Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 00:59:40.926 00:00:11.819 TCP 12.102.0.1:37854 -> 1.101.0.1:3000 11 1507 1 2025-10-04 00:55:46.160 00:06:00.188 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:00:42.779 00:00:11.806 TCP 12.102.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:01:44.625 00:00:11.800 TCP 12.102.0.1:45594 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:02:25.622 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:02:25.430 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:02:25.724 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:02:25.589 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:02:25.822 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:02:25.646 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:02:25.567 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:02:46.461 00:00:11.802 TCP 12.102.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:03:48.302 00:00:11.818 TCP 12.102.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-10-04 00:59:46.162 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 01:04:50.152 00:00:11.812 TCP 12.102.0.1:35160 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:05:52.008 00:00:11.820 TCP 12.102.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:06:53.867 00:00:11.804 TCP 12.102.0.1:51146 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:07:25.968 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:07:25.900 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:07:25.743 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:07:25.991 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:07:25.712 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:07:26.009 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:07:25.973 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:02:46.164 00:06:00.191 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:07:55.709 00:00:11.800 TCP 12.102.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:08:57.552 00:00:11.799 TCP 12.102.0.1:44860 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:09:59.391 00:00:11.807 TCP 12.102.0.1:39434 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:11:01.237 00:00:11.807 TCP 12.102.0.1:35962 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:06:46.161 00:06:00.196 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 01:12:03.079 00:00:11.801 TCP 12.102.0.1:35062 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:12:25.973 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:12:26.041 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:12:26.082 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:12:26.070 00:00:00.035 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:12:26.212 00:00:00.039 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:12:26.025 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:12:26.047 00:00:00.036 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:13:04.916 00:00:11.783 TCP 12.102.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:14:06.741 00:00:11.798 TCP 12.102.0.1:60570 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:09:46.164 00:06:00.191 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:15:08.575 00:00:11.807 TCP 12.102.0.1:32864 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:16:10.421 00:00:11.807 TCP 12.102.0.1:51120 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:17:26.016 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:17:12.264 00:00:11.768 TCP 12.102.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:17:26.016 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:17:25.886 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:17:25.982 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:17:25.843 00:00:00.017 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:17:25.928 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:17:25.960 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:18:14.074 00:00:11.809 TCP 12.102.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:13:46.163 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 01:19:15.918 00:00:11.845 TCP 12.102.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:20:17.799 00:00:11.804 TCP 12.102.0.1:40610 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:21:19.644 00:00:11.818 TCP 12.102.0.1:48842 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:16:46.166 00:06:00.192 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:22:25.938 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:22:26.047 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:22:26.151 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:22:26.014 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:22:25.960 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:22:26.219 00:00:00.045 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:22:25.963 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:22:21.499 00:00:11.797 TCP 12.102.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:23:23.334 00:00:12.194 TCP 12.102.0.1:58956 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:24:25.567 00:00:11.802 TCP 12.102.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:25:27.408 00:00:11.806 TCP 12.102.0.1:46306 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:20:46.168 00:06:00.194 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 01:26:29.254 00:00:11.810 TCP 12.102.0.1:58866 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:27:25.939 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:27:26.119 00:00:00.034 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:27:26.287 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:27:26.151 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:27:25.962 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:27:26.248 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:27:26.039 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:27:31.098 00:00:12.067 TCP 12.102.0.1:55834 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:23:46.172 00:06:00.189 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:28:33.205 00:00:11.762 TCP 12.102.0.1:42892 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:29:35.023 00:00:11.809 TCP 12.102.0.1:34890 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:30:36.870 00:00:11.817 TCP 12.102.0.1:42498 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:31:38.723 00:00:11.801 TCP 12.102.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:32:26.387 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:32:26.502 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:32:26.354 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:32:26.499 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:32:26.410 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:32:26.448 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:32:26.333 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:27:46.170 00:06:00.193 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 01:32:40.558 00:00:17.799 TCP 12.102.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:33:48.395 00:00:11.801 TCP 12.102.0.1:48704 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:34:50.232 00:00:11.802 TCP 12.102.0.1:44872 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:30:46.173 00:06:00.191 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:35:52.075 00:00:11.807 TCP 12.102.0.1:58820 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:36:53.921 00:00:11.828 TCP 12.102.0.1:57596 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:37:26.250 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:37:26.469 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:37:26.286 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:37:26.286 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:37:26.156 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:37:26.358 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:37:26.264 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:37:55.783 00:00:11.806 TCP 12.102.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:38:57.630 00:00:11.798 TCP 12.102.0.1:35698 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:34:46.172 00:06:00.196 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 01:39:59.469 00:00:11.761 TCP 12.102.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:41:01.264 00:00:11.803 TCP 12.102.0.1:56458 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:42:03.106 00:00:12.932 TCP 12.102.0.1:52486 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:42:26.835 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:42:26.967 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:42:27.095 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:42:26.751 00:00:00.053 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:42:27.119 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:42:26.844 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:42:26.729 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:37:46.174 00:06:00.192 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:43:06.078 00:00:11.815 TCP 12.102.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:44:07.922 00:00:11.827 TCP 12.102.0.1:44634 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:45:09.795 00:00:11.759 TCP 12.102.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:46:11.594 00:00:11.804 TCP 12.102.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:41:46.172 00:06:00.198 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 01:47:13.433 00:00:11.804 TCP 12.102.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:47:25.787 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:47:25.769 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:47:25.786 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:47:25.733 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:47:25.738 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:47:25.771 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:47:25.711 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:48:15.279 00:00:12.250 TCP 12.102.0.1:48996 -> 1.101.0.1:3000 15 1926 1 2025-10-04 01:49:17.565 00:00:11.799 TCP 12.102.0.1:38820 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:44:46.184 00:06:00.183 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:50:19.405 00:00:11.802 TCP 12.102.0.1:50564 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:51:21.245 00:00:11.800 TCP 12.102.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:52:26.567 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:52:26.661 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:52:26.649 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:52:26.589 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:52:26.504 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:52:26.586 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:52:26.567 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:52:23.087 00:00:11.811 TCP 12.102.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:53:24.939 00:00:11.812 TCP 12.102.0.1:38416 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:48:46.182 00:06:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 01:54:26.790 00:00:11.797 TCP 12.102.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:55:28.628 00:00:11.804 TCP 12.102.0.1:59474 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:56:30.470 00:00:11.808 TCP 12.102.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:51:46.186 00:06:00.184 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 01:57:26.490 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 01:57:26.640 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 01:57:26.730 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:57:26.774 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 01:57:26.513 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 01:57:26.738 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 01:57:26.514 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 01:57:32.319 00:00:11.770 TCP 12.102.0.1:54996 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:58:34.127 00:00:11.800 TCP 12.102.0.1:51034 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 261, avg pps: 0, avg bpp: 109 Time window: 2025-10-04 00:55:46 - 2025-10-04 01:58:45 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0061s User: 0.0000s Wall: 0.0024s flows/second: 67629.5 Runtime: 0.0024s