Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 01:59:40.248 00:00:11.808 TCP 12.102.0.1:41582 -> 1.101.0.1:3000 11 1507 1 2025-10-07 01:55:47.625 00:06:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:00:42.094 00:00:11.798 TCP 12.102.0.1:35362 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:01:43.933 00:00:11.819 TCP 12.102.0.1:45982 -> 1.101.0.1:3000 11 1507 1 2025-10-07 01:57:47.623 00:06:00.173 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-07 02:02:45.787 00:00:11.807 TCP 12.102.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:03:53.318 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:03:53.432 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:03:53.370 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:03:53.370 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:03:53.341 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:03:53.460 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:03:53.341 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:03:47.636 00:00:11.804 TCP 12.102.0.1:52880 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:04:49.477 00:00:12.674 TCP 12.102.0.1:38608 -> 1.101.0.1:3000 17 2241 1 2025-10-07 02:05:52.195 00:00:11.807 TCP 12.102.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:06:54.070 00:00:11.814 TCP 12.102.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:02:47.627 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:07:55.925 00:00:11.820 TCP 12.102.0.1:56644 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:08:53.248 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:08:53.659 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:08:53.900 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:08:53.271 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:08:53.404 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:08:53.543 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:08:53.713 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:08:57.788 00:00:11.766 TCP 12.102.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:04:47.627 00:06:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-07 02:09:59.594 00:00:11.809 TCP 12.102.0.1:33824 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:11:01.440 00:00:11.756 TCP 12.102.0.1:43728 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:12:03.240 00:00:11.813 TCP 12.102.0.1:48192 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:13:05.102 00:00:11.802 TCP 12.102.0.1:57296 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:13:53.693 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:13:53.380 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:13:53.663 00:00:00.032 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:13:53.520 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:13:53.715 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:13:53.527 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:13:53.496 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:14:06.945 00:00:11.802 TCP 12.102.0.1:42778 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:09:47.629 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:15:08.792 00:00:11.766 TCP 12.102.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:16:10.592 00:00:11.804 TCP 12.102.0.1:40482 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:11:47.627 00:06:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-07 02:17:12.434 00:00:11.820 TCP 12.102.0.1:46424 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:18:14.293 00:00:11.763 TCP 12.102.0.1:57254 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:18:53.387 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:18:53.863 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:18:53.806 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:18:53.567 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:18:53.698 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:18:53.562 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:18:53.545 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:19:16.096 00:00:11.795 TCP 12.102.0.1:56170 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:20:17.946 00:00:11.807 TCP 12.102.0.1:34710 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:21:19.798 00:00:11.762 TCP 12.102.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:16:47.632 00:06:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:22:21.601 00:00:11.806 TCP 12.102.0.1:59572 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:23:23.447 00:00:11.807 TCP 12.102.0.1:36150 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:18:47.630 00:06:00.174 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-07 02:23:53.775 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:23:53.600 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:23:53.806 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:23:53.813 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:23:53.893 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:23:53.754 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:23:53.790 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:24:25.298 00:00:11.800 TCP 12.102.0.1:56666 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:25:27.139 00:00:11.866 TCP 12.102.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:26:29.072 00:00:11.802 TCP 12.102.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:27:30.910 00:00:11.864 TCP 12.102.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:23:47.632 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:28:32.789 00:00:11.801 TCP 12.102.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:28:53.814 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:28:53.926 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:28:53.838 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:28:53.672 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:28:53.872 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:28:54.063 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:28:54.142 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:29:34.629 00:00:11.799 TCP 12.102.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:25:47.631 00:06:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-07 02:30:36.468 00:00:11.856 TCP 12.102.0.1:41932 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:31:38.371 00:00:11.811 TCP 12.102.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:32:40.233 00:00:11.775 TCP 12.102.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:33:53.825 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:33:53.946 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:33:42.071 00:00:11.808 TCP 12.102.0.1:43806 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:33:53.962 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:33:53.975 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:33:53.847 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:33:53.755 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:33:54.115 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:34:43.919 00:00:12.257 TCP 12.102.0.1:53742 -> 1.101.0.1:3000 15 1926 1 2025-10-07 02:30:47.635 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:35:46.217 00:00:11.852 TCP 12.102.0.1:36930 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:36:48.108 00:00:11.761 TCP 12.102.0.1:52080 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:32:47.633 00:06:00.178 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-07 02:37:49.912 00:00:11.822 TCP 12.102.0.1:59640 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:38:54.287 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:38:54.391 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:38:54.430 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:38:54.361 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:38:54.310 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:38:54.493 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:38:54.226 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:38:51.777 00:00:11.813 TCP 12.102.0.1:42218 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:39:53.628 00:00:11.804 TCP 12.102.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:40:55.469 00:00:11.804 TCP 12.102.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:41:57.307 00:00:11.811 TCP 12.102.0.1:36330 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:37:47.639 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:42:59.159 00:00:11.810 TCP 12.102.0.1:45844 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:43:54.195 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:43:54.341 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:43:54.175 00:00:00.040 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:43:54.154 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:43:54.067 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:43:54.045 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:43:54.130 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:44:01.010 00:00:11.803 TCP 12.102.0.1:33568 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:39:47.636 00:06:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-07 02:45:02.849 00:00:11.806 TCP 12.102.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:46:04.695 00:00:11.811 TCP 12.102.0.1:57866 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:47:06.545 00:00:11.802 TCP 12.102.0.1:50964 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:48:08.391 00:00:11.815 TCP 12.102.0.1:55248 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:48:54.135 00:00:00.044 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:48:54.347 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:48:54.262 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:48:54.130 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:48:54.337 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:48:54.319 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:48:54.107 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:49:10.250 00:00:11.809 TCP 12.102.0.1:48742 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:44:47.647 00:06:00.163 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:50:12.101 00:00:11.775 TCP 12.102.0.1:41226 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:51:13.918 00:00:11.840 TCP 12.102.0.1:51976 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:46:47.646 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-07 02:52:15.795 00:00:11.817 TCP 12.102.0.1:52220 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:53:17.654 00:00:11.815 TCP 12.102.0.1:46432 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:53:54.327 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 02:53:54.397 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 02:53:54.498 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 02:53:54.303 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 02:53:54.502 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 02:53:54.372 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 02:53:54.280 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 02:54:19.511 00:00:11.787 TCP 12.102.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:55:21.336 00:00:11.830 TCP 12.102.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:56:23.212 00:00:11.804 TCP 12.102.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:51:47.649 00:06:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-07 02:57:25.072 00:00:11.800 TCP 12.102.0.1:40376 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:58:26.916 00:00:11.820 TCP 12.102.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-10-07 02:53:47.646 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 153, total bytes: 123461, total packets: 1131, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-10-07 01:55:47 - 2025-10-07 02:59:47 Total flows processed: 153, passed: 153, Blocks skipped: 0, Bytes read: 15976 Sys: 0.0027s User: 0.0018s Wall: 0.0026s flows/second: 59952.2 Runtime: 0.0026s