Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 08:59:15.266 00:00:11.761 TCP 12.102.0.1:42696 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:00:17.076 00:00:11.803 TCP 12.102.0.1:53304 -> 1.101.0.1:3000 11 1507 1 2025-09-20 08:55:37.182 00:06:00.001 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-20 09:00:50.754 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:00:50.830 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:00:50.939 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:00:50.732 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:00:50.768 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:00:50.881 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:00:50.711 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:01:18.923 00:00:11.783 TCP 12.102.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:02:20.742 00:00:11.766 TCP 12.102.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-09-20 08:57:37.181 00:06:00.007 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-20 09:03:22.544 00:00:12.464 TCP 12.102.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:04:25.061 00:00:11.800 TCP 12.102.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:05:26.901 00:00:11.798 TCP 12.102.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:05:51.017 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:05:50.881 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:05:50.822 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:05:50.682 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:05:50.737 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:05:51.069 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:05:50.858 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:06:28.738 00:00:11.801 TCP 12.102.0.1:37860 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:02:37.184 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 8 549 1 2025-09-20 09:07:30.579 00:00:11.805 TCP 12.102.0.1:60080 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:08:32.420 00:00:11.803 TCP 12.102.0.1:58694 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:04:37.183 00:06:00.007 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-20 09:09:34.265 00:00:11.811 TCP 12.102.0.1:45170 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:10:36.110 00:00:11.765 TCP 12.102.0.1:54464 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:10:50.988 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:10:51.025 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:10:51.246 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:10:50.913 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:10:51.040 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:10:50.974 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:10:50.891 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:11:37.911 00:00:11.824 TCP 12.102.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:12:39.773 00:00:11.801 TCP 12.102.0.1:59310 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:13:41.614 00:00:11.802 TCP 12.102.0.1:50808 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:09:37.186 00:06:00.000 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-20 09:14:43.451 00:00:11.808 TCP 12.102.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:15:51.127 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:15:51.019 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:15:51.072 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:15:51.139 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:15:51.100 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:15:50.862 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:15:51.116 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:15:45.296 00:00:11.756 TCP 12.102.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:11:37.184 00:06:00.006 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-20 09:16:47.085 00:00:11.802 TCP 12.102.0.1:47472 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:17:48.924 00:00:11.821 TCP 12.102.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:18:50.783 00:00:11.795 TCP 12.102.0.1:40220 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:19:52.620 00:00:11.799 TCP 12.102.0.1:41316 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:20:51.491 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:20:50.914 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:20:51.516 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:20:51.335 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:20:51.459 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:20:51.575 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:20:51.311 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:20:54.460 00:00:11.761 TCP 12.102.0.1:35622 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:16:37.186 00:06:00.005 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-20 09:21:56.262 00:00:11.798 TCP 12.102.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:22:58.098 00:00:11.800 TCP 12.102.0.1:48090 -> 1.101.0.1:3000 12 1559 1 2025-09-20 09:18:37.185 00:06:00.006 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-20 09:23:59.940 00:00:11.768 TCP 12.102.0.1:50666 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:25:01.747 00:00:11.802 TCP 12.102.0.1:47110 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:25:51.134 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:25:51.268 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:25:51.499 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:25:51.306 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:25:51.157 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:25:51.291 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:25:51.367 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:26:03.598 00:00:11.799 TCP 12.102.0.1:47078 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:27:05.437 00:00:11.773 TCP 12.102.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:28:07.245 00:00:11.802 TCP 12.102.0.1:56102 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:23:37.188 00:06:00.005 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-20 09:29:09.088 00:00:12.380 TCP 12.102.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:30:11.511 00:00:11.805 TCP 12.102.0.1:33654 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:25:37.186 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-20 09:30:51.336 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:30:51.435 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:30:51.446 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:30:51.526 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:30:51.415 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:30:51.307 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:30:51.503 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:31:13.353 00:00:11.799 TCP 12.102.0.1:57458 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:32:15.188 00:00:11.807 TCP 12.102.0.1:55934 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:33:17.037 00:00:11.806 TCP 12.102.0.1:52598 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:34:18.882 00:00:11.808 TCP 12.102.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:35:20.724 00:00:11.782 TCP 12.102.0.1:60390 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:30:37.188 00:06:00.006 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-20 09:35:51.836 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:35:52.051 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:35:51.959 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:35:51.794 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:35:52.054 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:35:51.858 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:35:52.118 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:36:22.546 00:00:12.204 TCP 12.102.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:32:37.192 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-20 09:37:24.790 00:00:11.803 TCP 12.102.0.1:50300 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:38:26.630 00:00:11.802 TCP 12.102.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:39:28.471 00:00:11.804 TCP 12.102.0.1:51872 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:40:30.311 00:00:11.804 TCP 12.102.0.1:42742 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:40:51.584 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:40:51.556 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:40:51.657 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:40:51.730 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:40:51.608 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:40:51.729 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:40:51.602 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:41:32.148 00:00:11.817 TCP 12.102.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:37:37.192 00:06:00.004 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-20 09:42:34.010 00:00:11.801 TCP 12.102.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:43:35.850 00:00:11.803 TCP 12.102.0.1:59966 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:39:37.192 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-20 09:44:37.688 00:00:11.798 TCP 12.102.0.1:47250 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:45:51.667 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:45:51.848 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:45:51.850 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:45:51.772 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:45:39.526 00:00:11.819 TCP 12.102.0.1:49446 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:45:51.911 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:45:51.820 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:45:51.749 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:46:41.377 00:00:11.826 TCP 12.102.0.1:47794 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:47:43.242 00:00:11.771 TCP 12.102.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:48:45.067 00:00:11.762 TCP 12.102.0.1:51754 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:44:37.192 00:06:00.006 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-20 09:49:46.869 00:00:11.848 TCP 12.102.0.1:54410 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:50:51.460 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:50:51.483 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:50:51.934 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:50:51.723 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:50:51.844 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:50:51.733 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:50:51.866 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:50:48.760 00:00:12.248 TCP 12.102.0.1:48060 -> 1.101.0.1:3000 15 1926 1 2025-09-20 09:46:37.193 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 757 1 2025-09-20 09:51:51.077 00:00:11.758 TCP 12.102.0.1:51470 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:52:52.871 00:00:11.805 TCP 12.102.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:53:54.719 00:00:11.800 TCP 12.102.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:54:56.558 00:00:11.758 TCP 12.102.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:55:52.849 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-20 09:55:53.032 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-20 09:55:53.006 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 09:55:53.062 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-20 09:55:52.870 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-20 09:55:52.992 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-20 09:55:52.933 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-20 09:55:58.357 00:00:11.825 TCP 12.102.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:51:37.192 00:06:00.010 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-20 09:57:00.227 00:00:20.848 TCP 12.102.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:58:11.111 00:00:11.766 TCP 12.102.0.1:56298 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:53:37.199 00:06:00.007 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 Summary: total flows: 160, total bytes: 123763, total packets: 1132, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-09-20 08:55:37 - 2025-09-20 09:59:37 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0039s User: 0.0008s Wall: 0.0024s flows/second: 65414.6 Runtime: 0.0025s