Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 05:59:10.190 00:00:11.765 TCP 12.102.0.1:49216 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:00:11.998 00:00:11.810 TCP 12.102.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:01:13.838 00:00:11.807 TCP 12.102.0.1:53968 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:56:46.262 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:02:15.684 00:00:11.801 TCP 12.102.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:02:31.666 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:02:31.690 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:02:31.838 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:02:31.706 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:02:31.675 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:02:31.573 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:02:31.631 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:03:17.526 00:00:11.777 TCP 12.102.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:04:19.342 00:00:11.794 TCP 12.102.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:05:21.177 00:00:11.812 TCP 12.102.0.1:55208 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:00:46.260 00:06:00.200 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 06:06:23.038 00:00:11.804 TCP 12.102.0.1:39030 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:07:31.704 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:07:31.968 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:07:31.903 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:07:31.786 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:07:32.005 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:07:31.783 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:07:31.764 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:07:24.880 00:00:11.810 TCP 12.102.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:08:26.722 00:00:11.809 TCP 12.102.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:03:46.263 00:06:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:09:28.564 00:00:11.855 TCP 12.102.0.1:58920 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:10:30.458 00:00:11.820 TCP 12.102.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:11:32.316 00:00:11.859 TCP 12.102.0.1:56834 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:12:31.854 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:12:32.025 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:12:31.713 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:12:31.961 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:12:31.879 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:12:31.964 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:12:31.888 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:07:46.265 00:06:00.197 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 06:12:34.213 00:00:11.799 TCP 12.102.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:13:36.077 00:00:11.799 TCP 12.102.0.1:48042 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:14:37.910 00:00:11.815 TCP 12.102.0.1:59344 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:10:46.267 00:06:00.191 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:15:39.758 00:00:11.801 TCP 12.102.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:16:41.598 00:00:11.815 TCP 12.102.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:17:31.977 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:17:31.919 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:17:32.084 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:17:31.873 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:17:32.161 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:17:31.870 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:17:31.849 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:17:43.452 00:00:11.804 TCP 12.102.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:18:45.296 00:00:11.807 TCP 12.102.0.1:52098 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:14:46.267 00:06:00.196 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 06:19:47.139 00:00:11.817 TCP 12.102.0.1:49866 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:20:48.991 00:00:11.814 TCP 12.102.0.1:37262 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:21:50.842 00:00:11.798 TCP 12.102.0.1:44046 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:22:31.840 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:22:31.926 00:00:00.038 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:22:31.847 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:22:32.403 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:22:32.588 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:22:32.469 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:22:32.381 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:17:46.273 00:06:00.188 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:22:52.680 00:00:11.814 TCP 12.102.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:23:54.527 00:00:11.758 TCP 12.102.0.1:46754 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:24:56.325 00:00:20.007 TCP 12.102.0.1:58676 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:26:06.370 00:00:11.814 TCP 12.102.0.1:41292 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:21:46.271 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 06:27:08.224 00:00:11.806 TCP 12.102.0.1:60248 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:27:32.172 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:27:32.008 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:27:32.390 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:27:32.377 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:27:32.195 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:27:32.201 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:27:32.303 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:28:10.071 00:00:11.814 TCP 12.102.0.1:60286 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:29:11.923 00:00:11.817 TCP 12.102.0.1:43346 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:24:46.278 00:06:00.187 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:30:13.783 00:00:12.033 TCP 12.102.0.1:33536 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:31:15.867 00:00:11.815 TCP 12.102.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:32:33.467 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:32:33.575 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:32:17.722 00:00:11.799 TCP 12.102.0.1:48812 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:32:33.414 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:32:33.495 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:32:33.491 00:00:00.032 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:32:33.504 00:00:00.038 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:32:33.472 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:33:19.561 00:00:11.810 TCP 12.102.0.1:33952 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:28:46.281 00:06:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 06:34:21.407 00:00:11.806 TCP 12.102.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:35:23.249 00:00:11.761 TCP 12.102.0.1:50618 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:36:25.078 00:00:11.807 TCP 12.102.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:31:46.284 00:06:00.184 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:37:32.201 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:37:32.262 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:37:32.364 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:37:32.358 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:37:32.224 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:37:32.202 00:00:00.051 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:37:32.312 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:37:26.925 00:00:11.822 TCP 12.102.0.1:57782 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:38:28.785 00:00:11.802 TCP 12.102.0.1:33870 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:39:30.628 00:00:11.800 TCP 12.102.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:40:32.466 00:00:11.804 TCP 12.102.0.1:46524 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:35:46.282 00:06:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 06:41:34.306 00:00:11.806 TCP 12.102.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:42:32.327 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:42:32.514 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:42:32.565 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:42:32.442 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:42:32.490 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:42:32.372 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:42:32.419 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:42:36.143 00:00:11.866 TCP 12.102.0.1:42264 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:38:46.285 00:06:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:43:38.074 00:00:11.800 TCP 12.102.0.1:33020 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:44:39.911 00:00:11.826 TCP 12.102.0.1:33736 -> 1.101.0.1:3000 12 1559 1 2025-10-04 06:45:41.769 00:00:11.798 TCP 12.102.0.1:39338 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:46:43.602 00:00:11.803 TCP 12.102.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:47:31.708 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:47:31.711 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:47:31.758 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:47:31.717 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:47:31.732 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:47:31.737 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:47:31.718 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:42:46.283 00:06:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 06:47:45.444 00:00:11.762 TCP 12.102.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:48:47.244 00:00:11.840 TCP 12.102.0.1:53888 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:49:49.123 00:00:11.769 TCP 12.102.0.1:39194 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:45:46.285 00:06:00.187 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:50:50.927 00:00:11.815 TCP 12.102.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:51:52.787 00:00:11.809 TCP 12.102.0.1:38680 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:52:32.430 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:52:32.454 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:52:32.671 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:52:32.556 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:52:32.576 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:52:32.482 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:52:32.664 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:52:54.637 00:00:11.810 TCP 12.102.0.1:57820 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:53:56.486 00:00:11.796 TCP 12.102.0.1:34628 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:49:46.285 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-04 06:54:58.321 00:00:11.806 TCP 12.102.0.1:48258 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:56:00.170 00:00:11.800 TCP 12.102.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:57:02.009 00:00:11.824 TCP 12.102.0.1:35420 -> 1.101.0.1:3000 11 1507 1 2025-10-04 06:57:32.601 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-04 06:57:32.759 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-04 06:57:32.632 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-04 06:57:32.603 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-04 06:57:32.792 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 06:57:32.492 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-04 06:57:32.625 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-04 06:52:46.294 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-04 06:58:03.855 00:00:11.759 TCP 12.102.0.1:52112 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123263, total packets: 1129, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-10-04 05:56:46 - 2025-10-04 06:58:46 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0044s User: 0.0009s Wall: 0.0020s flows/second: 81160.3 Runtime: 0.0020s