Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 18:58:52.417 00:00:11.804 TCP 12.102.0.1:49488 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:59:54.258 00:00:11.809 TCP 12.102.0.1:41084 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:55:31.578 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-12 19:00:56.099 00:00:11.811 TCP 12.102.0.1:50396 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:02:11.823 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:02:12.072 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:01:57.941 00:00:11.859 TCP 12.102.0.1:58818 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:02:11.958 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:02:11.873 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:02:11.846 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:02:11.816 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:02:11.920 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 18:57:31.538 00:06:00.051 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:02:59.840 00:00:11.805 TCP 12.102.0.1:43716 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:04:01.683 00:00:11.801 TCP 12.102.0.1:41328 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:05:03.528 00:00:11.801 TCP 12.102.0.1:42830 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:06:05.374 00:00:11.767 TCP 12.102.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:07:11.696 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:07:12.115 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:07:12.185 00:00:00.045 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:07:12.110 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:07:12.163 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:07:11.790 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:07:12.087 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:07:07.173 00:00:11.820 TCP 12.102.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:02:31.581 00:06:00.007 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 19:08:09.041 00:00:11.806 TCP 12.102.0.1:36236 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:09:10.889 00:00:11.806 TCP 12.102.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:04:31.538 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:10:12.733 00:00:11.806 TCP 12.102.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:11:14.577 00:00:12.358 TCP 12.102.0.1:54190 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:12:12.217 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:12:12.001 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:12:12.238 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:12:12.055 00:00:00.028 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:12:12.182 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:12:12.142 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:12:12.033 00:00:00.028 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:12:16.975 00:00:11.801 TCP 12.102.0.1:55978 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:13:18.814 00:00:11.853 TCP 12.102.0.1:59164 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:09:31.543 00:06:00.046 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 19:14:20.700 00:00:11.803 TCP 12.102.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:15:22.542 00:00:11.800 TCP 12.102.0.1:38364 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:11:31.540 00:06:00.052 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:16:24.383 00:00:11.813 TCP 12.102.0.1:55722 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:17:12.077 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:17:12.371 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:17:12.213 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:17:12.248 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:17:12.099 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:17:12.112 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:17:11.978 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:17:26.232 00:00:11.803 TCP 12.102.0.1:59200 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:18:28.081 00:00:11.801 TCP 12.102.0.1:33466 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:19:29.918 00:00:11.827 TCP 12.102.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:20:31.777 00:00:11.800 TCP 12.102.0.1:58004 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:16:31.543 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 19:21:33.617 00:00:11.799 TCP 12.102.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:22:12.236 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:22:12.299 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:22:12.322 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:22:12.339 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:22:12.260 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:22:12.191 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:22:12.263 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:22:35.454 00:00:12.335 TCP 12.102.0.1:55750 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:18:31.540 00:06:00.060 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:23:37.827 00:00:11.799 TCP 12.102.0.1:53608 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:24:39.664 00:00:11.829 TCP 12.102.0.1:53202 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:25:41.528 00:00:11.814 TCP 12.102.0.1:37682 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:26:43.383 00:00:11.807 TCP 12.102.0.1:59962 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:27:12.348 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:27:12.380 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:27:12.608 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:27:12.301 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:27:12.238 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:27:12.278 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:27:12.358 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:27:45.231 00:00:11.801 TCP 12.102.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:23:31.544 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 19:28:47.077 00:00:11.802 TCP 12.102.0.1:52342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:29:48.924 00:00:11.819 TCP 12.102.0.1:60382 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:25:31.541 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:30:50.785 00:00:11.801 TCP 12.102.0.1:55492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:31:52.624 00:00:11.850 TCP 12.102.0.1:46648 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:32:12.480 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:32:12.643 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:32:12.624 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:32:12.433 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:32:12.368 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:32:12.448 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:32:12.412 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:32:54.517 00:00:11.760 TCP 12.102.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:33:56.317 00:00:12.159 TCP 12.102.0.1:49830 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:34:58.515 00:00:11.849 TCP 12.102.0.1:35062 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:30:31.547 00:06:00.053 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 19:36:00.410 00:00:11.841 TCP 12.102.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:37:12.998 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:37:12.576 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:37:12.883 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:37:12.719 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:37:12.725 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:37:12.705 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:37:12.697 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:37:02.292 00:00:11.806 TCP 12.102.0.1:47184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:32:31.545 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:38:04.130 00:00:11.798 TCP 12.102.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:39:05.969 00:00:11.761 TCP 12.102.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:40:07.770 00:00:11.809 TCP 12.102.0.1:57634 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:41:09.617 00:00:11.804 TCP 12.102.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:42:12.559 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:42:12.791 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:42:12.677 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:42:12.612 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:42:12.478 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:42:12.795 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:42:12.588 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:42:11.461 00:00:11.754 TCP 12.102.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:37:31.549 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 19:43:13.254 00:00:11.797 TCP 12.102.0.1:33890 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:44:15.093 00:00:11.796 TCP 12.102.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:39:31.548 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:45:16.927 00:00:11.819 TCP 12.102.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:46:18.786 00:00:11.800 TCP 12.102.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:47:13.180 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:47:13.086 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:47:13.058 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:47:13.047 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:47:13.203 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:47:12.971 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:47:12.816 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:47:20.627 00:00:11.802 TCP 12.102.0.1:35548 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:48:22.464 00:00:11.803 TCP 12.102.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:44:31.551 00:06:00.051 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 19:49:24.309 00:00:11.802 TCP 12.102.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:50:26.148 00:00:11.804 TCP 12.102.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:46:31.551 00:06:00.056 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:51:27.990 00:00:11.799 TCP 12.102.0.1:49982 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:52:12.898 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:52:13.012 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:52:12.926 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:52:12.794 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:52:12.922 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:52:12.930 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:52:12.772 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:52:29.832 00:00:11.828 TCP 12.102.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:53:31.697 00:00:11.810 TCP 12.102.0.1:48300 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:54:33.544 00:00:11.761 TCP 12.102.0.1:47756 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:55:35.345 00:00:11.763 TCP 12.102.0.1:46940 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:51:31.554 00:06:00.062 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 19:56:37.150 00:00:11.805 TCP 12.102.0.1:39416 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:57:13.339 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 19:57:13.400 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 19:57:13.563 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:57:13.498 00:00:00.018 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 19:57:13.362 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 19:57:13.491 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 19:57:13.290 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 19:57:38.994 00:00:11.797 TCP 12.102.0.1:58754 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:53:31.553 00:06:00.067 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 19:58:40.829 00:00:11.762 TCP 12.102.0.1:50878 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 125215, total packets: 1146, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-09-12 18:55:31 - 2025-09-12 19:59:31 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0036s User: 0.0009s Wall: 0.0019s flows/second: 83461.0 Runtime: 0.0019s