Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 23:55:33.113 00:04:00.181 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-14 23:59:42.077 00:00:11.810 TCP 12.102.0.1:34936 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:58:33.117 00:02:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 6 369 1 2025-09-15 00:00:43.925 00:00:11.822 TCP 12.102.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:01:45.787 00:00:11.806 TCP 12.102.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:02:47.633 00:00:11.808 TCP 12.102.0.1:37306 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:03:15.575 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:03:15.633 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:03:15.884 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:03:15.723 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:03:15.598 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:03:15.654 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:03:15.537 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:03:49.479 00:00:11.807 TCP 12.102.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:00:33.115 00:04:00.181 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-15 00:04:51.320 00:00:12.095 TCP 12.102.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:01:33.117 00:04:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-15 00:05:53.461 00:00:11.803 TCP 12.102.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:06:55.304 00:00:11.756 TCP 12.102.0.1:44494 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:07:57.100 00:00:11.801 TCP 12.102.0.1:56378 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:08:15.762 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:08:15.866 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:08:15.656 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:08:15.902 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:08:15.783 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:08:15.768 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:08:15.784 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:08:58.942 00:00:12.350 TCP 12.102.0.1:46134 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:05:33.115 00:04:00.181 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-15 00:10:01.333 00:00:12.673 TCP 12.102.0.1:37808 -> 1.101.0.1:3000 17 2241 1 2025-09-15 00:06:33.127 00:04:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-15 00:11:04.062 00:00:11.801 TCP 12.102.0.1:38752 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:12:05.904 00:00:11.787 TCP 12.102.0.1:59740 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:13:15.853 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:13:15.877 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:13:15.589 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:13:15.884 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:13:15.837 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:13:15.856 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:13:15.882 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:13:07.725 00:00:11.782 TCP 12.102.0.1:51934 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:14:09.543 00:00:11.805 TCP 12.102.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:15:11.396 00:00:11.804 TCP 12.102.0.1:43030 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:10:33.126 00:06:00.174 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 00:11:33.129 00:04:00.169 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-15 00:16:13.243 00:00:11.810 TCP 12.102.0.1:58690 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:17:15.110 00:00:11.817 TCP 12.102.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:18:16.077 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:18:16.216 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:18:16.175 00:00:00.033 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:18:15.781 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:18:16.081 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:18:15.900 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:18:15.759 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:18:16.980 00:00:11.813 TCP 12.102.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:19:18.839 00:00:11.767 TCP 12.102.0.1:56042 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:16:33.132 00:04:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-15 00:20:20.664 00:00:11.821 TCP 12.102.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:21:22.523 00:00:11.825 TCP 12.102.0.1:56626 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:17:33.129 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 00:22:24.385 00:00:11.842 TCP 12.102.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:23:16.038 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:23:16.167 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:23:15.801 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:23:15.927 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:23:16.222 00:00:00.044 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:23:15.950 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:23:16.016 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:23:26.264 00:00:11.769 TCP 12.102.0.1:60168 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:24:28.077 00:00:11.796 TCP 12.102.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:25:29.915 00:00:11.823 TCP 12.102.0.1:37656 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:24:33.131 00:02:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 6 369 1 2025-09-15 00:21:33.135 00:06:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 00:26:31.779 00:00:11.761 TCP 12.102.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:27:33.578 00:00:11.797 TCP 12.102.0.1:40218 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:28:16.189 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:28:16.132 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:28:16.281 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:28:15.798 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:28:16.124 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:28:16.088 00:00:00.041 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:28:15.776 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:28:35.421 00:00:11.808 TCP 12.102.0.1:33124 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:29:37.270 00:00:12.231 TCP 12.102.0.1:59310 -> 1.101.0.1:3000 15 1926 1 2025-09-15 00:30:39.541 00:00:11.806 TCP 12.102.0.1:46194 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:27:33.143 00:04:00.161 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-15 00:31:41.382 00:00:11.809 TCP 12.102.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:28:33.135 00:04:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-15 00:32:43.225 00:00:11.801 TCP 12.102.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:33:16.220 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:33:16.251 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:33:16.231 00:00:00.050 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:33:16.284 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:33:16.241 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:33:16.446 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:33:16.244 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:33:45.080 00:00:11.799 TCP 12.102.0.1:52914 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:34:46.916 00:00:11.830 TCP 12.102.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:35:48.785 00:00:11.810 TCP 12.102.0.1:35316 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:32:33.133 00:04:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-15 00:36:50.631 00:00:11.797 TCP 12.102.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:33:33.135 00:04:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-15 00:37:52.468 00:00:11.798 TCP 12.102.0.1:58876 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:38:16.646 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:38:16.618 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:38:16.906 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:38:16.685 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:38:16.341 00:00:00.032 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:38:16.772 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:38:16.663 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:38:54.304 00:00:11.809 TCP 12.102.0.1:37754 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:39:56.148 00:00:11.804 TCP 12.102.0.1:51452 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:40:57.985 00:00:11.800 TCP 12.102.0.1:60364 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:37:33.135 00:04:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-15 00:41:59.826 00:00:11.798 TCP 12.102.0.1:37456 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:38:33.140 00:04:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-15 00:43:01.664 00:00:11.804 TCP 12.102.0.1:39590 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:43:16.177 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:43:16.516 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:43:16.550 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:43:16.201 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:43:16.334 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:43:16.211 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:43:16.482 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:44:03.507 00:00:11.801 TCP 12.102.0.1:46402 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:45:05.348 00:00:11.800 TCP 12.102.0.1:48966 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:46:07.191 00:00:11.800 TCP 12.102.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:42:33.138 00:04:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-15 00:47:09.036 00:00:11.799 TCP 12.102.0.1:53320 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:48:16.410 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:48:16.631 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:48:16.788 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:48:16.765 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:48:16.432 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:48:16.779 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:48:16.618 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:48:10.875 00:00:12.061 TCP 12.102.0.1:33322 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:43:33.149 00:06:00.158 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-15 00:49:12.969 00:00:11.814 TCP 12.102.0.1:48876 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:50:14.818 00:00:11.795 TCP 12.102.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:51:16.657 00:00:11.813 TCP 12.102.0.1:33896 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:47:33.135 00:06:00.177 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-15 00:52:18.520 00:00:11.801 TCP 12.102.0.1:46164 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:53:16.753 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:53:16.613 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:53:16.789 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:53:16.459 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:53:16.774 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:53:16.656 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:53:16.438 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:53:20.363 00:00:11.825 TCP 12.102.0.1:55834 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:50:33.141 00:04:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-09-15 00:54:22.235 00:00:11.816 TCP 12.102.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:55:24.092 00:00:11.811 TCP 12.102.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:56:25.947 00:00:12.318 TCP 12.102.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:57:28.295 00:00:11.851 TCP 12.102.0.1:47150 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:58:17.054 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-15 00:58:16.729 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:58:17.091 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-15 00:58:16.868 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-15 00:58:17.098 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-15 00:58:16.954 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-15 00:58:16.845 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-15 00:54:33.138 00:04:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-15 00:58:30.184 00:00:11.805 TCP 12.102.0.1:36418 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 165, total bytes: 124610, total packets: 1142, avg bps: 263, avg pps: 0, avg bpp: 109 Time window: 2025-09-14 23:55:33 - 2025-09-15 00:58:41 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0041s User: 0.0020s Wall: 0.0026s flows/second: 63462.6 Runtime: 0.0026s