Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 13:58:43.513 00:00:12.073 TCP 12.102.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-09-21 13:59:45.625 00:00:11.758 TCP 12.102.0.1:58066 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:00:47.426 00:00:11.764 TCP 12.102.0.1:41788 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:01:25.665 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:01:25.773 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:01:25.850 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:01:25.711 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:01:25.771 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:01:25.796 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:01:25.690 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 13:58:38.044 00:03:00.027 TCP 179.10.12.10:179 -> 179.10.12.12:58070 8 492 1 2025-09-21 14:01:49.229 00:00:11.800 TCP 12.102.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:02:51.083 00:00:11.801 TCP 12.102.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:03:52.928 00:00:11.818 TCP 12.102.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:04:54.785 00:00:11.800 TCP 12.102.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:00:38.068 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-21 14:05:56.624 00:00:11.846 TCP 12.102.0.1:36818 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:06:25.869 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:06:25.937 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:06:25.930 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:06:25.893 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:06:25.851 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:06:25.950 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:06:25.915 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:06:58.505 00:00:11.806 TCP 12.102.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:02:38.046 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 14:08:00.348 00:00:11.856 TCP 12.102.0.1:36604 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:09:02.245 00:00:11.777 TCP 12.102.0.1:54364 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:10:04.081 00:00:11.800 TCP 12.102.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:11:05.918 00:00:11.822 TCP 12.102.0.1:47244 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:11:25.759 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:11:26.003 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:11:25.914 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:11:25.935 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:11:25.782 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:11:26.041 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:11:25.864 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:12:07.780 00:00:11.818 TCP 12.102.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:07:38.071 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-21 14:13:09.638 00:00:11.796 TCP 12.102.0.1:53740 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:14:11.473 00:00:11.811 TCP 12.102.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:09:38.049 00:06:00.026 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 14:15:13.322 00:00:11.764 TCP 12.102.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:16:26.105 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:16:15.123 00:00:11.852 TCP 12.102.0.1:47696 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:16:26.089 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:16:26.130 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:16:25.818 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:16:25.856 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:16:25.944 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:16:25.795 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:17:17.028 00:00:11.803 TCP 12.102.0.1:51418 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:18:18.871 00:00:11.807 TCP 12.102.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:19:20.702 00:00:11.774 TCP 12.102.0.1:40264 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:14:38.072 00:05:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 6 426 1 2025-09-21 14:20:22.517 00:00:11.762 TCP 12.102.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:21:26.165 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:21:26.138 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:21:26.131 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:21:26.268 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:21:26.190 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:21:26.013 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:21:26.020 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:21:24.317 00:00:11.813 TCP 12.102.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:16:38.052 00:06:00.025 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 14:22:26.155 00:00:11.771 TCP 12.102.0.1:36352 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:23:27.962 00:00:11.813 TCP 12.102.0.1:35416 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:20:38.073 00:04:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 5 355 1 2025-09-21 14:24:29.810 00:00:11.800 TCP 12.102.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:25:31.651 00:00:11.760 TCP 12.102.0.1:38752 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:26:26.307 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:26:26.657 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:26:26.776 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:26:26.537 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:26:26.788 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:26:26.540 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:26:26.515 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:26:33.449 00:00:11.797 TCP 12.102.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:27:35.291 00:00:11.797 TCP 12.102.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:23:38.054 00:05:00.026 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-09-21 14:28:37.124 00:00:11.802 TCP 12.102.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:29:38.969 00:00:11.763 TCP 12.102.0.1:48526 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:25:38.076 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-21 14:30:40.769 00:00:11.763 TCP 12.102.0.1:51646 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:31:26.261 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:31:26.384 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:31:26.438 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:31:26.237 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:31:26.376 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:31:26.128 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:31:26.214 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:31:42.565 00:00:11.831 TCP 12.102.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:32:44.436 00:00:11.819 TCP 12.102.0.1:59174 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:29:38.056 00:04:00.024 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-21 14:33:46.297 00:00:11.812 TCP 12.102.0.1:35884 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:34:48.148 00:00:11.821 TCP 12.102.0.1:43142 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:35:50.006 00:00:11.804 TCP 12.102.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:36:26.539 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:36:26.528 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:36:26.371 00:00:00.033 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:36:26.647 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:36:26.562 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:36:26.699 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:36:26.642 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:36:51.844 00:00:11.806 TCP 12.102.0.1:53052 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:32:38.077 00:06:00.010 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-21 14:37:53.681 00:00:11.807 TCP 12.102.0.1:36282 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:34:38.069 00:04:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-09-21 14:38:55.526 00:00:11.800 TCP 12.102.0.1:44920 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:39:57.366 00:00:11.763 TCP 12.102.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:40:59.168 00:00:11.795 TCP 12.102.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:41:26.572 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:41:26.664 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:41:26.644 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:41:26.654 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:41:26.364 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:41:26.640 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:41:26.622 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:42:01.003 00:00:11.757 TCP 12.102.0.1:53246 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:43:02.800 00:00:11.806 TCP 12.102.0.1:56472 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:44:04.660 00:00:11.810 TCP 12.102.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:39:38.070 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 14:39:38.087 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-09-21 14:45:06.509 00:00:11.820 TCP 12.102.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:46:08.367 00:00:11.819 TCP 12.102.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:46:26.530 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:46:26.764 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:46:26.730 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:46:26.800 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:46:26.553 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:46:26.576 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:46:26.622 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:46:38.088 00:00:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 1 71 1 2025-09-21 14:47:10.217 00:00:11.804 TCP 12.102.0.1:35580 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:48:12.079 00:00:11.799 TCP 12.102.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:49:13.914 00:00:11.785 TCP 12.102.0.1:54962 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:50:15.735 00:00:11.802 TCP 12.102.0.1:44968 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:51:26.751 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:51:26.733 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:51:26.813 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:51:26.723 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:51:26.775 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:51:26.955 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:51:26.782 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:51:17.576 00:00:11.857 TCP 12.102.0.1:55342 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:46:38.071 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 14:47:38.088 00:04:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 5 355 1 2025-09-21 14:52:19.472 00:00:11.816 TCP 12.102.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:53:21.324 00:00:11.817 TCP 12.102.0.1:59372 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:54:23.177 00:00:11.819 TCP 12.102.0.1:53958 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:55:25.028 00:00:11.809 TCP 12.102.0.1:54788 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:56:27.096 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 14:56:26.971 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-21 14:56:26.831 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-21 14:56:27.040 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-21 14:56:26.726 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-21 14:56:26.846 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-21 14:56:26.808 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-21 14:52:38.089 00:04:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 5 355 1 2025-09-21 14:56:26.878 00:00:11.802 TCP 12.102.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:57:28.719 00:00:11.760 TCP 12.102.0.1:42756 -> 1.101.0.1:3000 11 1507 1 2025-09-21 14:53:38.071 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-21 14:58:30.514 00:00:11.811 TCP 12.102.0.1:57646 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 121754, total packets: 1082, avg bps: 266, avg pps: 0, avg bpp: 112 Time window: 2025-09-21 13:58:38 - 2025-09-21 14:59:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0025s User: 0.0025s Wall: 0.0025s flows/second: 64020.2 Runtime: 0.0026s