Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 21:59:16.237 00:00:11.810 TCP 12.102.0.1:51738 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:54:45.239 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:00:18.085 00:00:11.808 TCP 12.102.0.1:50398 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:01:24.013 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:01:24.118 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:01:24.262 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:01:24.137 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:01:24.271 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:01:24.143 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:01:24.115 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:01:19.933 00:00:11.816 TCP 12.102.0.1:46910 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:56:45.242 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:02:21.784 00:00:11.768 TCP 12.102.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:03:23.584 00:00:11.799 TCP 12.102.0.1:33952 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:04:25.424 00:00:11.802 TCP 12.102.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:05:27.264 00:00:11.804 TCP 12.102.0.1:45430 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:06:24.101 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:06:24.360 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:06:24.349 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:06:24.217 00:00:00.028 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:06:24.359 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:06:24.418 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:06:24.194 00:00:00.028 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:06:29.108 00:00:11.800 TCP 12.102.0.1:55676 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:01:45.242 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:07:30.944 00:00:11.774 TCP 12.102.0.1:51948 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:03:45.245 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:08:32.752 00:00:11.801 TCP 12.102.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:09:34.592 00:00:11.802 TCP 12.102.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:10:36.433 00:00:11.804 TCP 12.102.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:11:24.362 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:11:24.597 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:11:24.497 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:11:24.618 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:11:24.386 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:11:24.726 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:11:24.490 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:11:38.275 00:00:11.801 TCP 12.102.0.1:44266 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:12:40.119 00:00:11.858 TCP 12.102.0.1:43854 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:08:45.245 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:13:42.025 00:00:11.802 TCP 12.102.0.1:37648 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:14:43.864 00:00:11.802 TCP 12.102.0.1:37920 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:10:45.250 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:15:45.702 00:00:11.854 TCP 12.102.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:16:24.439 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:16:24.436 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:16:24.387 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:16:24.321 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:16:24.434 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:16:24.397 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:16:24.298 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:16:47.592 00:00:11.804 TCP 12.102.0.1:45182 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:17:49.449 00:00:11.807 TCP 12.102.0.1:55376 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:18:51.294 00:00:11.816 TCP 12.102.0.1:42170 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:19:53.143 00:00:18.393 TCP 12.102.0.1:46392 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:15:45.249 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:21:01.574 00:00:11.802 TCP 12.102.0.1:59762 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:21:24.657 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:21:24.662 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:21:24.674 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:21:24.608 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:21:24.739 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:21:24.397 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:21:24.586 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:22:03.415 00:00:11.811 TCP 12.102.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:17:45.251 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:23:05.266 00:00:11.812 TCP 12.102.0.1:40700 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:24:07.113 00:00:11.757 TCP 12.102.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:25:08.916 00:00:11.833 TCP 12.102.0.1:42390 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:26:10.788 00:00:11.808 TCP 12.102.0.1:43110 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:26:24.767 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:26:24.671 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:26:24.804 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:26:24.947 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:26:24.750 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:26:24.634 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:26:24.926 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:27:12.639 00:00:11.875 TCP 12.102.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:22:45.248 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:28:14.551 00:00:11.805 TCP 12.102.0.1:59974 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:29:16.398 00:00:11.798 TCP 12.102.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:24:45.252 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:30:18.233 00:00:11.800 TCP 12.102.0.1:49680 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:31:24.973 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:31:24.925 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:31:24.871 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:31:25.079 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:31:24.996 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:31:25.250 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:31:25.008 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:31:20.081 00:00:11.797 TCP 12.102.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:32:21.924 00:00:11.816 TCP 12.102.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:33:23.779 00:00:11.806 TCP 12.102.0.1:42524 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:34:25.628 00:00:11.800 TCP 12.102.0.1:53632 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:29:45.251 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:35:27.469 00:00:11.805 TCP 12.102.0.1:38784 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:36:24.941 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:36:24.942 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:36:25.030 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:36:24.762 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:36:25.048 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:36:24.665 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:36:24.740 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:36:29.318 00:00:11.814 TCP 12.102.0.1:40140 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:31:45.257 00:06:00.162 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:37:31.169 00:00:11.807 TCP 12.102.0.1:53882 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:38:33.039 00:00:11.796 TCP 12.102.0.1:41412 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:39:34.876 00:00:13.052 TCP 12.102.0.1:36816 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:40:37.983 00:00:11.762 TCP 12.102.0.1:39954 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:41:24.858 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:41:25.067 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:41:25.010 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:41:25.106 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:41:24.881 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:41:25.094 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:41:24.890 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:36:45.253 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:41:39.782 00:00:11.805 TCP 12.102.0.1:48934 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:42:41.620 00:00:11.767 TCP 12.102.0.1:44114 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:38:45.255 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:43:43.432 00:00:11.759 TCP 12.102.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:44:45.230 00:00:11.820 TCP 12.102.0.1:53590 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:45:47.093 00:00:11.802 TCP 12.102.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:46:25.176 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:46:25.252 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:46:25.265 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:46:25.094 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:46:25.326 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:46:25.329 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:46:25.199 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:46:48.933 00:00:11.813 TCP 12.102.0.1:50586 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:47:50.788 00:00:11.800 TCP 12.102.0.1:50740 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:43:45.255 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:48:52.630 00:00:11.818 TCP 12.102.0.1:36850 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:49:54.489 00:00:11.801 TCP 12.102.0.1:44630 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:45:45.258 00:06:00.163 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:50:56.329 00:00:11.756 TCP 12.102.0.1:36726 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:51:25.190 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:51:25.246 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:51:25.373 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:51:25.380 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:51:25.213 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:51:25.442 00:00:00.031 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:51:25.315 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:51:58.120 00:00:11.761 TCP 12.102.0.1:43000 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:52:59.919 00:00:11.788 TCP 12.102.0.1:34466 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:54:01.747 00:00:11.853 TCP 12.102.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:55:03.636 00:00:11.797 TCP 12.102.0.1:39050 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:50:45.257 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-01 22:56:05.473 00:00:11.817 TCP 12.102.0.1:51230 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:56:25.964 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-01 22:56:26.005 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:56:25.991 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-01 22:56:26.203 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-01 22:56:26.172 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-01 22:56:26.034 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-01 22:56:26.180 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-01 22:57:07.328 00:00:11.762 TCP 12.102.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:52:45.259 00:06:00.163 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-01 22:58:09.127 00:00:11.808 TCP 12.102.0.1:47540 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 258, avg pps: 0, avg bpp: 108 Time window: 2025-10-01 21:54:45 - 2025-10-01 22:58:45 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0063s User: 0.0000s Wall: 0.0028s flows/second: 57802.6 Runtime: 0.0028s