Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 19:59:42.631 00:00:11.795 TCP 12.102.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:00:44.466 00:00:11.798 TCP 12.102.0.1:60126 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:01:46.305 00:00:11.805 TCP 12.102.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:02:12.846 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:02:13.062 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:02:12.967 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:02:13.040 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:02:13.037 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:02:13.053 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:02:13.018 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:02:48.147 00:00:11.800 TCP 12.102.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:58:31.558 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 20:03:49.983 00:00:11.803 TCP 12.102.0.1:39786 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:04:51.823 00:00:11.812 TCP 12.102.0.1:58300 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:00:31.556 00:06:00.065 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 20:05:53.676 00:00:11.804 TCP 12.102.0.1:49468 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:06:55.526 00:00:11.809 TCP 12.102.0.1:46970 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:07:13.010 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:07:12.893 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:07:13.670 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:07:13.577 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:07:12.976 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:07:13.020 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:07:13.554 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:07:57.384 00:00:11.818 TCP 12.102.0.1:48536 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:08:59.251 00:00:11.804 TCP 12.102.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:10:01.092 00:00:11.800 TCP 12.102.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:05:31.559 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 20:11:02.935 00:00:11.827 TCP 12.102.0.1:37058 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:12:13.323 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:12:13.099 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:12:13.347 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:12:13.271 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:12:13.347 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:12:13.385 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:12:13.230 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:12:04.796 00:00:12.109 TCP 12.102.0.1:34786 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:07:31.557 00:06:00.068 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 20:13:06.947 00:00:11.802 TCP 12.102.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:14:08.787 00:00:12.235 TCP 12.102.0.1:49846 -> 1.101.0.1:3000 15 1926 1 2025-09-12 20:15:11.082 00:00:11.803 TCP 12.102.0.1:47310 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:16:12.948 00:00:11.803 TCP 12.102.0.1:41468 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:17:12.993 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:17:13.462 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:17:13.398 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:17:13.455 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:17:13.018 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:17:13.187 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:17:13.444 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:17:14.791 00:00:11.801 TCP 12.102.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:12:31.560 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 20:18:16.634 00:00:11.773 TCP 12.102.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:14:31.564 00:06:00.068 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 20:19:18.446 00:00:12.254 TCP 12.102.0.1:49460 -> 1.101.0.1:3000 15 1926 1 2025-09-12 20:20:20.729 00:00:11.806 TCP 12.102.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:21:22.571 00:00:11.763 TCP 12.102.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:22:13.454 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:22:13.507 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:22:13.635 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:22:13.253 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:22:13.477 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:22:13.606 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:22:13.604 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:22:24.372 00:00:11.803 TCP 12.102.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:23:26.210 00:00:11.810 TCP 12.102.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:19:31.566 00:06:00.064 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 20:24:28.073 00:00:11.798 TCP 12.102.0.1:57476 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:25:29.905 00:00:11.820 TCP 12.102.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:21:31.562 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 20:26:31.757 00:00:11.798 TCP 12.102.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:27:13.651 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:27:13.765 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:27:13.686 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:27:13.378 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:27:13.590 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:27:13.626 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:27:13.356 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:27:33.589 00:00:11.803 TCP 12.102.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:28:35.430 00:00:11.798 TCP 12.102.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:29:37.269 00:00:11.793 TCP 12.102.0.1:41244 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:30:39.099 00:00:11.809 TCP 12.102.0.1:57464 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:26:31.565 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 20:31:40.938 00:00:11.811 TCP 12.102.0.1:43110 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:32:13.674 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:32:13.575 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:32:13.456 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:32:13.690 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:32:13.696 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:32:13.579 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:32:13.557 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:32:42.784 00:00:11.802 TCP 12.102.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:28:31.563 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 20:33:44.623 00:00:11.761 TCP 12.102.0.1:33768 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:34:46.421 00:00:11.803 TCP 12.102.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:35:48.265 00:00:11.798 TCP 12.102.0.1:39202 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:36:50.102 00:00:11.777 TCP 12.102.0.1:51094 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:37:13.705 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:37:13.871 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:37:13.731 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:37:13.851 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:37:13.727 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:37:13.854 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:37:13.738 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:37:51.918 00:00:11.820 TCP 12.102.0.1:43234 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:33:31.565 00:06:00.068 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 20:38:53.778 00:00:11.817 TCP 12.102.0.1:35082 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:39:55.623 00:00:11.800 TCP 12.102.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:35:31.564 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 20:40:57.462 00:00:11.801 TCP 12.102.0.1:45566 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:42:13.625 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:41:59.306 00:00:11.768 TCP 12.102.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:42:13.794 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:42:13.915 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:42:13.890 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:42:13.930 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:42:13.893 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:42:14.075 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:43:01.114 00:00:11.766 TCP 12.102.0.1:56752 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:44:02.916 00:00:11.877 TCP 12.102.0.1:41014 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:45:04.835 00:00:11.799 TCP 12.102.0.1:50430 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:40:31.575 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 20:46:06.677 00:00:14.111 TCP 12.102.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:47:13.915 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:47:13.864 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:47:13.939 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:47:14.111 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:47:13.994 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:47:14.113 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:47:14.101 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:47:10.817 00:00:11.799 TCP 12.102.0.1:41968 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:42:31.573 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 20:48:12.657 00:00:11.825 TCP 12.102.0.1:40470 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:49:14.519 00:00:11.809 TCP 12.102.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:50:16.370 00:00:11.822 TCP 12.102.0.1:42790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:51:18.240 00:00:11.806 TCP 12.102.0.1:49594 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:52:13.294 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:52:13.403 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:52:13.382 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:52:13.449 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:52:13.317 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:52:13.402 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:52:13.349 00:00:00.015 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:47:31.577 00:06:00.068 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-12 20:52:20.086 00:00:13.352 TCP 12.102.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:53:23.477 00:00:11.803 TCP 12.102.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:49:31.574 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-12 20:54:25.325 00:00:11.767 TCP 12.102.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:55:27.121 00:00:11.799 TCP 12.102.0.1:47264 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:56:28.961 00:00:11.757 TCP 12.102.0.1:43304 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:57:14.674 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-12 20:57:14.547 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-12 20:57:14.305 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-12 20:57:14.315 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:57:14.327 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-12 20:57:14.472 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-12 20:57:14.448 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-12 20:57:30.756 00:00:11.813 TCP 12.102.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:58:32.610 00:00:11.765 TCP 12.102.0.1:50536 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 272, avg pps: 0, avg bpp: 109 Time window: 2025-09-12 19:58:31 - 2025-09-12 20:58:44 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0031s User: 0.0024s Wall: 0.0021s flows/second: 73592.5 Runtime: 0.0022s