Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 02:59:14.428 00:00:11.804 TCP 12.102.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:00:16.268 00:00:11.799 TCP 12.102.0.1:51588 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:55:44.854 00:06:00.126 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 03:01:01.651 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.644 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.918 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.839 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.362 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.813 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.817 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:01:18.105 00:00:11.759 TCP 12.102.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:02:19.901 00:00:11.827 TCP 12.102.0.1:43006 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:03:21.770 00:00:11.756 TCP 12.102.0.1:35786 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:04:23.564 00:00:11.799 TCP 12.102.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:05:25.405 00:00:11.801 TCP 12.102.0.1:46718 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:00:44.858 00:06:00.125 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:06:01.196 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.393 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.556 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.439 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.425 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.546 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:06:01.416 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:06:27.239 00:00:11.761 TCP 12.102.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:07:29.059 00:00:11.801 TCP 12.102.0.1:47442 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:02:44.855 00:06:00.130 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 03:08:30.898 00:00:11.809 TCP 12.102.0.1:38278 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:09:32.747 00:00:11.800 TCP 12.102.0.1:44752 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:10:34.589 00:00:11.805 TCP 12.102.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:11:01.490 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.451 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.324 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.513 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.578 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.459 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.491 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:11:36.430 00:00:11.828 TCP 12.102.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:07:44.858 00:06:00.136 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:12:38.295 00:00:11.825 TCP 12.102.0.1:42820 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:13:40.157 00:00:11.816 TCP 12.102.0.1:40052 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:09:44.856 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 03:14:42.010 00:00:11.886 TCP 12.102.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:15:43.937 00:00:11.815 TCP 12.102.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:16:01.354 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.610 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.438 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.317 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.440 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.203 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:16:01.297 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:16:45.795 00:00:11.804 TCP 12.102.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:17:47.639 00:00:11.762 TCP 12.102.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:18:49.440 00:00:11.838 TCP 12.102.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:14:44.860 00:06:00.137 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:19:51.330 00:00:11.805 TCP 12.102.0.1:57822 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:16:44.857 00:05:00.145 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:21:01.789 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:21:01.712 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.836 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.543 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.812 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.746 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.628 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:20:53.174 00:00:11.781 TCP 12.102.0.1:50374 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:21:55.017 00:00:11.818 TCP 12.102.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:22:56.872 00:00:11.809 TCP 12.102.0.1:58506 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:23:58.719 00:00:11.773 TCP 12.102.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:25:00.532 00:00:11.814 TCP 12.102.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:26:01.758 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.854 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.855 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.716 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.848 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.780 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:26:01.692 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:26:02.386 00:00:11.769 TCP 12.102.0.1:48124 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:21:44.861 00:06:00.137 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 03:22:44.859 00:05:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:27:04.194 00:00:11.814 TCP 12.102.0.1:56526 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:28:06.070 00:00:11.814 TCP 12.102.0.1:60324 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:29:07.924 00:00:11.788 TCP 12.102.0.1:49718 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:30:09.752 00:00:11.761 TCP 12.102.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:31:01.816 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:31:01.971 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:31:02.017 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.862 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.839 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.968 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.748 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:31:11.550 00:00:11.815 TCP 12.102.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:32:13.405 00:00:11.766 TCP 12.102.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:28:44.863 00:05:00.139 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:28:44.860 00:05:00.145 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:33:15.208 00:00:11.802 TCP 12.102.0.1:50880 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:34:17.073 00:00:11.802 TCP 12.102.0.1:60038 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:35:18.914 00:00:11.785 TCP 12.102.0.1:54056 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:36:01.866 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:36:01.991 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.888 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.942 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.888 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.949 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:36:01.789 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:36:20.735 00:00:11.819 TCP 12.102.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:37:22.591 00:00:11.800 TCP 12.102.0.1:37504 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:38:24.427 00:00:11.813 TCP 12.102.0.1:40582 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:34:44.864 00:05:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:34:44.868 00:05:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:39:26.280 00:00:11.801 TCP 12.102.0.1:33594 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:40:28.117 00:00:11.806 TCP 12.102.0.1:55416 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:41:01.986 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.090 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.084 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.127 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.148 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:41:01.953 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:41:02.105 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:41:29.961 00:00:11.817 TCP 12.102.0.1:56254 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:42:31.814 00:00:11.864 TCP 12.102.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:43:33.710 00:00:11.799 TCP 12.102.0.1:39756 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:40:44.869 00:05:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:44:35.554 00:00:11.807 TCP 12.102.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:40:44.866 00:05:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:45:37.397 00:00:11.805 TCP 12.102.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:46:01.869 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:46:02.091 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:46:02.582 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:46:01.975 00:00:00.028 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:46:01.869 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:46:02.622 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:46:01.952 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:46:39.243 00:00:11.759 TCP 12.102.0.1:54892 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:47:41.070 00:00:11.850 TCP 12.102.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:48:42.958 00:00:11.757 TCP 12.102.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:49:44.754 00:00:11.801 TCP 12.102.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:46:44.868 00:05:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:46:44.870 00:05:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:50:46.594 00:00:11.767 TCP 12.102.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:51:02.220 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:51:02.314 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.245 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.243 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.106 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.250 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.328 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:51:48.401 00:00:11.812 TCP 12.102.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:52:50.250 00:00:12.666 TCP 12.102.0.1:42588 -> 1.101.0.1:3000 17 2241 1 2025-10-01 03:53:52.958 00:00:11.800 TCP 12.102.0.1:60574 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:54:54.797 00:00:11.797 TCP 12.102.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:56:02.442 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 03:56:02.549 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.295 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.518 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.464 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.337 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.206 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 03:55:56.636 00:00:11.799 TCP 12.102.0.1:55948 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:52:44.871 00:05:00.174 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-01 03:52:44.873 00:05:00.169 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-01 03:56:58.472 00:00:11.803 TCP 12.102.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:58:00.312 00:00:11.799 TCP 12.102.0.1:46452 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 124191, total packets: 1138, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-10-01 02:55:44 - 2025-10-01 03:58:12 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0026s User: 0.0026s Wall: 0.0025s flows/second: 64918.6 Runtime: 0.0025s