Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 13:59:34.879 00:00:11.802 TCP 12.102.0.1:55332 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:00:36.723 00:00:11.818 TCP 12.102.0.1:51300 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:01:38.580 00:00:12.247 TCP 12.102.0.1:50316 -> 1.101.0.1:3000 15 1926 1 2025-09-23 14:02:23.882 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:02:23.752 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:02:23.702 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:02:23.675 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:02:23.779 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:02:23.487 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:02:23.653 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:02:40.865 00:00:11.813 TCP 12.102.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-09-23 13:58:39.445 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 14:03:42.717 00:00:11.800 TCP 12.102.0.1:44052 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:04:44.559 00:00:11.801 TCP 12.102.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:00:39.447 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 14:05:46.398 00:00:11.801 TCP 12.102.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:06:48.240 00:00:11.808 TCP 12.102.0.1:54590 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:07:23.613 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:07:23.593 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:07:23.491 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:07:23.609 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:07:23.591 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:07:23.674 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:07:23.586 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:07:50.085 00:00:11.795 TCP 12.102.0.1:45690 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:08:51.917 00:00:11.833 TCP 12.102.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:09:53.778 00:00:11.764 TCP 12.102.0.1:58252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:05:39.445 00:06:00.115 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 14:10:55.580 00:00:11.830 TCP 12.102.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:11:57.444 00:00:11.767 TCP 12.102.0.1:52118 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:12:23.555 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:12:23.772 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:12:23.747 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:12:23.934 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:12:23.694 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:12:23.532 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:12:23.724 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:07:39.448 00:06:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 14:12:59.246 00:00:12.111 TCP 12.102.0.1:54876 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:14:01.396 00:00:11.765 TCP 12.102.0.1:34434 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:15:03.196 00:00:11.813 TCP 12.102.0.1:41842 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:16:05.080 00:00:11.753 TCP 12.102.0.1:53302 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:17:06.872 00:00:11.800 TCP 12.102.0.1:49850 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:17:23.769 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:17:23.868 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:17:23.769 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:17:23.838 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:17:23.864 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:17:23.800 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:17:23.815 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:12:39.472 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 14:18:08.707 00:00:11.773 TCP 12.102.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:19:10.515 00:00:11.795 TCP 12.102.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:14:39.468 00:06:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 14:20:12.347 00:00:11.762 TCP 12.102.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:21:14.146 00:00:12.234 TCP 12.102.0.1:48230 -> 1.101.0.1:3000 15 1926 1 2025-09-23 14:22:23.963 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:22:23.909 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:22:23.912 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:22:23.880 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:22:23.886 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:22:16.418 00:00:11.833 TCP 12.102.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:22:24.040 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:22:24.043 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:23:18.287 00:00:11.806 TCP 12.102.0.1:49990 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:24:20.134 00:00:11.827 TCP 12.102.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:19:39.466 00:06:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 14:25:22.002 00:00:11.831 TCP 12.102.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:26:23.875 00:00:11.806 TCP 12.102.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:21:39.469 00:06:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 14:27:23.928 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:27:23.865 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:27:23.976 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:27:23.906 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:27:23.953 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:27:24.099 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:27:24.123 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:27:25.715 00:00:11.803 TCP 12.102.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:28:27.554 00:00:11.760 TCP 12.102.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:29:29.356 00:00:11.830 TCP 12.102.0.1:38082 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:30:31.224 00:00:11.806 TCP 12.102.0.1:50326 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:26:39.467 00:06:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 14:31:33.076 00:00:11.799 TCP 12.102.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:32:23.926 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:32:23.948 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:32:24.011 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:32:24.051 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:32:24.024 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:32:24.050 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:32:23.987 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:32:34.915 00:00:11.832 TCP 12.102.0.1:40426 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:28:39.471 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 14:33:36.784 00:00:11.801 TCP 12.102.0.1:51784 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:34:38.627 00:00:11.805 TCP 12.102.0.1:55436 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:35:40.472 00:00:11.819 TCP 12.102.0.1:39900 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:36:42.314 00:00:11.810 TCP 12.102.0.1:60654 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:37:24.312 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:37:24.120 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:37:24.215 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:37:24.309 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:37:24.166 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:37:24.259 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:37:24.143 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:37:44.167 00:00:11.800 TCP 12.102.0.1:49818 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:33:39.479 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 14:38:46.008 00:00:11.767 TCP 12.102.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:39:47.812 00:00:11.797 TCP 12.102.0.1:47762 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:35:39.482 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 14:40:49.651 00:00:11.794 TCP 12.102.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:41:51.486 00:00:12.237 TCP 12.102.0.1:49910 -> 1.101.0.1:3000 15 1926 1 2025-09-23 14:42:24.414 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:42:24.400 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:42:24.443 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:42:24.320 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:42:24.538 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:42:24.412 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:42:24.298 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:42:53.762 00:00:11.764 TCP 12.102.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:43:55.571 00:00:11.805 TCP 12.102.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:44:57.411 00:00:11.764 TCP 12.102.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:40:39.482 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 14:45:59.211 00:00:11.852 TCP 12.102.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:47:01.101 00:00:11.760 TCP 12.102.0.1:32772 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:47:24.514 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:47:24.380 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:47:24.435 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:47:24.371 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:47:24.484 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:47:24.427 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:47:24.358 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:42:39.485 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 14:48:02.908 00:00:11.825 TCP 12.102.0.1:46052 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:49:04.769 00:00:11.800 TCP 12.102.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:50:06.611 00:00:11.811 TCP 12.102.0.1:42140 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:51:08.474 00:00:11.799 TCP 12.102.0.1:36596 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:52:10.315 00:00:11.802 TCP 12.102.0.1:54858 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:52:24.394 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:52:24.134 00:00:00.049 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:52:24.562 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:52:24.414 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:52:24.417 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:52:24.561 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:52:24.240 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:47:39.483 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-23 14:53:12.155 00:00:11.811 TCP 12.102.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:54:14.010 00:00:11.799 TCP 12.102.0.1:48008 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:49:39.486 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-23 14:55:15.848 00:00:12.326 TCP 12.102.0.1:58698 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:56:18.217 00:00:11.810 TCP 12.102.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:57:24.417 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-23 14:57:24.483 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-23 14:57:24.428 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 14:57:24.637 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-23 14:57:24.439 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-23 14:57:24.564 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-23 14:57:24.448 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-23 14:57:20.079 00:00:11.806 TCP 12.102.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-09-23 14:58:21.923 00:00:11.819 TCP 12.102.0.1:53060 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123607, total packets: 1126, avg bps: 275, avg pps: 0, avg bpp: 109 Time window: 2025-09-23 13:58:39 - 2025-09-23 14:58:33 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0038s User: 0.0019s Wall: 0.0028s flows/second: 55848.6 Runtime: 0.0029s