Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 11:58:53.124 00:00:11.810 TCP 12.102.0.1:55194 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:59:54.971 00:00:11.801 TCP 12.102.0.1:39524 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:00:56.809 00:00:11.807 TCP 12.102.0.1:34642 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:56:32.098 00:06:00.071 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:01:58.654 00:00:11.817 TCP 12.102.0.1:55286 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:02:32.595 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:02:32.723 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.615 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.618 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.701 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.399 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 11:57:32.101 00:06:00.066 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-13 12:02:32.599 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:03:00.516 00:00:11.809 TCP 12.102.0.1:58576 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:04:02.369 00:00:12.323 TCP 12.102.0.1:38524 -> 1.101.0.1:3000 15 1926 1 2025-09-13 12:05:04.736 00:00:11.759 TCP 12.102.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:06:06.533 00:00:11.854 TCP 12.102.0.1:51450 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:07:08.430 00:00:11.842 TCP 12.102.0.1:44596 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:07:32.127 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:07:32.377 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:07:32.247 00:00:00.039 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:07:32.519 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:07:32.150 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:07:32.465 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:07:32.447 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:08:10.279 00:00:11.818 TCP 12.102.0.1:36380 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:03:32.100 00:06:00.069 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:09:12.132 00:00:11.799 TCP 12.102.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:04:32.102 00:06:00.065 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-13 12:10:13.967 00:00:11.850 TCP 12.102.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:11:15.857 00:00:11.818 TCP 12.102.0.1:36156 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:12:32.187 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.429 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.526 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.562 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.608 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.524 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:12:17.713 00:00:11.800 TCP 12.102.0.1:59424 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:12:32.540 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:13:19.545 00:00:11.797 TCP 12.102.0.1:41550 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:14:21.381 00:00:11.811 TCP 12.102.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:10:32.101 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:15:23.229 00:00:11.833 TCP 12.102.0.1:54488 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:11:32.104 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-13 12:16:25.102 00:00:14.507 TCP 12.102.0.1:51894 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:17:33.221 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:17:33.149 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:17:33.534 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:17:32.695 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:17:33.085 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:17:32.836 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:17:32.673 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:17:29.652 00:00:11.810 TCP 12.102.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:18:31.504 00:00:11.811 TCP 12.102.0.1:46498 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:19:33.358 00:00:12.269 TCP 12.102.0.1:44586 -> 1.101.0.1:3000 15 1926 1 2025-09-13 12:20:35.675 00:00:11.811 TCP 12.102.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:21:37.534 00:00:11.813 TCP 12.102.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:22:32.537 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.861 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.907 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.782 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.759 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.874 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.760 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:17:32.103 00:06:00.072 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:22:39.386 00:00:11.814 TCP 12.102.0.1:37346 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:18:32.106 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-13 12:23:41.244 00:00:11.779 TCP 12.102.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:24:43.081 00:00:11.768 TCP 12.102.0.1:44756 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:25:44.885 00:00:11.859 TCP 12.102.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:26:46.787 00:00:11.797 TCP 12.102.0.1:53076 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:27:32.862 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:27:32.613 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:27:32.884 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:27:32.958 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:27:32.885 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:27:32.816 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:27:32.677 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:27:48.624 00:00:11.762 TCP 12.102.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:28:50.419 00:00:11.805 TCP 12.102.0.1:55506 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:24:32.116 00:06:00.063 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:29:52.261 00:00:11.831 TCP 12.102.0.1:51410 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:25:32.117 00:06:00.058 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-13 12:30:54.130 00:00:12.122 TCP 12.102.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:31:56.290 00:00:11.814 TCP 12.102.0.1:60368 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:32:33.276 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:32:33.526 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:32:33.156 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:32:33.537 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:32:32.951 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:32:32.890 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:32:33.132 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:32:58.131 00:00:11.796 TCP 12.102.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:33:59.965 00:00:11.803 TCP 12.102.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:35:01.810 00:00:11.811 TCP 12.102.0.1:57360 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:36:03.667 00:00:11.808 TCP 12.102.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:31:32.119 00:06:00.065 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:37:05.518 00:00:11.810 TCP 12.102.0.1:34050 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:32:32.119 00:06:00.061 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-13 12:37:32.928 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:37:32.919 00:00:00.031 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:37:33.027 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:37:32.948 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:37:33.090 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:37:33.186 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:37:32.925 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:38:07.377 00:00:11.772 TCP 12.102.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:39:09.192 00:00:11.802 TCP 12.102.0.1:34114 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:40:11.065 00:00:11.815 TCP 12.102.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:41:12.917 00:00:11.827 TCP 12.102.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:42:14.779 00:00:11.808 TCP 12.102.0.1:50906 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:42:33.209 00:00:00.060 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.193 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.114 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.317 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.135 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.259 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.237 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:43:16.628 00:00:11.819 TCP 12.102.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:38:32.126 00:06:00.058 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:39:32.128 00:06:00.053 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-13 12:44:18.485 00:00:11.829 TCP 12.102.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:45:20.355 00:00:11.783 TCP 12.102.0.1:59848 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:46:22.176 00:00:11.814 TCP 12.102.0.1:59866 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:47:33.371 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.335 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.138 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.201 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.156 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.309 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.177 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:47:24.059 00:00:11.802 TCP 12.102.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:48:25.901 00:00:11.802 TCP 12.102.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:49:27.740 00:00:11.797 TCP 12.102.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:45:32.128 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:50:29.576 00:00:11.803 TCP 12.102.0.1:58920 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:46:32.130 00:06:00.053 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-13 12:51:31.415 00:00:11.796 TCP 12.102.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:52:33.341 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:52:33.257 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.443 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.293 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.365 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.429 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.480 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.250 00:00:11.817 TCP 12.102.0.1:48058 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:53:35.103 00:00:11.804 TCP 12.102.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:54:36.953 00:00:12.103 TCP 12.102.0.1:48936 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:55:39.097 00:00:11.760 TCP 12.102.0.1:60334 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:56:40.894 00:00:11.833 TCP 12.102.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:57:33.201 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-13 12:52:32.128 00:06:00.065 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-13 12:57:33.443 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.593 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.469 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.227 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.442 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.595 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-13 12:57:42.738 00:00:11.762 TCP 12.102.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:53:32.132 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 264, avg pps: 0, avg bpp: 108 Time window: 2025-09-13 11:56:32 - 2025-09-13 12:59:32 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0033s User: 0.0016s Wall: 0.0025s flows/second: 63370.0 Runtime: 0.0025s