Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 05:59:35.927 00:00:11.787 TCP 12.102.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:00:36.307 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.162 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.289 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.207 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.043 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.160 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:00:36.185 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 05:55:44.192 00:06:00.209 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:00:37.759 00:00:11.802 TCP 12.102.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:01:39.598 00:00:11.803 TCP 12.102.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:02:41.439 00:00:11.758 TCP 12.102.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:03:43.236 00:00:11.761 TCP 12.102.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:04:45.063 00:00:11.799 TCP 12.102.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:05:35.804 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:05:35.941 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:05:36.351 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:05:36.096 00:00:00.019 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:05:35.827 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:05:36.061 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:05:36.136 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:00:44.204 00:06:00.199 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:05:46.902 00:00:11.796 TCP 12.102.0.1:45402 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:06:48.735 00:00:11.797 TCP 12.102.0.1:43416 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:02:44.202 00:06:00.204 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:07:50.570 00:00:11.767 TCP 12.102.0.1:40894 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:08:52.377 00:00:11.801 TCP 12.102.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:09:54.217 00:00:11.796 TCP 12.102.0.1:42964 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:10:35.844 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:10:36.238 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:10:36.293 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:10:35.995 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:10:35.867 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:10:35.998 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:10:36.169 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:10:56.073 00:00:11.807 TCP 12.102.0.1:48456 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:11:57.936 00:00:11.768 TCP 12.102.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:07:44.205 00:06:00.199 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:12:59.753 00:00:11.803 TCP 12.102.0.1:54254 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:14:01.601 00:00:11.859 TCP 12.102.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:09:44.204 00:06:00.204 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:15:03.501 00:00:11.802 TCP 12.102.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:15:36.479 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:15:36.458 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.475 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.620 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.502 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.621 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:15:36.441 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:16:05.343 00:00:11.818 TCP 12.102.0.1:38892 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:17:07.192 00:00:11.800 TCP 12.102.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:18:09.060 00:00:11.802 TCP 12.102.0.1:58160 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:19:10.901 00:00:11.808 TCP 12.102.0.1:57724 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:14:44.208 00:06:00.212 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:20:12.741 00:00:11.807 TCP 12.102.0.1:47226 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:20:36.182 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:20:36.445 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.524 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.205 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.523 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.401 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:20:36.344 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:21:14.590 00:00:11.763 TCP 12.102.0.1:60864 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:16:44.207 00:06:00.215 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:22:16.391 00:00:11.913 TCP 12.102.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:23:18.344 00:00:11.804 TCP 12.102.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:24:20.190 00:00:11.804 TCP 12.102.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:25:22.043 00:00:11.799 TCP 12.102.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:25:36.546 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.496 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.436 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.449 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.573 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.455 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:25:36.426 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:26:23.883 00:00:11.800 TCP 12.102.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:21:44.211 00:06:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:27:25.736 00:00:11.795 TCP 12.102.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:28:27.571 00:00:12.137 TCP 12.102.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:23:44.208 00:06:00.215 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:29:29.750 00:00:11.765 TCP 12.102.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:30:36.719 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.701 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.546 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.482 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.776 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.379 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:30:36.459 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:30:31.547 00:00:11.801 TCP 12.102.0.1:48140 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:31:33.384 00:00:11.767 TCP 12.102.0.1:45254 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:32:35.187 00:00:11.800 TCP 12.102.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:28:44.214 00:06:00.208 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:33:37.040 00:00:11.797 TCP 12.102.0.1:58902 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:34:38.881 00:00:11.805 TCP 12.102.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:35:37.336 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:35:36.567 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:35:36.821 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:35:36.979 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:35:37.053 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:35:36.927 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:35:36.956 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:30:44.212 00:06:00.213 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:35:40.725 00:00:11.800 TCP 12.102.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:36:42.562 00:01:13.645 TCP 12.102.0.1:34888 -> 1.101.0.1:3000 22 3014 1 2025-09-30 06:38:46.245 00:00:11.800 TCP 12.102.0.1:35874 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:39:48.083 00:00:11.858 TCP 12.102.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:40:36.823 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:40:36.720 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.731 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.744 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.846 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.896 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:40:36.835 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:35:44.227 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:40:49.971 00:00:11.805 TCP 12.102.0.1:57656 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:41:51.813 00:00:11.806 TCP 12.102.0.1:48126 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:37:44.225 00:06:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:42:53.652 00:00:12.267 TCP 12.102.0.1:42876 -> 1.101.0.1:3000 15 1926 1 2025-09-30 06:43:55.962 00:00:11.807 TCP 12.102.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:44:57.809 00:00:11.798 TCP 12.102.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:45:37.060 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:45:37.157 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:45:37.015 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:45:36.969 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:45:37.082 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:45:36.884 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:45:36.947 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:45:59.646 00:00:11.766 TCP 12.102.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:47:01.451 00:00:11.808 TCP 12.102.0.1:55478 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:42:44.229 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:48:03.295 00:00:11.805 TCP 12.102.0.1:57074 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:49:05.136 00:00:11.786 TCP 12.102.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:44:44.229 00:06:00.199 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:50:06.958 00:00:11.799 TCP 12.102.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:50:37.035 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:50:37.020 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:50:36.989 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:50:36.970 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:50:37.006 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:50:37.183 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:50:37.014 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:51:08.801 00:00:11.806 TCP 12.102.0.1:41618 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:52:10.654 00:00:11.767 TCP 12.102.0.1:52576 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:53:12.458 00:00:11.797 TCP 12.102.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:54:14.293 00:00:11.766 TCP 12.102.0.1:43980 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:49:44.232 00:06:00.207 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 06:55:16.100 00:00:11.763 TCP 12.102.0.1:60838 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:55:37.201 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 06:55:37.506 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.356 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.568 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.224 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.441 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 06:55:37.319 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 06:56:17.902 00:00:11.759 TCP 12.102.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:51:44.229 00:06:00.213 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 06:57:19.701 00:00:11.766 TCP 12.102.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:58:21.507 00:00:11.802 TCP 12.102.0.1:47662 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123630, total packets: 1132, avg bps: 262, avg pps: 0, avg bpp: 109 Time window: 2025-09-30 05:55:44 - 2025-09-30 06:58:33 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0031s User: 0.0015s Wall: 0.0026s flows/second: 60465.3 Runtime: 0.0026s