Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 07:58:50.464 00:00:11.803 TCP 12.102.0.1:45100 -> 1.101.0.1:3000 11 1507 1 2025-09-21 07:54:37.830 00:06:00.005 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 07:59:52.305 00:00:11.798 TCP 12.102.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:00:54.142 00:00:11.842 TCP 12.102.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:01:18.682 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:01:18.565 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:01:18.550 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:01:18.716 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:01:18.571 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:01:18.350 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:01:18.527 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 07:56:37.832 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 13 809 1 2025-09-21 08:01:56.041 00:00:11.809 TCP 12.102.0.1:53448 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:02:57.890 00:00:11.802 TCP 12.102.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:03:59.731 00:00:11.809 TCP 12.102.0.1:49290 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:05:01.573 00:00:11.800 TCP 12.102.0.1:59068 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:06:18.358 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:06:03.446 00:00:12.259 TCP 12.102.0.1:44464 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:06:18.585 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:06:18.507 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:06:18.619 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:06:18.381 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:06:18.498 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:06:18.358 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:01:37.830 00:06:00.006 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 08:07:05.747 00:00:11.807 TCP 12.102.0.1:35108 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:08:07.594 00:00:11.819 TCP 12.102.0.1:60600 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:03:37.833 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 757 1 2025-09-21 08:09:09.446 00:00:11.806 TCP 12.102.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:10:11.293 00:00:11.818 TCP 12.102.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:11:18.695 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:11:18.638 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:11:18.919 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:11:18.943 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:11:18.718 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:11:18.687 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:11:18.635 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:11:13.136 00:00:11.830 TCP 12.102.0.1:34890 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:12:15.001 00:00:11.797 TCP 12.102.0.1:56792 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:13:16.837 00:00:11.809 TCP 12.102.0.1:39296 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:08:37.832 00:06:00.005 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 08:14:18.685 00:00:11.803 TCP 12.102.0.1:44646 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:15:20.531 00:00:11.800 TCP 12.102.0.1:41972 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:10:37.834 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-21 08:16:18.678 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:16:18.892 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:16:18.965 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:16:18.917 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:16:18.906 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:16:18.757 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:16:18.894 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:16:22.371 00:00:11.810 TCP 12.102.0.1:35368 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:17:24.216 00:00:11.823 TCP 12.102.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:18:26.080 00:00:11.800 TCP 12.102.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:19:27.920 00:00:11.829 TCP 12.102.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:15:37.834 00:06:00.005 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 08:20:29.787 00:00:12.220 TCP 12.102.0.1:52268 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:21:18.791 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:21:18.653 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:21:18.857 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:21:18.631 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:21:18.982 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:21:19.016 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:21:18.998 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:21:32.066 00:00:11.763 TCP 12.102.0.1:48034 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:17:37.835 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-21 08:22:33.868 00:00:11.758 TCP 12.102.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:23:35.663 00:00:11.813 TCP 12.102.0.1:55900 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:24:37.513 00:00:11.802 TCP 12.102.0.1:37034 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:25:39.353 00:00:11.808 TCP 12.102.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:26:18.956 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:26:18.974 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:26:19.076 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:26:19.103 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:26:19.104 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:26:18.980 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:26:19.025 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:26:41.201 00:00:11.800 TCP 12.102.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:22:37.838 00:06:00.009 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 757 1 2025-09-21 08:27:43.063 00:00:11.931 TCP 12.102.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:28:45.041 00:00:11.796 TCP 12.102.0.1:59960 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:24:37.836 00:06:00.012 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-21 08:29:46.880 00:00:12.283 TCP 12.102.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:30:49.202 00:00:11.766 TCP 12.102.0.1:39348 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:31:19.207 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:31:19.088 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:31:19.250 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:31:19.219 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:31:19.038 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:31:19.079 00:00:00.042 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:31:19.198 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:31:51.012 00:00:11.807 TCP 12.102.0.1:50890 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:32:52.860 00:00:11.801 TCP 12.102.0.1:37662 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:33:54.704 00:00:11.868 TCP 12.102.0.1:39368 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:29:37.846 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-21 08:34:56.616 00:00:11.770 TCP 12.102.0.1:36760 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:35:58.424 00:00:11.802 TCP 12.102.0.1:41496 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:36:19.098 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:36:19.226 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:36:19.038 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:36:19.382 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:36:19.122 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:36:19.323 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:36:19.201 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:31:37.840 00:06:00.011 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-21 08:37:00.274 00:00:11.800 TCP 12.102.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:38:02.112 00:00:11.804 TCP 12.102.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:39:03.958 00:00:11.763 TCP 12.102.0.1:47452 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:40:05.757 00:00:11.798 TCP 12.102.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:41:19.303 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:41:19.360 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:41:19.188 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:41:19.390 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:41:07.595 00:00:11.809 TCP 12.102.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:41:19.326 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:41:19.269 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:41:19.440 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:36:37.848 00:06:00.015 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-21 08:42:09.445 00:00:11.810 TCP 12.102.0.1:38338 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:43:11.296 00:00:11.933 TCP 12.102.0.1:58742 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:38:37.843 00:06:00.022 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-21 08:44:13.264 00:00:11.769 TCP 12.102.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:45:15.078 00:00:11.858 TCP 12.102.0.1:42782 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:46:19.194 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:46:19.475 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:46:19.582 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:46:19.268 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:46:19.217 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:46:19.239 00:00:00.033 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:46:19.451 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:46:16.972 00:00:11.763 TCP 12.102.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:47:18.774 00:00:11.800 TCP 12.102.0.1:38934 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:48:20.613 00:00:11.797 TCP 12.102.0.1:49866 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:43:37.864 00:06:00.000 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-21 08:49:22.457 00:00:11.862 TCP 12.102.0.1:35948 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:45:37.846 00:06:00.021 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-21 08:50:24.359 00:00:11.824 TCP 12.102.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:51:19.576 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:51:19.476 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:51:19.707 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:51:19.601 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:51:19.760 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:51:19.659 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:51:19.408 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:51:26.227 00:00:11.816 TCP 12.102.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:52:28.080 00:00:11.801 TCP 12.102.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:53:29.925 00:00:11.830 TCP 12.102.0.1:36200 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:54:31.798 00:00:11.800 TCP 12.102.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:50:37.864 00:06:00.002 TCP 179.10.12.10:179 -> 179.10.12.12:58070 7 497 1 2025-09-21 08:55:33.638 00:00:12.466 TCP 12.102.0.1:47128 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:56:19.624 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 08:56:19.740 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 08:56:19.669 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 08:56:19.605 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 08:56:19.664 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 08:56:19.625 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 08:56:19.583 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 08:56:36.132 00:00:11.763 TCP 12.102.0.1:59170 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:52:37.847 00:06:00.021 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-21 08:57:37.931 00:00:11.870 TCP 12.102.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-09-21 08:58:39.838 00:00:11.794 TCP 12.102.0.1:47292 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 123863, total packets: 1120, avg bps: 257, avg pps: 0, avg bpp: 110 Time window: 2025-09-21 07:54:37 - 2025-09-21 08:58:51 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0042s User: 0.0008s Wall: 0.0024s flows/second: 68045.4 Runtime: 0.0024s