Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 14:59:05.996 00:00:11.758 TCP 12.102.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-09-30 14:54:44.478 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:00:07.791 00:00:11.768 TCP 12.102.0.1:35246 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:00:46.745 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:00:46.800 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:00:46.909 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:00:46.845 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:00:46.769 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:00:46.961 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:00:46.778 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:01:09.588 00:00:11.804 TCP 12.102.0.1:46162 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:02:11.433 00:00:11.832 TCP 12.102.0.1:54524 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:03:13.274 00:00:11.765 TCP 12.102.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:04:15.081 00:00:11.805 TCP 12.102.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-09-30 14:59:44.482 00:06:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 15:05:16.922 00:00:11.816 TCP 12.102.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:05:46.831 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:05:47.037 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:05:46.945 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:05:46.818 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:05:47.042 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:05:47.016 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:05:46.796 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:06:18.778 00:00:11.758 TCP 12.102.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:01:44.479 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:07:20.573 00:00:11.811 TCP 12.102.0.1:35170 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:08:22.421 00:00:11.801 TCP 12.102.0.1:49626 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:09:24.266 00:00:11.804 TCP 12.102.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:10:26.107 00:00:11.819 TCP 12.102.0.1:56632 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:10:46.843 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:10:47.061 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:10:47.003 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:10:46.865 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:10:46.988 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:10:46.880 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:10:46.962 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:11:27.964 00:00:11.804 TCP 12.102.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:06:44.483 00:06:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 15:12:29.812 00:00:11.802 TCP 12.102.0.1:53076 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:13:31.651 00:00:11.820 TCP 12.102.0.1:33284 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:08:44.482 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:14:33.506 00:00:11.815 TCP 12.102.0.1:38758 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:15:46.976 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:15:47.226 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:15:47.362 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:15:46.904 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:15:35.363 00:00:11.838 TCP 12.102.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:15:46.999 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:15:47.131 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:15:47.184 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:16:37.240 00:00:11.802 TCP 12.102.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:17:39.083 00:00:11.796 TCP 12.102.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:13:44.483 00:06:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 15:18:40.923 00:00:11.818 TCP 12.102.0.1:37926 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:19:42.773 00:00:11.804 TCP 12.102.0.1:34828 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:20:47.056 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:20:47.280 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:20:47.094 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:20:47.154 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:20:47.280 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:20:47.160 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:20:47.133 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:15:44.483 00:06:00.173 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:20:44.612 00:00:11.798 TCP 12.102.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:21:46.450 00:00:11.805 TCP 12.102.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:22:48.290 00:00:11.942 TCP 12.102.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:23:50.269 00:00:11.801 TCP 12.102.0.1:46668 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:24:52.112 00:00:11.804 TCP 12.102.0.1:47916 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:20:44.489 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 15:25:47.260 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:25:47.588 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:25:47.370 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:25:47.246 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:25:47.471 00:00:00.037 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:25:47.401 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:25:47.224 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:25:53.955 00:00:11.812 TCP 12.102.0.1:52172 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:26:55.800 00:00:11.798 TCP 12.102.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:22:44.487 00:06:00.178 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:27:57.637 00:00:12.379 TCP 12.102.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:29:00.088 00:00:11.803 TCP 12.102.0.1:56288 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:30:01.932 00:00:11.826 TCP 12.102.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:30:47.206 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:30:47.598 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:30:47.321 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:30:47.331 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:30:47.463 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:30:47.268 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:30:47.309 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:31:03.804 00:00:11.806 TCP 12.102.0.1:50780 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:32:05.648 00:00:11.800 TCP 12.102.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:27:44.491 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 15:33:07.485 00:00:11.806 TCP 12.102.0.1:56846 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:34:09.325 00:00:11.802 TCP 12.102.0.1:46506 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:29:44.489 00:06:00.178 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:35:11.168 00:00:11.794 TCP 12.102.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:35:47.696 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:35:47.698 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:35:47.779 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:35:47.708 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:35:47.613 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:35:47.582 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:35:47.685 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:36:13.000 00:00:11.802 TCP 12.102.0.1:57856 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:37:14.847 00:00:11.803 TCP 12.102.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:38:16.687 00:00:11.802 TCP 12.102.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:39:18.535 00:00:11.800 TCP 12.102.0.1:52644 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:34:44.495 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 15:40:20.375 00:00:11.775 TCP 12.102.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:40:47.737 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:40:47.951 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:40:47.711 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:40:47.756 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:40:47.815 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:40:47.906 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:40:47.688 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:41:22.191 00:00:11.800 TCP 12.102.0.1:51340 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:36:44.491 00:06:00.177 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:42:24.054 00:00:11.804 TCP 12.102.0.1:41056 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:43:25.897 00:00:11.802 TCP 12.102.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:44:27.738 00:00:11.801 TCP 12.102.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:45:29.578 00:00:11.807 TCP 12.102.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:45:47.630 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:45:47.810 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:45:47.694 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:45:47.737 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:45:47.811 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:45:47.831 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:45:47.672 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:46:31.420 00:00:11.799 TCP 12.102.0.1:33390 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:41:44.496 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 15:47:33.258 00:00:12.604 TCP 12.102.0.1:57194 -> 1.101.0.1:3000 15 1926 1 2025-09-30 15:43:44.494 00:06:00.177 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:48:35.900 00:00:11.802 TCP 12.102.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:49:37.741 00:00:11.798 TCP 12.102.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:50:47.590 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:50:47.720 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:50:47.696 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:50:47.936 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:50:47.793 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:50:47.847 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:50:47.567 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:50:39.577 00:00:11.800 TCP 12.102.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:51:41.415 00:00:11.800 TCP 12.102.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:52:43.254 00:00:11.817 TCP 12.102.0.1:38588 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:48:44.498 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-30 15:53:45.105 00:00:11.795 TCP 12.102.0.1:46744 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:54:46.938 00:00:11.766 TCP 12.102.0.1:50846 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:55:47.844 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-30 15:55:47.933 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 15:55:47.841 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-30 15:55:47.828 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-30 15:55:48.082 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-30 15:55:47.831 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-30 15:55:47.806 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-30 15:50:44.496 00:06:00.177 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-30 15:55:48.741 00:00:16.186 TCP 12.102.0.1:54782 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:56:54.968 00:00:11.820 TCP 12.102.0.1:38270 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:57:56.827 00:00:11.772 TCP 12.102.0.1:48844 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 259, avg pps: 0, avg bpp: 109 Time window: 2025-09-30 14:54:44 - 2025-09-30 15:58:08 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0039s User: 0.0010s Wall: 0.0019s flows/second: 85389.8 Runtime: 0.0019s