Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 18:59:29.837 00:00:11.765 TCP 12.102.0.1:35268 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:00:31.643 00:00:11.818 TCP 12.102.0.1:39710 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:55:50.909 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:01:33.497 00:00:11.813 TCP 12.102.0.1:38976 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:02:07.299 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:02:07.194 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:02:07.173 00:00:00.039 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:02:07.042 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:02:07.073 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:02:07.060 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:02:07.021 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:02:35.359 00:00:11.825 TCP 12.102.0.1:55078 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:03:37.222 00:00:11.803 TCP 12.102.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:04:39.084 00:00:11.800 TCP 12.102.0.1:48790 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:59:50.908 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 19:05:40.929 00:00:12.396 TCP 12.102.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:06:43.370 00:00:11.807 TCP 12.102.0.1:38766 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:07:07.236 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:07:07.229 00:00:00.048 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:07:07.390 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:07:07.259 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:07:07.163 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:07:07.325 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:07:07.298 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:02:50.910 00:06:00.048 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:07:45.219 00:00:11.772 TCP 12.102.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:08:47.034 00:00:11.799 TCP 12.102.0.1:58022 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:09:48.873 00:00:11.754 TCP 12.102.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:10:50.668 00:00:11.936 TCP 12.102.0.1:33422 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:06:50.908 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 19:12:07.153 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:12:07.207 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:12:07.390 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:12:07.397 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:12:07.175 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:11:52.642 00:00:11.816 TCP 12.102.0.1:33840 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:12:07.455 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:12:07.170 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:12:54.496 00:00:11.808 TCP 12.102.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:13:56.350 00:00:11.802 TCP 12.102.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:09:50.911 00:06:00.049 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:14:58.189 00:00:11.805 TCP 12.102.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:16:00.036 00:00:11.808 TCP 12.102.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:17:07.504 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:17:07.384 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:17:07.329 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:17:07.450 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:17:07.236 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:17:07.341 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:17:07.306 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:17:01.884 00:00:11.793 TCP 12.102.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:18:03.717 00:00:11.948 TCP 12.102.0.1:39714 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:13:50.910 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 19:19:05.705 00:00:11.808 TCP 12.102.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:20:07.551 00:00:11.802 TCP 12.102.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:21:09.392 00:00:11.805 TCP 12.102.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:16:50.914 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:22:07.429 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:22:07.488 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:22:07.389 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:22:07.576 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:22:07.452 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:22:07.583 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:22:07.567 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:22:11.234 00:00:11.812 TCP 12.102.0.1:56342 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:23:13.082 00:00:11.809 TCP 12.102.0.1:51678 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:24:14.930 00:00:11.818 TCP 12.102.0.1:59112 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:25:16.788 00:00:11.810 TCP 12.102.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:20:50.912 00:06:00.060 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 19:26:18.640 00:00:11.777 TCP 12.102.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:27:07.535 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:27:07.796 00:00:00.035 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:27:07.768 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:27:07.706 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:27:07.558 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:27:07.687 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:27:07.349 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:27:20.451 00:00:11.816 TCP 12.102.0.1:57560 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:28:22.303 00:00:11.761 TCP 12.102.0.1:56966 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:23:50.914 00:06:00.058 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:29:24.102 00:00:11.806 TCP 12.102.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:30:25.947 00:00:11.807 TCP 12.102.0.1:39538 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:31:27.790 00:00:11.802 TCP 12.102.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:32:07.539 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:32:07.595 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:32:07.811 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:32:07.562 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:32:07.699 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:32:07.572 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:32:07.734 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:32:29.631 00:00:12.334 TCP 12.102.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:27:50.912 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 19:33:32.004 00:00:11.802 TCP 12.102.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:34:33.848 00:00:11.806 TCP 12.102.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:35:35.691 00:00:11.796 TCP 12.102.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:30:50.915 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:36:37.533 00:00:11.799 TCP 12.102.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:37:07.739 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:37:07.837 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:37:07.911 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:37:07.820 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:37:07.828 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:37:07.563 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:37:07.797 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:37:39.369 00:00:11.831 TCP 12.102.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:38:41.262 00:00:11.801 TCP 12.102.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:34:50.917 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 19:39:43.103 00:00:11.802 TCP 12.102.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:40:44.946 00:00:11.771 TCP 12.102.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:42:08.095 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:41:46.762 00:00:13.623 TCP 12.102.0.1:59640 -> 1.101.0.1:3000 15 1926 1 2025-10-13 19:42:07.968 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:42:07.874 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:42:08.160 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:42:08.119 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:42:07.884 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:42:07.849 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:37:50.921 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:42:50.424 00:00:11.813 TCP 12.102.0.1:52694 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:43:52.275 00:00:11.807 TCP 12.102.0.1:58442 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:44:54.118 00:00:11.761 TCP 12.102.0.1:45076 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:45:55.911 00:00:11.820 TCP 12.102.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:41:50.919 00:06:00.056 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 19:47:07.830 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:47:07.964 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:47:07.921 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:47:07.853 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:47:07.894 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:47:08.024 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:47:07.879 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:46:57.771 00:00:11.801 TCP 12.102.0.1:59314 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:47:59.613 00:00:11.804 TCP 12.102.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:49:01.453 00:00:11.799 TCP 12.102.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:44:50.923 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:50:03.286 00:00:11.799 TCP 12.102.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:51:05.127 00:00:11.798 TCP 12.102.0.1:58322 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:52:08.151 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:52:07.986 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:52:08.065 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:52:08.018 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:52:08.173 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:52:08.149 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:52:08.139 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:52:06.962 00:00:11.758 TCP 12.102.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:53:08.763 00:00:11.812 TCP 12.102.0.1:52502 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:48:50.924 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-13 19:54:10.617 00:00:11.799 TCP 12.102.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:55:12.453 00:00:11.766 TCP 12.102.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:56:14.263 00:00:11.803 TCP 12.102.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:51:50.927 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-13 19:57:08.341 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-13 19:57:08.385 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:57:08.257 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-13 19:57:08.289 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-13 19:57:07.991 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-13 19:57:08.206 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-13 19:57:08.267 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-13 19:57:16.107 00:00:11.759 TCP 12.102.0.1:57826 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:58:17.902 00:00:11.755 TCP 12.102.0.1:33338 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 263, avg pps: 0, avg bpp: 109 Time window: 2025-10-13 18:55:50 - 2025-10-13 19:58:29 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0025s User: 0.0025s Wall: 0.0018s flows/second: 87807.0 Runtime: 0.0018s