Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 07:59:41.785 00:00:11.805 TCP 12.102.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:00:43.631 00:00:11.796 TCP 12.102.0.1:56778 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:01:45.466 00:00:11.810 TCP 12.102.0.1:45780 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:02:27.639 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:02:27.622 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:02:27.609 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:02:27.586 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:02:27.610 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:02:27.670 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:02:27.563 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:02:47.309 00:00:11.798 TCP 12.102.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:03:49.146 00:00:11.811 TCP 12.102.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:00:31.950 00:05:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:00:31.953 00:05:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:04:50.993 00:00:11.798 TCP 12.102.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:05:52.831 00:00:11.799 TCP 12.102.0.1:42626 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:06:54.670 00:00:11.807 TCP 12.102.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:07:27.690 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:07:27.769 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:07:27.450 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:07:27.412 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:07:27.714 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:07:27.596 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:07:27.392 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:07:56.512 00:00:11.854 TCP 12.102.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:08:58.411 00:00:11.761 TCP 12.102.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:10:00.211 00:00:11.767 TCP 12.102.0.1:42992 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:06:31.952 00:05:00.098 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:06:31.953 00:05:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:11:02.021 00:00:11.804 TCP 12.102.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:12:03.859 00:00:11.806 TCP 12.102.0.1:58742 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:12:27.853 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:12:27.754 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:12:27.623 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:12:27.860 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:12:27.630 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:12:27.761 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:12:27.600 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:13:05.708 00:00:11.805 TCP 12.102.0.1:55228 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:14:07.556 00:00:11.801 TCP 12.102.0.1:41162 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:15:09.396 00:00:11.797 TCP 12.102.0.1:36006 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:16:11.230 00:00:11.804 TCP 12.102.0.1:53800 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:12:31.955 00:05:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:12:31.953 00:05:00.102 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:17:27.822 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:17:13.080 00:00:11.756 TCP 12.102.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:17:27.903 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:17:27.945 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:17:27.953 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:17:28.022 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:17:27.901 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:17:27.929 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:18:14.875 00:00:11.798 TCP 12.102.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:19:16.719 00:00:11.800 TCP 12.102.0.1:43358 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:20:18.557 00:00:11.804 TCP 12.102.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:21:20.403 00:00:11.801 TCP 12.102.0.1:43088 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:22:27.802 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:22:28.058 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:22:27.895 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:22:28.131 00:00:00.016 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:22:27.826 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:22:28.143 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:22:27.951 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:18:31.956 00:05:00.100 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:18:31.954 00:05:00.104 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:22:22.244 00:00:11.804 TCP 12.102.0.1:40026 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:23:24.085 00:00:11.802 TCP 12.102.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:24:25.920 00:00:11.830 TCP 12.102.0.1:56076 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:25:27.792 00:00:11.806 TCP 12.102.0.1:36846 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:26:29.640 00:00:11.774 TCP 12.102.0.1:50714 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:27:27.894 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:27:27.948 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:27:28.006 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:27:28.041 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:27:27.916 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:27:27.960 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:27:27.909 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:27:31.450 00:00:11.803 TCP 12.102.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:24:31.958 00:05:00.099 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:24:31.954 00:05:00.105 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:28:33.290 00:00:11.806 TCP 12.102.0.1:40558 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:29:35.128 00:00:11.800 TCP 12.102.0.1:60490 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:30:36.966 00:00:11.803 TCP 12.102.0.1:48200 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:31:38.807 00:00:11.802 TCP 12.102.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:32:28.333 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:32:27.774 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:32:28.178 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:32:28.303 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:32:28.356 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:32:27.969 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:32:27.744 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:32:40.648 00:00:11.798 TCP 12.102.0.1:59828 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:33:42.481 00:00:11.798 TCP 12.102.0.1:43742 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:30:31.957 00:05:00.113 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:30:31.959 00:05:00.107 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:34:44.317 00:00:11.799 TCP 12.102.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:35:46.152 00:00:11.806 TCP 12.102.0.1:41392 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:36:47.995 00:00:11.798 TCP 12.102.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:37:28.280 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:37:28.345 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:37:28.096 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:37:28.236 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:37:28.179 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:37:28.198 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:37:28.214 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:37:49.827 00:00:11.799 TCP 12.102.0.1:55770 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:38:51.665 00:00:11.810 TCP 12.102.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:39:53.512 00:00:11.801 TCP 12.102.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:36:31.962 00:05:00.109 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:36:31.964 00:05:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:40:55.353 00:00:11.805 TCP 12.102.0.1:44004 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:41:57.191 00:00:11.803 TCP 12.102.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:42:28.219 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:42:28.409 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:42:28.165 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:42:28.498 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:42:28.242 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:42:28.323 00:00:00.055 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:42:28.379 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:42:59.057 00:00:11.816 TCP 12.102.0.1:52058 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:44:00.911 00:00:11.826 TCP 12.102.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:45:02.771 00:00:11.802 TCP 12.102.0.1:56062 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:46:04.608 00:00:11.813 TCP 12.102.0.1:37964 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:42:31.966 00:05:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:42:31.968 00:05:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:47:06.458 00:00:11.812 TCP 12.102.0.1:52988 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:47:28.306 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:47:28.330 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:47:28.236 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:47:28.376 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:47:28.445 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:47:28.387 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:47:28.352 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:48:08.303 00:00:11.801 TCP 12.102.0.1:48986 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:49:10.145 00:00:11.871 TCP 12.102.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:50:12.080 00:00:11.817 TCP 12.102.0.1:45144 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:51:13.935 00:00:11.814 TCP 12.102.0.1:32938 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:52:28.325 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:52:15.784 00:00:11.796 TCP 12.102.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:52:28.469 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:52:28.426 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:52:28.611 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:52:28.347 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:52:28.354 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:52:28.447 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:48:31.969 00:05:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:48:31.967 00:05:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:53:17.622 00:00:11.806 TCP 12.102.0.1:33956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:54:19.462 00:00:11.800 TCP 12.102.0.1:38392 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:55:21.305 00:00:11.801 TCP 12.102.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:56:23.145 00:00:11.812 TCP 12.102.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:57:28.819 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 08:57:28.796 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 08:57:28.798 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:57:28.831 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 08:57:28.843 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 08:57:28.504 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 08:57:28.773 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 08:57:24.997 00:00:11.798 TCP 12.102.0.1:48160 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:54:31.977 00:05:00.099 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-13 08:54:31.979 00:05:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-09-13 08:58:26.834 00:00:11.806 TCP 12.102.0.1:35342 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123334, total packets: 1130, avg bps: 274, avg pps: 0, avg bpp: 109 Time window: 2025-09-13 07:59:41 - 2025-09-13 08:59:32 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0028s User: 0.0019s Wall: 0.0025s flows/second: 66097.0 Runtime: 0.0025s