Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 12:58:59.700 00:00:11.770 TCP 12.102.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:00:01.508 00:00:11.805 TCP 12.102.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:01:03.351 00:00:11.829 TCP 12.102.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:01:31.094 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:01:30.968 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:01:31.021 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:01:30.846 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:01:30.867 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:01:30.735 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:01:30.824 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 12:56:50.414 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:02:05.210 00:00:11.820 TCP 12.102.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:03:07.080 00:00:11.798 TCP 12.102.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:04:08.913 00:00:11.773 TCP 12.102.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:05:10.728 00:00:11.821 TCP 12.102.0.1:42596 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:00:50.376 00:06:00.041 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 13:06:12.591 00:00:12.236 TCP 12.102.0.1:49654 -> 1.101.0.1:3000 15 1926 1 2025-10-12 13:06:31.205 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:06:31.308 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:06:31.231 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:06:31.088 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:06:31.078 00:00:00.045 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:06:30.967 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:06:31.066 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:07:14.867 00:00:11.797 TCP 12.102.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:08:16.703 00:00:12.356 TCP 12.102.0.1:60992 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:03:50.414 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:09:19.103 00:00:11.773 TCP 12.102.0.1:49886 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:10:20.907 00:00:11.762 TCP 12.102.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:11:31.155 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:11:31.280 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:11:31.329 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:11:31.322 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:11:31.178 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:11:31.080 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:11:31.148 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:11:22.706 00:00:11.764 TCP 12.102.0.1:47928 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:12:24.506 00:00:11.801 TCP 12.102.0.1:58610 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:07:50.377 00:06:00.041 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 13:13:26.351 00:00:11.757 TCP 12.102.0.1:33834 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:14:28.152 00:00:11.818 TCP 12.102.0.1:48294 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:15:30.006 00:00:11.757 TCP 12.102.0.1:51736 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:10:50.415 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:16:31.238 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:16:31.277 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:16:31.329 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:16:31.369 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:16:31.260 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:16:31.320 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:16:31.245 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:16:31.804 00:00:11.762 TCP 12.102.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:17:33.603 00:00:11.803 TCP 12.102.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:18:35.449 00:00:11.816 TCP 12.102.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:14:50.380 00:06:00.039 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 13:19:37.305 00:00:11.800 TCP 12.102.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:20:39.142 00:00:11.812 TCP 12.102.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:21:31.454 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:21:31.448 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:21:31.436 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:21:31.323 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:21:31.464 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:21:31.379 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:21:31.301 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:21:40.988 00:00:11.761 TCP 12.102.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:17:50.417 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:22:42.786 00:00:11.774 TCP 12.102.0.1:52230 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:23:44.598 00:00:11.803 TCP 12.102.0.1:54050 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:24:46.440 00:00:11.808 TCP 12.102.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:25:48.291 00:00:11.801 TCP 12.102.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:26:31.475 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:26:31.511 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:26:31.424 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:26:31.721 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:26:31.497 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:26:31.782 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:26:31.703 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:21:50.382 00:06:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 13:26:50.127 00:00:11.804 TCP 12.102.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:27:51.973 00:00:11.801 TCP 12.102.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:28:53.811 00:00:11.767 TCP 12.102.0.1:44898 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:24:50.418 00:06:00.007 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:29:55.619 00:00:11.762 TCP 12.102.0.1:56626 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:30:57.415 00:00:11.817 TCP 12.102.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:31:31.437 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:31:31.666 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:31:31.731 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:31:31.513 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:31:31.461 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:31:31.681 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:31:31.548 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:31:59.274 00:00:11.828 TCP 12.102.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:33:01.137 00:00:11.810 TCP 12.102.0.1:55022 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:28:50.383 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 13:34:02.977 00:00:11.761 TCP 12.102.0.1:57028 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:35:04.779 00:00:12.053 TCP 12.102.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:36:06.870 00:00:11.768 TCP 12.102.0.1:47676 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:36:31.669 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:36:31.776 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:36:31.706 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:36:31.702 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:36:31.778 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:36:31.374 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:36:31.679 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:31:50.425 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:37:08.678 00:00:11.802 TCP 12.102.0.1:47500 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:38:10.518 00:00:11.803 TCP 12.102.0.1:41462 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:39:12.360 00:00:11.824 TCP 12.102.0.1:33652 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:40:14.217 00:00:11.805 TCP 12.102.0.1:52246 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:35:50.384 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 13:41:16.078 00:00:11.803 TCP 12.102.0.1:56692 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:41:31.913 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:41:31.797 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:41:31.660 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:41:31.851 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:41:31.730 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:41:31.870 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:41:31.637 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:42:17.921 00:00:11.779 TCP 12.102.0.1:37512 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:43:19.739 00:00:12.121 TCP 12.102.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:38:50.426 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:44:21.902 00:00:11.806 TCP 12.102.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:45:23.755 00:00:11.775 TCP 12.102.0.1:33334 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:46:32.152 00:00:00.036 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:46:32.192 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:46:32.091 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:46:31.964 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:46:31.724 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:46:32.080 00:00:00.049 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:46:31.942 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:46:25.571 00:00:12.442 TCP 12.102.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:47:28.079 00:00:11.816 TCP 12.102.0.1:51206 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:42:50.385 00:06:00.045 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 13:48:29.936 00:00:11.805 TCP 12.102.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:49:31.780 00:00:11.801 TCP 12.102.0.1:52272 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:50:33.621 00:00:12.098 TCP 12.102.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:45:50.427 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:51:31.861 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:51:32.060 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:51:32.152 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:51:32.024 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:51:31.885 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:51:31.875 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:51:31.653 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:51:35.759 00:00:11.870 TCP 12.102.0.1:40650 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:52:37.669 00:00:11.805 TCP 12.102.0.1:39332 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:53:39.515 00:00:11.851 TCP 12.102.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:54:41.411 00:00:11.817 TCP 12.102.0.1:39142 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:49:50.389 00:06:00.043 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 13:55:43.298 00:00:11.809 TCP 12.102.0.1:37354 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:56:32.049 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 13:56:32.120 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 13:56:31.889 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 13:56:31.955 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 13:56:31.994 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 13:56:31.966 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 13:56:31.932 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 13:56:45.145 00:00:11.813 TCP 12.102.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:52:50.429 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 13:57:47.002 00:00:11.811 TCP 12.102.0.1:38190 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 120354, total packets: 1069, avg bps: 258, avg pps: 0, avg bpp: 112 Time window: 2025-10-12 12:56:50 - 2025-10-12 13:58:50 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0029s User: 0.0029s Wall: 0.0030s flows/second: 52648.2 Runtime: 0.0030s