Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 23:58:49.791 00:00:11.782 TCP 12.102.0.1:48290 -> 1.101.0.1:3000 11 1507 1 2025-09-24 23:59:51.610 00:00:11.790 TCP 12.102.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-09-24 23:55:40.459 00:06:00.116 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:00:53.434 00:00:11.796 TCP 12.102.0.1:54838 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:01:55.272 00:00:11.817 TCP 12.102.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:03:04.461 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:03:04.480 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:03:04.333 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:03:04.351 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:02:57.127 00:00:11.800 TCP 12.102.0.1:44408 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:03:04.427 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:03:04.181 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:03:04.329 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:03:58.964 00:00:11.765 TCP 12.102.0.1:37446 -> 1.101.0.1:3000 11 1507 1 2025-09-24 23:59:40.471 00:06:00.106 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-25 00:05:00.767 00:00:11.774 TCP 12.102.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:06:02.578 00:00:11.801 TCP 12.102.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:07:04.418 00:00:11.808 TCP 12.102.0.1:34068 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:02:40.469 00:06:00.111 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:08:04.475 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:08:04.405 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:08:04.354 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:08:04.458 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:08:04.475 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:08:04.457 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:08:04.435 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:08:06.270 00:00:11.802 TCP 12.102.0.1:36758 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:09:08.112 00:00:11.805 TCP 12.102.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:10:09.955 00:00:11.764 TCP 12.102.0.1:45828 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:11:11.762 00:00:11.810 TCP 12.102.0.1:39508 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:06:40.479 00:06:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-25 00:12:13.612 00:00:11.808 TCP 12.102.0.1:59522 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:13:04.617 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:13:04.508 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:13:04.655 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:13:04.756 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:13:04.533 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:13:04.413 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:13:04.734 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:13:15.458 00:00:11.805 TCP 12.102.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:14:17.300 00:00:11.761 TCP 12.102.0.1:51224 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:09:40.477 00:06:00.104 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:15:19.103 00:00:11.812 TCP 12.102.0.1:39964 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:16:20.954 00:00:11.762 TCP 12.102.0.1:43116 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:17:22.756 00:00:11.801 TCP 12.102.0.1:43922 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:18:04.737 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:18:04.780 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:18:04.844 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:18:04.776 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:18:04.759 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:18:04.833 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:18:04.621 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:18:24.595 00:00:11.762 TCP 12.102.0.1:49602 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:13:40.479 00:06:00.118 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-25 00:19:26.398 00:00:11.804 TCP 12.102.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:20:28.240 00:00:11.801 TCP 12.102.0.1:49346 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:16:40.478 00:06:00.113 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:21:30.094 00:00:11.812 TCP 12.102.0.1:57534 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:22:31.943 00:00:11.809 TCP 12.102.0.1:44216 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:23:04.873 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:23:04.933 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:23:04.862 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:23:04.712 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:23:04.573 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:23:04.847 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:23:04.690 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:23:33.784 00:00:11.758 TCP 12.102.0.1:51718 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:24:35.576 00:00:11.821 TCP 12.102.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:20:40.482 00:06:00.106 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-25 00:25:37.436 00:00:12.417 TCP 12.102.0.1:46094 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:26:39.891 00:00:11.793 TCP 12.102.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:27:41.722 00:00:11.800 TCP 12.102.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:28:05.220 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:28:04.977 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:28:04.960 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:28:04.854 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:28:05.205 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:28:04.964 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:28:05.244 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:23:40.480 00:06:00.111 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:28:43.558 00:00:11.850 TCP 12.102.0.1:35874 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:29:45.448 00:00:11.807 TCP 12.102.0.1:37348 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:30:47.292 00:00:11.802 TCP 12.102.0.1:46050 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:31:49.134 00:00:11.824 TCP 12.102.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:27:40.485 00:06:00.104 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-25 00:32:50.995 00:00:11.799 TCP 12.102.0.1:48858 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:33:04.959 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:33:05.031 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:33:05.078 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:33:05.155 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:33:04.815 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:33:04.774 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:33:05.132 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:33:52.836 00:00:11.803 TCP 12.102.0.1:36332 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:34:54.677 00:00:11.759 TCP 12.102.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:30:40.484 00:06:00.108 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:35:56.475 00:00:11.804 TCP 12.102.0.1:42176 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:36:58.312 00:00:11.808 TCP 12.102.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:38:05.253 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:38:05.119 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:38:05.095 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:38:04.854 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:38:05.264 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:38:05.045 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:38:04.831 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:38:00.158 00:00:11.800 TCP 12.102.0.1:40612 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:39:01.999 00:00:11.818 TCP 12.102.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:34:40.487 00:06:00.103 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-25 00:40:03.857 00:00:11.799 TCP 12.102.0.1:43728 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:41:05.699 00:00:11.797 TCP 12.102.0.1:45552 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:42:07.533 00:00:11.803 TCP 12.102.0.1:53006 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:37:40.499 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:43:05.208 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:43:05.083 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:43:05.103 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:43:05.185 00:00:00.033 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:43:05.230 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:43:05.023 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:43:05.061 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:43:09.376 00:00:12.291 TCP 12.102.0.1:60084 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:44:11.708 00:00:11.807 TCP 12.102.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:45:13.550 00:00:11.853 TCP 12.102.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:46:15.442 00:00:11.810 TCP 12.102.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:41:40.510 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-25 00:47:17.289 00:00:11.762 TCP 12.102.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:48:05.147 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:48:05.355 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:48:05.380 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:48:05.440 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:48:05.170 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:48:05.298 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:48:05.244 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:48:19.091 00:00:11.817 TCP 12.102.0.1:47466 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:49:20.957 00:00:11.756 TCP 12.102.0.1:43976 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:44:40.508 00:06:00.088 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:50:22.753 00:00:11.806 TCP 12.102.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:51:24.595 00:00:11.806 TCP 12.102.0.1:34484 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:52:26.438 00:00:11.758 TCP 12.102.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:53:05.851 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:53:05.810 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:53:05.826 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:53:05.700 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:53:05.741 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:53:05.816 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:53:05.678 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:53:28.231 00:00:11.814 TCP 12.102.0.1:43172 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:48:40.512 00:06:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-25 00:54:30.080 00:00:11.798 TCP 12.102.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:55:31.921 00:00:11.775 TCP 12.102.0.1:33120 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:51:40.508 00:06:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-25 00:56:33.739 00:00:11.800 TCP 12.102.0.1:34478 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:57:35.575 00:00:11.807 TCP 12.102.0.1:35968 -> 1.101.0.1:3000 11 1507 1 2025-09-25 00:58:05.588 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 00:58:05.585 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-25 00:58:05.553 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-25 00:58:05.606 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-25 00:58:05.598 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-25 00:58:05.397 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-25 00:58:05.530 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-25 00:58:37.412 00:00:11.798 TCP 12.102.0.1:39664 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124718, total packets: 1139, avg bps: 263, avg pps: 0, avg bpp: 109 Time window: 2025-09-24 23:55:40 - 2025-09-25 00:58:49 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0018s Wall: 0.0023s flows/second: 69564.5 Runtime: 0.0023s