Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 05:59:27.098 00:00:11.794 TCP 12.102.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:54:51.148 00:06:00.045 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:00:28.934 00:00:11.810 TCP 12.102.0.1:46894 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:01:30.795 00:00:11.801 TCP 12.102.0.1:44082 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:02:20.354 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:02:20.423 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:02:20.461 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:02:20.385 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:02:20.378 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:02:20.477 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:02:20.332 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:02:32.636 00:00:11.764 TCP 12.102.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:57:51.146 00:06:00.051 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-14 06:03:34.450 00:00:11.819 TCP 12.102.0.1:47010 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:04:36.306 00:00:11.800 TCP 12.102.0.1:53424 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:05:38.143 00:00:11.818 TCP 12.102.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:01:51.149 00:06:00.047 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:06:39.998 00:00:11.801 TCP 12.102.0.1:39368 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:07:20.707 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:07:21.024 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:07:20.837 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:07:20.407 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:07:20.730 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:07:20.565 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:07:20.720 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:07:41.838 00:00:11.800 TCP 12.102.0.1:60978 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:08:43.674 00:00:11.808 TCP 12.102.0.1:51522 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:04:51.148 00:06:00.050 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-14 06:09:45.532 00:00:12.247 TCP 12.102.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:10:47.816 00:00:11.794 TCP 12.102.0.1:56316 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:11:49.655 00:00:11.818 TCP 12.102.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:12:20.409 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:12:20.543 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:12:20.466 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:12:20.475 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:12:20.431 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:12:20.578 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:12:20.439 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:12:51.509 00:00:11.804 TCP 12.102.0.1:49956 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:08:51.152 00:06:00.044 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:13:53.384 00:00:11.776 TCP 12.102.0.1:32786 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:14:55.194 00:00:11.803 TCP 12.102.0.1:46928 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:15:57.048 00:00:11.797 TCP 12.102.0.1:41384 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:11:51.149 00:06:00.050 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-14 06:16:58.883 00:00:11.802 TCP 12.102.0.1:58422 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:17:20.630 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:17:20.651 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:17:20.608 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:17:20.934 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:17:20.653 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:17:20.883 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:17:20.753 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:18:00.728 00:00:11.800 TCP 12.102.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:19:02.573 00:00:11.804 TCP 12.102.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:20:04.419 00:00:11.804 TCP 12.102.0.1:55956 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:15:51.151 00:06:00.047 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:21:06.262 00:00:11.805 TCP 12.102.0.1:42354 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:22:20.715 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:22:20.790 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:22:08.102 00:00:11.761 TCP 12.102.0.1:54228 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:22:20.948 00:00:00.011 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:22:20.895 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:22:20.738 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:22:20.949 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:22:20.664 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:23:09.901 00:00:11.804 TCP 12.102.0.1:48016 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:18:51.153 00:06:00.048 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-14 06:24:11.752 00:00:11.821 TCP 12.102.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:25:13.602 00:00:11.808 TCP 12.102.0.1:38050 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:26:15.439 00:00:11.810 TCP 12.102.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:27:20.896 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:27:21.067 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:27:20.682 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:27:20.842 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:27:20.971 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:27:20.862 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:27:20.819 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:27:17.291 00:00:11.802 TCP 12.102.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:22:51.155 00:06:00.044 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:28:19.132 00:00:11.814 TCP 12.102.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:29:20.986 00:00:11.801 TCP 12.102.0.1:51482 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:30:22.823 00:00:11.758 TCP 12.102.0.1:41562 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:25:51.153 00:06:00.050 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-14 06:31:24.620 00:00:11.763 TCP 12.102.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:32:20.970 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:32:21.117 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:32:21.042 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:32:20.821 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:32:20.947 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:32:20.818 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:32:20.799 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:32:26.422 00:00:11.764 TCP 12.102.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:33:28.226 00:00:11.800 TCP 12.102.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:34:30.076 00:00:11.802 TCP 12.102.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:29:51.156 00:06:00.045 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:35:31.914 00:00:11.779 TCP 12.102.0.1:47966 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:36:33.734 00:00:11.806 TCP 12.102.0.1:47320 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:37:20.894 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:37:20.983 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:37:21.029 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:37:20.886 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:37:20.924 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:37:20.895 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:37:20.863 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:37:35.591 00:00:11.767 TCP 12.102.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:32:51.154 00:06:00.050 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-14 06:38:37.397 00:00:11.806 TCP 12.102.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:39:39.243 00:00:11.801 TCP 12.102.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:40:41.084 00:00:11.800 TCP 12.102.0.1:49296 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:36:51.159 00:06:00.044 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:41:42.922 00:00:11.819 TCP 12.102.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:42:21.070 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:42:20.902 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:42:21.343 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:42:21.118 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:42:21.091 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:42:21.295 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:42:20.980 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:42:44.777 00:00:11.802 TCP 12.102.0.1:54268 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:43:46.617 00:00:11.803 TCP 12.102.0.1:51922 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:39:51.156 00:06:00.049 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-14 06:44:48.469 00:00:11.800 TCP 12.102.0.1:47080 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:45:50.309 00:00:11.828 TCP 12.102.0.1:36890 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:46:52.176 00:00:11.800 TCP 12.102.0.1:43384 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:47:21.217 00:00:00.034 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:47:21.326 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:47:21.199 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:47:21.404 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:47:21.265 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:47:21.130 00:00:00.034 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:47:21.178 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:47:54.041 00:00:11.770 TCP 12.102.0.1:33496 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:43:51.159 00:06:00.044 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:48:55.846 00:00:11.803 TCP 12.102.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:49:57.695 00:00:11.804 TCP 12.102.0.1:45030 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:50:59.537 00:00:11.808 TCP 12.102.0.1:35734 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:46:51.157 00:06:00.050 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-14 06:52:01.386 00:00:11.802 TCP 12.102.0.1:51718 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:52:21.259 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:52:21.519 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:52:21.282 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:52:21.241 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:52:21.369 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:52:21.248 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:52:21.218 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:53:03.227 00:00:11.760 TCP 12.102.0.1:54116 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:54:05.026 00:00:11.803 TCP 12.102.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:55:06.863 00:00:11.854 TCP 12.102.0.1:51296 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:50:51.161 00:06:00.043 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-14 06:56:08.757 00:00:11.760 TCP 12.102.0.1:33348 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:57:10.562 00:00:11.809 TCP 12.102.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:57:21.473 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 06:57:21.557 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-14 06:57:21.258 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-14 06:57:21.556 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-14 06:57:21.501 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-14 06:57:21.639 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-14 06:57:21.234 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-14 06:58:12.408 00:00:11.763 TCP 12.102.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:53:51.158 00:06:00.050 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 254, avg pps: 0, avg bpp: 108 Time window: 2025-10-14 05:54:51 - 2025-10-14 06:59:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0025s User: 0.0025s Wall: 0.0024s flows/second: 65574.4 Runtime: 0.0025s