Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 10:58:43.512 00:00:11.761 TCP 12.102.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:59:45.309 00:00:11.832 TCP 12.102.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:00:47.178 00:00:11.803 TCP 12.102.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:01:39.875 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:01:39.788 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:01:39.679 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:01:39.835 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:01:39.859 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:01:39.548 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:01:39.812 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:01:49.019 00:00:11.809 TCP 12.102.0.1:42692 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:02:50.870 00:00:12.238 TCP 12.102.0.1:43232 -> 1.101.0.1:3000 15 1926 1 2025-10-02 10:58:45.455 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 11:03:53.145 00:00:11.808 TCP 12.102.0.1:54826 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:04:54.990 00:00:11.804 TCP 12.102.0.1:51848 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:00:45.457 00:06:00.190 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 11:05:56.832 00:00:11.758 TCP 12.102.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:06:39.876 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:06:39.700 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:06:39.802 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:06:39.968 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:06:39.898 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:06:40.122 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:06:39.957 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:06:58.629 00:00:11.798 TCP 12.102.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:08:00.468 00:00:11.802 TCP 12.102.0.1:38180 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:09:02.308 00:00:11.803 TCP 12.102.0.1:39772 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:10:04.149 00:00:11.804 TCP 12.102.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:05:45.456 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 11:11:06.000 00:00:11.758 TCP 12.102.0.1:43660 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:11:39.597 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:11:40.151 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:11:39.912 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:11:39.760 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:11:39.902 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:11:39.851 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:11:39.736 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:12:07.795 00:00:11.800 TCP 12.102.0.1:41050 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:07:45.461 00:06:00.187 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 11:13:09.632 00:00:12.119 TCP 12.102.0.1:57730 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:14:11.794 00:00:11.798 TCP 12.102.0.1:34536 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:15:13.631 00:00:11.801 TCP 12.102.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:16:15.472 00:00:11.824 TCP 12.102.0.1:59930 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:16:39.965 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:16:39.987 00:00:00.031 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:16:40.171 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:16:40.059 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:16:40.022 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:16:40.007 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:16:39.871 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:17:17.334 00:00:11.807 TCP 12.102.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:12:45.458 00:06:00.194 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 11:18:19.176 00:00:12.293 TCP 12.102.0.1:57250 -> 1.101.0.1:3000 15 1926 1 2025-10-02 11:19:21.511 00:00:11.811 TCP 12.102.0.1:54462 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:14:45.460 00:06:00.189 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 11:20:23.362 00:00:11.822 TCP 12.102.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:21:25.220 00:00:11.814 TCP 12.102.0.1:47466 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:21:39.905 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:21:40.020 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:21:40.126 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:21:40.031 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:21:40.183 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:21:40.174 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:21:40.010 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:22:27.078 00:00:11.802 TCP 12.102.0.1:48438 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:23:28.923 00:00:12.256 TCP 12.102.0.1:51072 -> 1.101.0.1:3000 15 1926 1 2025-10-02 11:24:31.218 00:00:11.806 TCP 12.102.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:19:45.459 00:06:00.193 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 11:25:33.078 00:00:11.801 TCP 12.102.0.1:50690 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:26:40.134 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:26:40.175 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:26:40.193 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:26:40.135 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:26:40.156 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:26:40.142 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:26:40.202 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:21:45.462 00:06:00.189 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 11:26:34.917 00:00:18.183 TCP 12.102.0.1:35200 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:27:43.146 00:00:11.811 TCP 12.102.0.1:56984 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:28:44.993 00:00:11.812 TCP 12.102.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:29:46.841 00:00:11.800 TCP 12.102.0.1:39748 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:30:48.685 00:00:11.801 TCP 12.102.0.1:42704 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:31:40.219 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:31:40.106 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:31:40.552 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:31:40.241 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:31:40.422 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:31:40.322 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:31:40.413 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:26:45.466 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 11:31:50.522 00:00:11.809 TCP 12.102.0.1:43752 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:32:52.370 00:00:11.824 TCP 12.102.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:28:45.468 00:06:00.186 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 11:33:54.238 00:00:11.801 TCP 12.102.0.1:37920 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:34:56.086 00:00:11.802 TCP 12.102.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:35:57.921 00:00:11.820 TCP 12.102.0.1:46724 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:36:40.549 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:36:40.500 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:36:40.296 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:36:40.407 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:36:40.572 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:36:40.784 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:36:40.650 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:36:59.784 00:00:11.799 TCP 12.102.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:38:01.624 00:00:11.836 TCP 12.102.0.1:37370 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:33:45.467 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 11:39:03.496 00:00:11.800 TCP 12.102.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:40:05.336 00:00:11.810 TCP 12.102.0.1:58038 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:35:45.470 00:06:00.186 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 11:41:07.181 00:00:11.799 TCP 12.102.0.1:56648 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:41:40.555 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:41:40.714 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:41:40.652 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:41:40.513 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:41:40.573 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:41:40.451 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:41:40.491 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:42:09.023 00:00:11.806 TCP 12.102.0.1:47970 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:43:10.863 00:00:11.809 TCP 12.102.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:44:12.707 00:00:11.806 TCP 12.102.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:45:14.552 00:00:11.869 TCP 12.102.0.1:56476 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:40:45.469 00:06:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 11:46:16.462 00:00:11.803 TCP 12.102.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:46:40.672 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:46:40.561 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:46:40.467 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:46:40.686 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:46:40.695 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:46:40.675 00:00:00.017 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:46:40.550 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:47:18.309 00:00:11.767 TCP 12.102.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:42:45.473 00:06:00.183 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 11:48:20.113 00:00:11.828 TCP 12.102.0.1:60458 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:49:21.979 00:00:11.800 TCP 12.102.0.1:42540 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:50:23.820 00:00:11.804 TCP 12.102.0.1:48262 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:51:25.664 00:00:11.803 TCP 12.102.0.1:59158 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:51:40.879 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:51:40.658 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:51:40.753 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:51:40.904 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:51:40.945 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:51:40.756 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:51:40.862 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:52:27.505 00:00:11.800 TCP 12.102.0.1:49728 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:47:45.471 00:06:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-02 11:53:29.347 00:00:11.841 TCP 12.102.0.1:43166 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:54:31.186 00:00:11.770 TCP 12.102.0.1:45150 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:49:45.474 00:06:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-02 11:55:32.992 00:00:11.822 TCP 12.102.0.1:39094 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:56:41.342 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-02 11:56:41.444 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:56:41.475 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-02 11:56:41.408 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-02 11:56:41.530 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-02 11:56:41.312 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-02 11:56:41.385 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-02 11:56:34.852 00:00:11.803 TCP 12.102.0.1:38748 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:57:36.708 00:00:12.236 TCP 12.102.0.1:44774 -> 1.101.0.1:3000 15 1926 1 2025-10-02 11:58:39.009 00:00:11.762 TCP 12.102.0.1:34216 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 125533, total packets: 1141, avg bps: 278, avg pps: 0, avg bpp: 110 Time window: 2025-10-02 10:58:43 - 2025-10-02 11:58:50 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0050s User: 0.0010s Wall: 0.0024s flows/second: 65407.4 Runtime: 0.0024s