Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 03:54:47.186 00:06:00.148 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 03:59:39.794 00:00:11.836 TCP 12.102.0.1:58832 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:00:41.667 00:00:11.811 TCP 12.102.0.1:51272 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:01:43.521 00:00:11.805 TCP 12.102.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:02:45.378 00:00:11.775 TCP 12.102.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:03:26.744 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:03:26.874 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:03:26.995 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:03:26.911 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:03:26.768 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:03:26.826 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:03:26.920 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:03:47.194 00:00:11.808 TCP 12.102.0.1:38432 -> 1.101.0.1:3000 11 1507 1 2025-10-06 03:59:47.191 00:06:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-06 04:04:49.073 00:00:11.771 TCP 12.102.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:05:50.887 00:00:11.801 TCP 12.102.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:01:47.191 00:06:00.148 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 04:06:52.728 00:00:11.815 TCP 12.102.0.1:52168 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:07:54.581 00:00:11.765 TCP 12.102.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:08:27.045 00:00:00.039 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:08:27.166 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:08:27.022 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:08:27.070 00:00:00.038 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:08:27.097 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:08:26.989 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:08:26.906 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:08:56.383 00:00:12.089 TCP 12.102.0.1:42922 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:09:58.516 00:00:11.802 TCP 12.102.0.1:59872 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:11:00.358 00:00:11.813 TCP 12.102.0.1:55780 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:06:47.193 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-06 04:12:02.214 00:00:11.798 TCP 12.102.0.1:47106 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:13:04.073 00:00:11.814 TCP 12.102.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:13:26.961 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:13:27.083 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:13:27.113 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:13:27.057 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:13:26.981 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:13:27.100 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:13:27.072 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:08:47.191 00:06:00.150 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 04:14:05.925 00:00:12.257 TCP 12.102.0.1:56026 -> 1.101.0.1:3000 15 1926 1 2025-10-06 04:15:08.246 00:00:11.808 TCP 12.102.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:16:10.088 00:00:11.805 TCP 12.102.0.1:41200 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:17:11.928 00:00:11.820 TCP 12.102.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:18:27.159 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:18:27.010 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:18:27.319 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:18:27.244 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:18:27.181 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:18:13.786 00:00:11.798 TCP 12.102.0.1:52486 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:18:27.188 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:18:27.247 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:13:47.195 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-06 04:19:15.626 00:00:11.797 TCP 12.102.0.1:50602 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:20:17.462 00:00:11.800 TCP 12.102.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:15:47.192 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 04:21:19.306 00:00:11.823 TCP 12.102.0.1:49688 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:22:21.169 00:00:11.806 TCP 12.102.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:23:27.377 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.491 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.343 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.279 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.578 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.513 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.256 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:23:23.021 00:00:11.776 TCP 12.102.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:24:24.840 00:00:11.801 TCP 12.102.0.1:34312 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:25:26.682 00:00:12.262 TCP 12.102.0.1:42464 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:20:47.201 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-06 04:26:28.987 00:00:12.211 TCP 12.102.0.1:56786 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:27:31.233 00:00:11.807 TCP 12.102.0.1:52094 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:22:47.196 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 04:28:27.466 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:28:27.477 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:28:27.345 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:28:27.167 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:28:27.038 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:28:27.542 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:28:27.323 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:28:33.087 00:00:11.799 TCP 12.102.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:29:34.924 00:00:11.810 TCP 12.102.0.1:48010 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:30:36.783 00:00:11.805 TCP 12.102.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:31:38.617 00:00:11.807 TCP 12.102.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:27:47.200 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-06 04:32:40.465 00:00:11.800 TCP 12.102.0.1:37622 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:33:27.551 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:33:27.694 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:33:27.425 00:00:00.034 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:33:27.524 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:33:27.570 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:33:27.448 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:33:27.501 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:33:42.315 00:00:11.812 TCP 12.102.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:29:47.197 00:06:00.156 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 04:34:44.165 00:00:11.880 TCP 12.102.0.1:47956 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:35:46.083 00:00:11.807 TCP 12.102.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:36:47.935 00:00:11.771 TCP 12.102.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:37:49.751 00:00:11.758 TCP 12.102.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:38:27.623 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:38:27.610 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:38:27.618 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:38:27.417 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:38:27.645 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:38:27.714 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:38:27.687 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:38:51.545 00:00:12.234 TCP 12.102.0.1:35472 -> 1.101.0.1:3000 15 1926 1 2025-10-06 04:34:47.205 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-06 04:39:53.820 00:00:11.813 TCP 12.102.0.1:54866 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:40:55.682 00:00:11.814 TCP 12.102.0.1:55476 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:36:47.202 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 04:41:57.535 00:00:11.810 TCP 12.102.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:42:59.384 00:00:11.767 TCP 12.102.0.1:46932 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:43:27.924 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:43:27.972 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:43:28.161 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:43:27.964 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:43:27.948 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:43:28.059 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:43:27.729 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:44:01.193 00:00:11.800 TCP 12.102.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:45:03.031 00:00:11.807 TCP 12.102.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:46:04.878 00:00:11.805 TCP 12.102.0.1:42174 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:41:47.206 00:06:00.150 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-06 04:47:06.723 00:00:11.810 TCP 12.102.0.1:57272 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:48:08.569 00:00:11.804 TCP 12.102.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:48:27.634 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:48:27.781 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:48:27.975 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:48:27.905 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:48:27.658 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:48:27.787 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:48:27.635 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:43:47.204 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 04:49:10.408 00:00:11.827 TCP 12.102.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:50:12.265 00:00:11.803 TCP 12.102.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:51:14.104 00:00:11.802 TCP 12.102.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:52:15.949 00:00:11.806 TCP 12.102.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:53:27.862 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:53:28.083 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:53:27.973 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:53:28.181 00:00:00.036 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:53:27.885 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:53:28.010 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:53:27.671 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:53:17.790 00:00:11.803 TCP 12.102.0.1:36070 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:48:47.207 00:06:00.151 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-06 04:54:19.642 00:00:11.805 TCP 12.102.0.1:47408 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:55:21.481 00:00:11.867 TCP 12.102.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:50:47.205 00:06:00.156 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-06 04:56:23.387 00:00:11.803 TCP 12.102.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:57:25.226 00:00:11.804 TCP 12.102.0.1:37578 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:58:28.074 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:58:28.025 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-06 04:58:28.043 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-06 04:58:28.090 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-06 04:58:28.042 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-06 04:58:28.071 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-06 04:58:28.021 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-06 04:58:27.081 00:00:11.760 TCP 12.102.0.1:60310 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 258, avg pps: 0, avg bpp: 109 Time window: 2025-10-06 03:54:47 - 2025-10-06 04:58:38 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0030s User: 0.0020s Wall: 0.0024s flows/second: 67547.3 Runtime: 0.0024s