Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 08:58:46.652 00:00:11.831 TCP 12.102.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:54:51.654 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 08:59:48.519 00:00:11.798 TCP 12.102.0.1:53844 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:00:50.355 00:00:11.770 TCP 12.102.0.1:47320 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:01:52.163 00:00:11.809 TCP 12.102.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:02:53.019 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:02:53.205 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:02:53.052 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:02:53.008 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:02:53.119 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:02:53.166 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:02:52.984 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:02:54.009 00:00:11.794 TCP 12.102.0.1:58216 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:58:51.657 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-15 09:03:55.845 00:00:11.771 TCP 12.102.0.1:32828 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:04:57.654 00:00:11.808 TCP 12.102.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:05:59.501 00:00:11.815 TCP 12.102.0.1:48570 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:01:51.655 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 09:07:01.363 00:00:11.797 TCP 12.102.0.1:47190 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:07:52.995 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:07:53.114 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:07:52.920 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:07:53.020 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:07:53.127 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:07:53.089 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:07:53.230 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:08:03.198 00:00:11.818 TCP 12.102.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:09:05.075 00:00:11.800 TCP 12.102.0.1:45512 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:10:06.912 00:00:11.825 TCP 12.102.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:05:51.658 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-15 09:11:08.774 00:00:11.762 TCP 12.102.0.1:49774 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:12:10.573 00:00:11.801 TCP 12.102.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:12:52.968 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:12:53.115 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:12:53.045 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:12:53.150 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:12:53.042 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:12:53.061 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:12:53.022 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:13:12.414 00:00:11.759 TCP 12.102.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:08:51.657 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 09:14:14.214 00:00:11.761 TCP 12.102.0.1:59510 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:15:16.024 00:00:11.806 TCP 12.102.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:16:17.866 00:00:12.191 TCP 12.102.0.1:33258 -> 1.101.0.1:3000 15 1926 1 2025-10-15 09:17:20.097 00:00:11.823 TCP 12.102.0.1:48382 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:12:51.661 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-15 09:17:53.302 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:17:53.453 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:17:53.246 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:17:53.327 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:17:53.200 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:17:53.337 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:17:53.305 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:18:21.958 00:00:11.802 TCP 12.102.0.1:47778 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:19:23.794 00:00:11.799 TCP 12.102.0.1:49648 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:20:25.635 00:00:11.802 TCP 12.102.0.1:41278 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:15:51.661 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 09:21:27.480 00:00:11.811 TCP 12.102.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:22:29.330 00:00:11.818 TCP 12.102.0.1:33318 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:22:53.249 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:22:53.342 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:22:52.954 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:22:53.275 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:22:53.390 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:22:53.129 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:22:53.253 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:23:31.188 00:00:11.762 TCP 12.102.0.1:55288 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:24:32.991 00:00:11.805 TCP 12.102.0.1:54302 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:19:51.660 00:06:00.058 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-15 09:25:34.834 00:00:11.804 TCP 12.102.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:26:36.674 00:00:11.803 TCP 12.102.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:27:53.516 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:27:53.382 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:27:38.517 00:00:11.799 TCP 12.102.0.1:45720 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:27:53.380 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:27:53.440 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:27:53.389 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:27:53.250 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:27:53.418 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:22:51.660 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 09:28:40.352 00:00:11.813 TCP 12.102.0.1:35482 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:29:42.203 00:00:11.821 TCP 12.102.0.1:60844 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:30:44.079 00:00:11.792 TCP 12.102.0.1:57156 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:26:51.661 00:06:00.059 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-15 09:31:45.914 00:00:11.817 TCP 12.102.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:32:53.632 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:32:53.473 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:32:53.569 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:32:53.151 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:32:53.618 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:32:53.497 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:32:53.129 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:32:47.765 00:00:11.799 TCP 12.102.0.1:42502 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:33:49.607 00:00:11.800 TCP 12.102.0.1:33382 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:29:51.659 00:06:00.064 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 09:34:51.446 00:00:11.804 TCP 12.102.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:35:53.287 00:00:11.800 TCP 12.102.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:36:55.145 00:00:11.823 TCP 12.102.0.1:52784 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:37:53.638 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:37:53.592 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:37:53.623 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:37:53.372 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:37:53.648 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:37:53.275 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:37:53.251 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:37:57.010 00:00:11.813 TCP 12.102.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:33:51.664 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-15 09:38:58.863 00:00:11.799 TCP 12.102.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:40:00.703 00:00:11.812 TCP 12.102.0.1:53672 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:41:02.552 00:00:11.836 TCP 12.102.0.1:59302 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:36:51.662 00:06:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 09:42:04.426 00:00:11.775 TCP 12.102.0.1:43568 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:42:53.648 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:42:53.834 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:42:53.909 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:42:53.671 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:42:53.791 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:42:53.668 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:42:53.606 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:43:06.241 00:00:11.801 TCP 12.102.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:44:08.084 00:00:12.293 TCP 12.102.0.1:48486 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:45:10.414 00:00:11.806 TCP 12.102.0.1:55846 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:40:51.667 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-15 09:46:12.256 00:00:11.802 TCP 12.102.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:47:14.096 00:00:11.801 TCP 12.102.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:47:53.804 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:47:53.716 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:47:53.664 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:47:53.694 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:47:53.479 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:47:53.864 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:47:53.670 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:48:15.931 00:00:11.809 TCP 12.102.0.1:41498 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:43:51.665 00:06:00.063 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 09:49:17.779 00:00:11.806 TCP 12.102.0.1:51114 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:50:19.625 00:00:11.800 TCP 12.102.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:51:21.464 00:00:11.804 TCP 12.102.0.1:60754 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:52:23.305 00:00:11.766 TCP 12.102.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:52:53.774 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:47:51.670 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-15 09:52:53.912 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:52:53.617 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:52:53.762 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:52:53.797 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:52:53.932 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:52:53.702 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:53:25.108 00:00:11.802 TCP 12.102.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:54:26.945 00:00:11.771 TCP 12.102.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:55:28.754 00:00:11.808 TCP 12.102.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:50:51.666 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-15 09:56:30.597 00:00:11.810 TCP 12.102.0.1:49936 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:57:32.444 00:00:11.798 TCP 12.102.0.1:34696 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:57:53.850 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-15 09:57:53.963 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-15 09:57:53.814 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-15 09:57:53.824 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-15 09:57:53.941 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-15 09:57:54.005 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 09:57:54.004 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-15 09:58:34.282 00:00:11.798 TCP 12.102.0.1:47544 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 261, avg pps: 0, avg bpp: 109 Time window: 2025-10-15 08:54:51 - 2025-10-15 09:58:46 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0035s User: 0.0018s Wall: 0.0023s flows/second: 70263.7 Runtime: 0.0023s