Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 17:59:08.690 00:00:11.810 TCP 12.102.0.1:56720 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:54:50.455 00:06:00.040 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:00:10.534 00:00:11.803 TCP 12.102.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:01:12.380 00:00:11.818 TCP 12.102.0.1:48770 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:01:36.993 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:01:36.883 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:01:37.155 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:01:37.077 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:01:37.017 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:01:37.000 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:01:37.112 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:02:14.226 00:00:11.760 TCP 12.102.0.1:32780 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:57:50.491 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 18:03:16.035 00:00:11.804 TCP 12.102.0.1:56044 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:04:17.874 00:00:11.840 TCP 12.102.0.1:58052 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:05:19.740 00:00:11.819 TCP 12.102.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:06:21.596 00:00:11.812 TCP 12.102.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:06:37.163 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:06:37.017 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:06:37.027 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:06:37.122 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:06:36.886 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:06:37.074 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:06:37.007 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:01:50.457 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:07:23.446 00:00:12.043 TCP 12.102.0.1:45296 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:08:25.529 00:00:11.801 TCP 12.102.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:09:27.367 00:00:11.781 TCP 12.102.0.1:38718 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:04:50.494 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 18:10:29.186 00:00:11.816 TCP 12.102.0.1:43776 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:11:37.179 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:11:37.324 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:11:37.424 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:11:37.254 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:11:37.201 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:11:37.404 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:11:37.207 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:11:31.062 00:00:11.797 TCP 12.102.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:12:32.899 00:00:11.805 TCP 12.102.0.1:39038 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:13:34.747 00:00:11.806 TCP 12.102.0.1:48862 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:08:50.458 00:06:00.042 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:14:36.592 00:00:11.802 TCP 12.102.0.1:56344 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:15:38.436 00:00:11.809 TCP 12.102.0.1:35220 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:16:37.061 00:00:00.038 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:16:37.272 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:16:37.184 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:16:37.448 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:16:37.084 00:00:00.037 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:16:37.314 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:16:37.261 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:11:50.496 00:06:00.003 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 18:16:40.285 00:00:11.803 TCP 12.102.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:17:42.124 00:00:11.804 TCP 12.102.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:18:43.970 00:00:11.814 TCP 12.102.0.1:37516 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:19:45.823 00:00:11.808 TCP 12.102.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:15:50.460 00:06:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:20:47.666 00:00:11.808 TCP 12.102.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:21:37.155 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:21:37.291 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:21:37.491 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:21:37.480 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:21:37.177 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:21:37.414 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:21:37.429 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:21:49.514 00:00:11.826 TCP 12.102.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:22:51.382 00:00:11.870 TCP 12.102.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:18:50.499 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 18:23:53.291 00:00:11.790 TCP 12.102.0.1:34898 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:24:55.118 00:00:11.805 TCP 12.102.0.1:48000 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:25:56.968 00:00:11.802 TCP 12.102.0.1:36662 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:26:37.581 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:26:37.464 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:26:37.502 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:26:37.471 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:26:37.326 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:26:37.310 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:26:37.440 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:26:58.810 00:00:11.769 TCP 12.102.0.1:38898 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:22:50.462 00:06:00.046 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:28:00.624 00:00:11.807 TCP 12.102.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:29:02.469 00:00:11.817 TCP 12.102.0.1:38846 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:30:04.327 00:00:11.765 TCP 12.102.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:25:50.503 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 18:31:06.129 00:00:11.803 TCP 12.102.0.1:40896 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:31:37.525 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:31:37.710 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:31:37.940 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:31:37.549 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:31:37.668 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:31:37.735 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:31:37.820 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:32:07.971 00:00:11.801 TCP 12.102.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:33:09.818 00:00:11.804 TCP 12.102.0.1:42684 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:34:11.654 00:00:11.758 TCP 12.102.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:29:50.464 00:06:00.044 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:35:13.453 00:00:11.818 TCP 12.102.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:36:15.305 00:00:11.798 TCP 12.102.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:36:37.747 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:36:37.984 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:36:37.923 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:36:37.847 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:36:37.756 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:36:37.645 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:36:37.826 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:37:17.142 00:00:12.254 TCP 12.102.0.1:38712 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:32:50.506 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 18:38:19.431 00:00:11.812 TCP 12.102.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:39:21.278 00:00:11.808 TCP 12.102.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:40:23.124 00:00:11.808 TCP 12.102.0.1:56390 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:41:37.841 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:41:38.053 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:41:37.783 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:41:24.970 00:00:11.800 TCP 12.102.0.1:55034 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:41:37.864 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:41:37.886 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:41:37.816 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:41:37.843 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:36:50.466 00:06:00.047 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:42:26.813 00:00:11.816 TCP 12.102.0.1:43664 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:43:28.656 00:00:11.817 TCP 12.102.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:44:30.508 00:00:11.801 TCP 12.102.0.1:41372 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:39:50.506 00:06:00.005 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 18:45:32.349 00:00:11.814 TCP 12.102.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:46:38.784 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:46:38.806 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:46:38.798 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:46:38.805 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:46:38.870 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:46:38.802 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:46:38.782 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:46:34.201 00:00:11.758 TCP 12.102.0.1:38346 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:47:36.000 00:00:11.795 TCP 12.102.0.1:54124 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:48:37.862 00:00:11.807 TCP 12.102.0.1:59320 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:43:50.468 00:06:00.047 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:49:39.707 00:00:11.804 TCP 12.102.0.1:57304 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:50:41.551 00:00:11.812 TCP 12.102.0.1:41680 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:51:37.849 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:51:38.140 00:00:00.047 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:51:38.055 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:51:37.998 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:51:37.872 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:51:37.834 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:51:37.683 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:46:50.511 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-12 18:51:43.397 00:00:11.810 TCP 12.102.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:52:45.245 00:00:11.804 TCP 12.102.0.1:55338 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:53:47.090 00:00:11.855 TCP 12.102.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:54:48.984 00:00:11.768 TCP 12.102.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:50:50.473 00:06:00.043 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-12 18:55:50.787 00:00:11.800 TCP 12.102.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:56:37.848 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-12 18:56:38.248 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-12 18:56:37.871 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-12 18:56:38.110 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-12 18:56:38.052 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-12 18:56:38.285 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-12 18:56:37.814 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:56:52.626 00:00:11.826 TCP 12.102.0.1:47162 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:57:54.491 00:00:12.122 TCP 12.102.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:53:50.513 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 Summary: total flows: 160, total bytes: 120796, total packets: 1079, avg bps: 247, avg pps: 0, avg bpp: 111 Time window: 2025-10-12 17:54:50 - 2025-10-12 18:59:50 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0021s User: 0.0031s Wall: 0.0022s flows/second: 73399.2 Runtime: 0.0022s