Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 01:59:38.321 00:00:11.808 TCP 12.102.0.1:49270 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:00:40.164 00:00:11.809 TCP 12.102.0.1:35766 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:56:32.495 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:01:42.023 00:00:11.806 TCP 12.102.0.1:42272 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:57:32.499 00:06:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:02:49.220 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.281 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.305 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.308 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.438 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.323 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.286 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:02:43.865 00:00:11.758 TCP 12.102.0.1:41444 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:03:45.659 00:00:11.811 TCP 12.102.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:04:47.507 00:00:11.801 TCP 12.102.0.1:46394 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:05:49.346 00:00:11.808 TCP 12.102.0.1:33124 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:06:51.195 00:00:11.802 TCP 12.102.0.1:43632 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:07:49.126 00:00:00.048 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.207 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.275 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.283 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.346 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.115 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.260 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:07:53.066 00:00:11.806 TCP 12.102.0.1:40418 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:03:32.498 00:06:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:08:54.914 00:00:12.281 TCP 12.102.0.1:50824 -> 1.101.0.1:3000 15 1926 1 2025-09-14 02:04:32.501 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:09:57.235 00:00:11.821 TCP 12.102.0.1:39446 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:10:59.096 00:00:11.796 TCP 12.102.0.1:35464 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:12:00.935 00:00:11.806 TCP 12.102.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:12:49.488 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:12:49.605 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.308 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.540 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.510 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.589 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.458 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:13:02.781 00:00:19.211 TCP 12.102.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:14:12.038 00:00:11.813 TCP 12.102.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:15:13.890 00:00:11.802 TCP 12.102.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:10:32.499 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:16:15.731 00:00:12.291 TCP 12.102.0.1:45456 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:11:32.503 00:06:00.076 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:17:18.078 00:00:11.806 TCP 12.102.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:17:49.404 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.370 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.562 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.499 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.398 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.372 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.477 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:18:19.926 00:00:11.820 TCP 12.102.0.1:54714 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:19:21.780 00:00:11.810 TCP 12.102.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:20:23.633 00:00:11.805 TCP 12.102.0.1:45556 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:21:25.475 00:00:11.806 TCP 12.102.0.1:34464 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:17:32.501 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:22:27.321 00:00:11.862 TCP 12.102.0.1:45414 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:22:49.566 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.571 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.640 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.520 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.567 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.527 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.497 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:18:32.503 00:06:00.077 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:23:29.215 00:00:11.800 TCP 12.102.0.1:52422 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:24:31.085 00:00:12.948 TCP 12.102.0.1:41780 -> 1.101.0.1:3000 15 1926 1 2025-09-14 02:25:34.078 00:00:11.800 TCP 12.102.0.1:35172 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:26:35.920 00:00:11.782 TCP 12.102.0.1:40448 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:27:49.556 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:27:49.770 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.611 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.605 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.579 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.579 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.568 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:27:37.742 00:00:11.806 TCP 12.102.0.1:55320 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:28:39.583 00:00:11.821 TCP 12.102.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:24:32.502 00:06:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:29:41.444 00:00:11.804 TCP 12.102.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:25:32.504 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:30:43.285 00:00:11.801 TCP 12.102.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:31:45.127 00:00:11.803 TCP 12.102.0.1:48580 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:32:49.860 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.894 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.717 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.812 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.792 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.565 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.789 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:32:46.972 00:00:11.835 TCP 12.102.0.1:48498 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:33:48.840 00:00:11.852 TCP 12.102.0.1:47162 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:34:50.733 00:00:11.772 TCP 12.102.0.1:48976 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:35:52.544 00:00:11.794 TCP 12.102.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:31:32.503 00:06:00.108 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:36:54.370 00:00:11.779 TCP 12.102.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:32:32.505 00:06:00.103 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:37:49.616 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:37:49.789 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:37:49.734 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:37:49.688 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:37:50.004 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:37:49.879 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:37:49.666 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:37:56.186 00:00:11.801 TCP 12.102.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:38:58.031 00:00:11.774 TCP 12.102.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:39:59.838 00:00:11.803 TCP 12.102.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:41:01.681 00:00:11.802 TCP 12.102.0.1:54980 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:42:03.518 00:00:11.799 TCP 12.102.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:42:49.856 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:42:49.837 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:42:50.055 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:42:49.751 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:42:50.132 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:42:49.932 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:42:49.729 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:43:05.353 00:00:11.811 TCP 12.102.0.1:38698 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:38:32.507 00:06:00.105 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:44:07.200 00:00:12.328 TCP 12.102.0.1:43116 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:39:32.510 00:06:00.100 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:45:09.570 00:00:11.803 TCP 12.102.0.1:35166 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:46:11.413 00:00:11.768 TCP 12.102.0.1:48000 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:47:13.220 00:00:12.268 TCP 12.102.0.1:38662 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:47:50.290 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:47:50.398 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.366 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.435 00:00:00.018 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.312 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.484 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.460 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:48:15.527 00:00:12.203 TCP 12.102.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:49:17.769 00:00:11.807 TCP 12.102.0.1:38214 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:45:32.510 00:06:00.107 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:50:19.617 00:00:11.806 TCP 12.102.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:46:32.515 00:06:00.101 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:51:21.464 00:00:11.852 TCP 12.102.0.1:58654 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:52:23.356 00:00:11.784 TCP 12.102.0.1:56528 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:52:49.986 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:52:50.287 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:52:50.229 00:00:00.050 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:52:50.143 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:52:50.009 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:52:50.268 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:52:50.133 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:53:25.177 00:00:12.320 TCP 12.102.0.1:59818 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:54:27.538 00:00:11.803 TCP 12.102.0.1:32812 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:55:29.377 00:00:11.815 TCP 12.102.0.1:44032 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:56:31.233 00:00:11.804 TCP 12.102.0.1:53976 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:52:32.512 00:06:00.109 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-14 02:57:50.312 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-14 02:57:33.089 00:00:11.802 TCP 12.102.0.1:45486 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:57:50.495 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-14 02:57:50.461 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:57:50.453 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-14 02:57:50.336 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-14 02:57:50.591 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-14 02:57:50.472 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-14 02:53:32.514 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-14 02:58:34.930 00:00:11.820 TCP 12.102.0.1:38798 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 264, avg pps: 0, avg bpp: 108 Time window: 2025-09-14 01:56:32 - 2025-09-14 02:59:32 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0039s User: 0.0010s Wall: 0.0015s flows/second: 105054.6 Runtime: 0.0015s