Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 12:58:55.100 00:00:11.810 TCP 12.102.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:59:06.460 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 12:59:06.655 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:59:06.579 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 12:59:06.506 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 12:59:06.460 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 12:59:06.577 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 12:59:06.485 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 12:55:47.893 00:05:00.188 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 12:55:47.890 00:05:00.193 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 12:59:56.946 00:00:12.264 TCP 12.102.0.1:41630 -> 1.101.0.1:3000 15 1926 1 2025-10-07 13:00:59.245 00:00:11.766 TCP 12.102.0.1:32970 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:02:01.069 00:00:11.846 TCP 12.102.0.1:49160 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:03:02.958 00:00:11.805 TCP 12.102.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:04:06.682 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:04:06.588 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:04:06.548 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:04:06.580 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:04:06.412 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:04:06.653 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:04:06.558 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:04:04.803 00:00:11.803 TCP 12.102.0.1:35648 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:05:06.641 00:00:11.802 TCP 12.102.0.1:58332 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:01:47.892 00:05:00.193 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:01:47.895 00:05:00.188 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:06:08.483 00:00:11.822 TCP 12.102.0.1:37912 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:07:10.343 00:00:11.800 TCP 12.102.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:08:12.183 00:00:11.853 TCP 12.102.0.1:42686 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:09:06.792 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:09:06.774 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:09:06.817 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:09:06.755 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:09:06.616 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:09:06.693 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:09:06.733 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:09:14.083 00:00:11.800 TCP 12.102.0.1:46052 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:10:15.926 00:00:12.200 TCP 12.102.0.1:44414 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:11:18.164 00:00:11.766 TCP 12.102.0.1:38346 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:07:47.897 00:05:00.187 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:07:47.894 00:05:00.192 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:12:19.965 00:00:11.826 TCP 12.102.0.1:47528 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:13:21.837 00:00:11.800 TCP 12.102.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:14:06.798 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:14:06.763 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:14:06.834 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:14:06.890 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:14:06.978 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:14:06.683 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:14:06.867 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:14:23.679 00:00:11.819 TCP 12.102.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:15:25.531 00:00:11.807 TCP 12.102.0.1:58800 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:16:27.380 00:00:11.777 TCP 12.102.0.1:42814 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:17:29.199 00:00:11.811 TCP 12.102.0.1:42198 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:13:47.895 00:05:00.192 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:13:47.897 00:05:00.187 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:18:31.070 00:00:11.805 TCP 12.102.0.1:34468 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:19:06.695 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:19:07.065 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:19:06.867 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:19:06.717 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:19:06.846 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:19:06.884 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:19:06.918 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:19:32.912 00:00:12.269 TCP 12.102.0.1:36288 -> 1.101.0.1:3000 15 1926 1 2025-10-07 13:20:35.219 00:00:11.800 TCP 12.102.0.1:41334 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:21:37.074 00:00:11.759 TCP 12.102.0.1:34642 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:22:38.866 00:00:11.798 TCP 12.102.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:19:47.902 00:05:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:19:47.899 00:05:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:23:40.699 00:00:11.799 TCP 12.102.0.1:53260 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:24:06.816 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:24:06.909 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:24:06.948 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:24:06.975 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:24:07.093 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:24:07.036 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:24:06.952 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:24:42.534 00:00:11.802 TCP 12.102.0.1:34972 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:25:44.373 00:00:11.780 TCP 12.102.0.1:50828 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:26:46.193 00:00:11.801 TCP 12.102.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:27:48.036 00:00:11.800 TCP 12.102.0.1:49820 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:28:49.866 00:00:11.816 TCP 12.102.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:29:07.298 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:29:07.306 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:29:07.252 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:29:07.196 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:29:07.238 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:29:07.200 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:29:07.173 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:25:47.900 00:05:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:25:47.903 00:05:00.184 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:29:51.720 00:00:11.800 TCP 12.102.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:30:53.559 00:00:11.802 TCP 12.102.0.1:38612 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:31:55.407 00:00:11.803 TCP 12.102.0.1:58406 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:32:57.245 00:00:11.810 TCP 12.102.0.1:60624 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:34:07.789 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:34:07.931 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:34:07.848 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:34:08.000 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:34:07.812 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:34:07.955 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:34:07.833 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:33:59.091 00:00:12.128 TCP 12.102.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:35:01.257 00:00:11.804 TCP 12.102.0.1:57314 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:31:47.905 00:05:00.183 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:31:47.903 00:05:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:36:03.100 00:00:11.813 TCP 12.102.0.1:48356 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:37:04.952 00:00:11.862 TCP 12.102.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:38:06.856 00:00:11.860 TCP 12.102.0.1:57736 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:39:07.393 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:39:07.494 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:39:07.256 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:39:07.105 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:39:07.110 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:39:07.413 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:39:07.082 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:39:08.758 00:00:11.816 TCP 12.102.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:40:10.611 00:00:11.808 TCP 12.102.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:41:12.459 00:00:11.805 TCP 12.102.0.1:49158 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:37:47.906 00:05:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:37:47.903 00:05:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:42:14.300 00:00:11.802 TCP 12.102.0.1:58692 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:43:16.143 00:00:11.822 TCP 12.102.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:44:07.503 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:44:07.726 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:44:07.479 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:44:07.355 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:44:07.467 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:44:07.429 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:44:07.332 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:44:18.003 00:00:11.808 TCP 12.102.0.1:43738 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:45:19.853 00:00:11.765 TCP 12.102.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:46:21.657 00:00:11.811 TCP 12.102.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:47:23.505 00:00:11.816 TCP 12.102.0.1:33014 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:43:47.908 00:05:00.183 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:43:47.907 00:05:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:48:25.361 00:00:11.820 TCP 12.102.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:49:07.499 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:49:07.550 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:49:07.549 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:49:07.397 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:49:07.523 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:49:07.651 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:49:07.330 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:49:27.219 00:00:11.776 TCP 12.102.0.1:52016 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:50:29.067 00:00:11.802 TCP 12.102.0.1:54364 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:51:30.904 00:00:11.770 TCP 12.102.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:52:32.723 00:00:11.807 TCP 12.102.0.1:47458 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:49:47.912 00:05:00.182 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-07 13:53:34.570 00:00:11.845 TCP 12.102.0.1:55600 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:49:47.909 00:05:00.187 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-07 13:54:08.407 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-07 13:54:08.408 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-07 13:54:08.198 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 13:54:08.553 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-07 13:54:08.430 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-07 13:54:08.265 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-07 13:54:08.445 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-07 13:54:36.450 00:00:11.813 TCP 12.102.0.1:55118 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:55:38.302 00:00:11.974 TCP 12.102.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:56:40.314 00:00:11.808 TCP 12.102.0.1:59268 -> 1.101.0.1:3000 11 1507 1 2025-10-07 13:57:42.168 00:00:11.813 TCP 12.102.0.1:41254 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-10-07 12:55:47 - 2025-10-07 13:57:53 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0019s Wall: 0.0023s flows/second: 70897.0 Runtime: 0.0023s