Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 14:59:05.314 00:00:11.814 TCP 12.102.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:00:07.169 00:00:11.812 TCP 12.102.0.1:35334 -> 1.101.0.1:3000 11 1507 1 2025-10-03 14:56:45.953 00:05:00.222 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:01:09.030 00:00:11.807 TCP 12.102.0.1:59870 -> 1.101.0.1:3000 11 1507 1 2025-10-03 14:57:45.956 00:05:00.217 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:02:13.524 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:02:13.510 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:02:13.629 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:02:13.689 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:02:13.547 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:02:13.688 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:02:13.555 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:02:10.872 00:00:11.764 TCP 12.102.0.1:52558 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:03:12.676 00:00:12.637 TCP 12.102.0.1:49046 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:04:15.355 00:00:11.816 TCP 12.102.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:05:17.214 00:00:11.805 TCP 12.102.0.1:52772 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:06:19.079 00:00:11.759 TCP 12.102.0.1:50486 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:02:45.954 00:05:00.222 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:07:13.863 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:07:13.684 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:07:13.710 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:07:13.947 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:07:13.710 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:07:13.658 00:00:00.008 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:07:13.687 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:07:20.879 00:00:11.804 TCP 12.102.0.1:43440 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:03:45.958 00:05:00.217 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:08:22.721 00:00:11.821 TCP 12.102.0.1:59890 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:09:24.579 00:00:11.809 TCP 12.102.0.1:48538 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:10:26.423 00:00:11.797 TCP 12.102.0.1:59998 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:11:28.256 00:00:11.804 TCP 12.102.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:12:13.924 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:12:13.854 00:00:00.040 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:12:13.963 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:12:13.810 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:12:13.639 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:12:13.713 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:12:13.787 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:12:30.101 00:00:11.800 TCP 12.102.0.1:60358 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:08:45.957 00:05:00.221 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:13:31.941 00:00:11.803 TCP 12.102.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:09:45.960 00:05:00.215 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:14:33.783 00:00:11.804 TCP 12.102.0.1:33518 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:15:35.627 00:00:11.802 TCP 12.102.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:16:37.462 00:00:11.760 TCP 12.102.0.1:57110 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:17:13.836 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:17:13.796 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:17:13.802 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:17:13.859 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:17:13.781 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:17:14.045 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:17:14.044 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:17:39.264 00:00:11.799 TCP 12.102.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:14:45.957 00:05:00.223 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:18:41.103 00:00:11.795 TCP 12.102.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:15:45.961 00:05:00.217 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:19:42.936 00:00:11.814 TCP 12.102.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:20:44.783 00:00:11.799 TCP 12.102.0.1:54594 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:21:46.618 00:00:11.797 TCP 12.102.0.1:42574 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:22:13.973 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:22:13.947 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:22:14.201 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:22:14.173 00:00:00.040 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:22:13.995 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:22:14.009 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:22:14.105 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:22:48.455 00:00:11.806 TCP 12.102.0.1:43830 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:23:50.297 00:00:11.807 TCP 12.102.0.1:33256 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:20:45.960 00:05:00.223 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:24:52.141 00:00:11.905 TCP 12.102.0.1:52098 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:21:45.963 00:05:00.218 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:25:54.087 00:00:11.805 TCP 12.102.0.1:50278 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:26:55.927 00:00:11.869 TCP 12.102.0.1:41356 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:27:14.622 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:27:14.682 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:27:14.844 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:27:14.705 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:27:14.646 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:27:14.768 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:27:14.814 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:27:57.836 00:00:11.757 TCP 12.102.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:28:59.633 00:00:11.800 TCP 12.102.0.1:48850 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:30:01.474 00:00:11.805 TCP 12.102.0.1:47814 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:26:45.962 00:05:00.222 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:31:03.317 00:00:11.757 TCP 12.102.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:27:45.964 00:05:00.221 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:32:05.112 00:00:11.812 TCP 12.102.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:32:14.221 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:32:14.302 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:32:14.023 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:32:14.124 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:32:14.084 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:32:14.139 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:32:14.102 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:33:06.956 00:00:11.770 TCP 12.102.0.1:58556 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:34:08.765 00:00:11.796 TCP 12.102.0.1:43396 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:35:10.600 00:00:11.802 TCP 12.102.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:36:12.448 00:00:11.815 TCP 12.102.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:32:45.963 00:05:00.222 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:37:13.954 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:37:13.932 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:37:14.278 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:37:14.051 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:37:14.240 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:37:14.312 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:37:14.392 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:37:14.302 00:00:11.802 TCP 12.102.0.1:37166 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:33:45.967 00:05:00.217 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:38:16.147 00:00:11.774 TCP 12.102.0.1:45174 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:39:17.957 00:00:11.876 TCP 12.102.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:40:19.872 00:00:11.797 TCP 12.102.0.1:58808 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:41:21.717 00:00:11.863 TCP 12.102.0.1:51808 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:42:14.563 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:42:14.702 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:42:14.341 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:42:14.583 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:42:14.341 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:42:14.395 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:42:14.561 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:42:23.623 00:00:11.765 TCP 12.102.0.1:54776 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:38:45.964 00:05:00.225 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:43:25.427 00:00:11.758 TCP 12.102.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:39:45.966 00:05:00.219 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:44:27.232 00:00:11.813 TCP 12.102.0.1:40092 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:45:29.087 00:00:11.833 TCP 12.102.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:46:30.955 00:00:11.816 TCP 12.102.0.1:41862 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:47:14.630 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:47:14.384 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:47:14.669 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:47:14.410 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:47:14.492 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:47:14.482 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:47:14.386 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:47:32.811 00:00:11.828 TCP 12.102.0.1:36534 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:44:45.965 00:05:00.226 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:48:34.676 00:00:11.811 TCP 12.102.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:45:45.969 00:05:00.219 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:49:36.527 00:00:11.799 TCP 12.102.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:50:38.366 00:00:11.874 TCP 12.102.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:51:40.269 00:00:11.817 TCP 12.102.0.1:34840 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:52:14.786 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:52:15.054 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:52:14.821 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:52:14.808 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:52:14.776 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:52:14.762 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:52:14.632 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:52:42.108 00:00:11.805 TCP 12.102.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:53:43.941 00:00:11.768 TCP 12.102.0.1:48070 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:50:45.965 00:05:00.226 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-03 15:54:45.748 00:00:11.854 TCP 12.102.0.1:43436 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:51:45.971 00:05:00.219 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-03 15:55:47.644 00:00:11.821 TCP 12.102.0.1:54602 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:56:49.504 00:00:11.805 TCP 12.102.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-10-03 15:57:14.604 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-03 15:57:14.608 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 15:57:14.701 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-03 15:57:14.627 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-03 15:57:14.879 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-03 15:57:14.643 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-03 15:57:14.597 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-03 15:57:51.351 00:00:12.241 TCP 12.102.0.1:60462 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 269, avg pps: 0, avg bpp: 109 Time window: 2025-10-03 14:56:45 - 2025-10-03 15:58:03 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0026s User: 0.0026s Wall: 0.0023s flows/second: 68996.5 Runtime: 0.0024s