11.858 TCP 12.102.0.1:36300 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:49:31.336 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 13:54:33.427 00:00:11.785 TCP 12.102.0.1:45452 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:55:35.249 00:00:11.819 TCP 12.102.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:56:37.104 00:00:11.802 TCP 12.102.0.1:41652 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:57:05.666 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 13:57:05.863 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 13:57:05.719 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:57:05.738 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 13:57:05.689 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 13:57:05.758 00:00:00.017 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 13:57:05.683 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 13:57:38.941 00:00:11.816 TCP 12.102.0.1:39194 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:58:40.804 00:00:12.237 TCP 12.102.0.1:35516 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 159, total bytes: 124276, total packets: 1129, avg bps: 274, avg pps: 0, avg bpp: 110 Time window: 2025-09-12 12:58:31 - 2025-09-12 13:58:53 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0028s User: 0.0019s Wall: 0.0025s flows/second: 62997.8 Runtime: 0.0026s