Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 14:59:43.633 00:00:11.759 TCP 12.102.0.1:33980 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:55:50.444 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:00:45.429 00:00:11.798 TCP 12.102.0.1:47128 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:01:33.144 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:01:33.205 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:01:33.398 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:01:33.237 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:01:33.166 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:01:33.603 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:01:33.354 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:01:47.267 00:00:11.803 TCP 12.102.0.1:41382 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:02:49.109 00:00:11.861 TCP 12.102.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:03:51.011 00:00:11.774 TCP 12.102.0.1:35810 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:59:50.414 00:06:00.033 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 15:04:52.814 00:00:11.865 TCP 12.102.0.1:57482 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:05:54.714 00:00:12.200 TCP 12.102.0.1:54776 -> 1.101.0.1:3000 15 1926 1 2025-10-12 15:06:33.636 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:06:33.513 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:06:33.775 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:06:33.921 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:06:33.659 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:06:33.794 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:06:33.730 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:06:56.952 00:00:11.799 TCP 12.102.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:02:50.444 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:07:58.789 00:00:11.849 TCP 12.102.0.1:34564 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:09:00.680 00:00:11.801 TCP 12.102.0.1:53424 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:10:02.519 00:00:11.757 TCP 12.102.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:11:04.315 00:00:12.256 TCP 12.102.0.1:34858 -> 1.101.0.1:3000 15 1926 1 2025-10-12 15:11:33.315 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:11:33.546 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:11:33.448 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:11:33.751 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:11:33.338 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:11:33.731 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:11:33.443 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:06:50.416 00:06:00.035 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 15:12:06.602 00:00:11.809 TCP 12.102.0.1:34856 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:13:08.454 00:00:11.806 TCP 12.102.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:14:10.312 00:00:11.811 TCP 12.102.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:09:50.445 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:15:12.186 00:00:11.803 TCP 12.102.0.1:49264 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:16:14.041 00:00:11.820 TCP 12.102.0.1:44772 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:16:33.480 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:16:33.764 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:16:33.759 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:16:33.862 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:16:33.502 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:16:33.932 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:16:33.611 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:17:15.905 00:00:11.847 TCP 12.102.0.1:37584 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:18:17.797 00:00:11.776 TCP 12.102.0.1:50534 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:13:50.416 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 15:19:19.608 00:00:11.768 TCP 12.102.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:20:21.424 00:00:11.768 TCP 12.102.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:21:33.743 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:21:33.799 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:21:33.956 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:21:33.940 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:21:33.766 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:21:33.906 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:21:33.561 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:21:23.237 00:00:11.817 TCP 12.102.0.1:57898 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:16:50.449 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:22:25.087 00:00:11.801 TCP 12.102.0.1:35772 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:23:26.927 00:00:11.780 TCP 12.102.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:24:28.744 00:00:11.801 TCP 12.102.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:25:30.582 00:00:11.848 TCP 12.102.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:20:50.417 00:06:00.037 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 15:26:34.455 00:00:00.018 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:26:34.624 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:26:34.650 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:26:34.863 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:26:34.737 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:26:34.543 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:26:34.520 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:26:32.468 00:00:11.805 TCP 12.102.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:27:34.308 00:00:11.807 TCP 12.102.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:28:36.148 00:00:11.769 TCP 12.102.0.1:47818 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:23:50.452 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:29:37.964 00:00:11.760 TCP 12.102.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:30:39.768 00:00:11.804 TCP 12.102.0.1:49886 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:31:33.872 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:31:33.916 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:31:33.896 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:31:34.036 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:31:34.273 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:31:34.012 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:31:34.127 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:31:41.608 00:00:11.816 TCP 12.102.0.1:60102 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:27:50.420 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 15:32:43.459 00:00:11.804 TCP 12.102.0.1:38884 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:33:45.304 00:00:12.255 TCP 12.102.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:34:47.595 00:00:11.792 TCP 12.102.0.1:37584 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:30:50.453 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:35:49.425 00:00:11.830 TCP 12.102.0.1:34212 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:36:33.816 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:36:33.950 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:36:33.863 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:36:33.839 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:36:34.239 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:36:34.062 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:36:34.010 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:36:51.268 00:00:11.805 TCP 12.102.0.1:40780 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:37:53.121 00:00:11.801 TCP 12.102.0.1:56526 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:38:54.960 00:00:11.803 TCP 12.102.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:34:50.422 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 15:39:56.800 00:00:11.769 TCP 12.102.0.1:54370 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:40:58.606 00:00:11.811 TCP 12.102.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:41:34.252 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:41:34.390 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:41:34.396 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:41:34.345 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:41:34.275 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:41:34.142 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:41:34.183 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:42:00.458 00:00:12.399 TCP 12.102.0.1:38406 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:37:50.455 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:43:02.896 00:00:11.757 TCP 12.102.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:44:04.686 00:00:11.815 TCP 12.102.0.1:53224 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:45:06.538 00:00:11.809 TCP 12.102.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:46:08.382 00:00:11.823 TCP 12.102.0.1:37974 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:46:34.174 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:46:34.449 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:46:34.376 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:46:34.327 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:46:34.157 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:46:34.193 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:46:34.305 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:41:50.423 00:06:00.036 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 15:47:10.242 00:00:11.801 TCP 12.102.0.1:49838 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:48:12.083 00:00:11.768 TCP 12.102.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:49:13.889 00:00:11.766 TCP 12.102.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:44:50.457 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:50:15.703 00:00:11.771 TCP 12.102.0.1:48368 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:51:17.507 00:00:11.803 TCP 12.102.0.1:48290 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:51:34.435 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:51:34.629 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:51:34.547 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:51:34.607 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:51:34.494 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:51:34.514 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:51:34.525 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:52:19.352 00:00:11.850 TCP 12.102.0.1:43438 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:53:21.242 00:00:11.805 TCP 12.102.0.1:60780 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:48:50.426 00:06:00.035 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 15:54:23.093 00:00:11.779 TCP 12.102.0.1:39892 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:55:24.904 00:00:11.837 TCP 12.102.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:56:34.341 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 15:56:26.776 00:00:11.802 TCP 12.102.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:56:34.523 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:56:34.573 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 15:56:34.346 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 15:56:34.535 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 15:56:34.494 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 15:56:34.324 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 15:51:50.459 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 15:57:28.618 00:00:11.771 TCP 12.102.0.1:57582 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:58:30.428 00:00:11.797 TCP 12.102.0.1:53130 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 120773, total packets: 1073, avg bps: 256, avg pps: 0, avg bpp: 112 Time window: 2025-10-12 14:55:50 - 2025-10-12 15:58:42 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0040s User: 0.0016s Wall: 0.0021s flows/second: 75432.0 Runtime: 0.0021s