Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 01:58:56.634 00:00:11.759 TCP 12.102.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:59:58.435 00:00:11.756 TCP 12.102.0.1:46482 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:01:00.230 00:00:11.810 TCP 12.102.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:56:52.070 00:06:00.004 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:02:02.082 00:00:11.797 TCP 12.102.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:03:13.466 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.271 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.452 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.628 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.400 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.551 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.428 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:03:03.919 00:00:11.782 TCP 12.102.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:04:05.743 00:00:11.764 TCP 12.102.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:05:07.548 00:00:11.811 TCP 12.102.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:00:52.049 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:06:09.405 00:00:11.804 TCP 12.102.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:07:11.250 00:00:11.815 TCP 12.102.0.1:38322 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:08:13.715 00:00:00.039 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.694 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:08:14.034 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:08:14.131 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:08:14.047 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.996 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:08:14.026 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:08:13.105 00:00:11.761 TCP 12.102.0.1:57386 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:03:52.074 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:09:14.903 00:00:11.822 TCP 12.102.0.1:34802 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:10:16.765 00:00:11.811 TCP 12.102.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:11:18.614 00:00:11.778 TCP 12.102.0.1:34928 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:12:20.425 00:00:11.766 TCP 12.102.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:07:52.049 00:06:00.028 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:13:13.417 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:13:13.362 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.763 00:00:00.018 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.585 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.441 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.684 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.735 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:13:22.236 00:00:11.801 TCP 12.102.0.1:56534 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:14:24.085 00:00:11.799 TCP 12.102.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:15:25.924 00:00:11.834 TCP 12.102.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:10:52.075 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:16:27.801 00:00:11.807 TCP 12.102.0.1:52730 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:17:29.648 00:00:11.817 TCP 12.102.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:18:13.898 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.803 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.772 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.907 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.780 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.749 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:18:14.003 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:18:31.504 00:00:11.800 TCP 12.102.0.1:46964 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:19:33.346 00:00:11.802 TCP 12.102.0.1:36198 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:14:52.052 00:06:00.027 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:20:35.190 00:00:11.802 TCP 12.102.0.1:44818 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:21:37.029 00:00:11.804 TCP 12.102.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:22:38.869 00:00:11.820 TCP 12.102.0.1:44158 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:17:52.075 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:23:13.593 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.795 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.641 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.871 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.948 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.854 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.619 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:23:40.727 00:00:11.806 TCP 12.102.0.1:51652 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:24:42.569 00:00:11.855 TCP 12.102.0.1:46564 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:25:44.464 00:00:11.795 TCP 12.102.0.1:58950 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:21:52.053 00:06:00.027 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:26:46.302 00:00:11.759 TCP 12.102.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:27:48.102 00:00:11.804 TCP 12.102.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:28:13.886 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:28:13.941 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:28:13.918 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:28:14.281 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.236 00:00:00.041 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.169 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.139 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:28:49.945 00:00:11.813 TCP 12.102.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:24:52.077 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:29:51.789 00:00:11.769 TCP 12.102.0.1:37774 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:30:53.600 00:00:11.799 TCP 12.102.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:31:55.444 00:00:11.758 TCP 12.102.0.1:33750 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:33:13.939 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:33:13.840 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:32:57.251 00:00:11.806 TCP 12.102.0.1:53874 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:33:13.964 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:33:13.961 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.147 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.279 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.156 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:28:52.056 00:06:00.026 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:33:59.095 00:00:11.804 TCP 12.102.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:35:00.939 00:00:12.198 TCP 12.102.0.1:39934 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:36:03.179 00:00:11.809 TCP 12.102.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:31:52.080 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:37:05.038 00:00:11.755 TCP 12.102.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:38:14.017 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:38:06.830 00:00:11.813 TCP 12.102.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:38:14.133 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.256 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.190 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.258 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:38:13.995 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.168 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:39:08.685 00:00:11.808 TCP 12.102.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:40:10.538 00:00:11.808 TCP 12.102.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:35:52.060 00:06:00.024 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:41:12.386 00:00:11.816 TCP 12.102.0.1:33584 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:42:14.238 00:00:11.855 TCP 12.102.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:43:14.148 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:43:13.950 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.199 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.148 00:00:00.031 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.084 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.172 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.201 00:00:00.045 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:43:16.134 00:00:11.810 TCP 12.102.0.1:51854 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:38:52.082 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:44:17.984 00:00:11.805 TCP 12.102.0.1:49938 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:45:19.826 00:00:11.804 TCP 12.102.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:46:21.672 00:00:11.802 TCP 12.102.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:47:23.514 00:00:11.919 TCP 12.102.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:42:52.062 00:06:00.023 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:48:14.049 00:00:00.042 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:48:14.492 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.582 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.491 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.071 00:00:00.042 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.199 00:00:00.052 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.199 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:48:25.473 00:00:11.797 TCP 12.102.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:49:27.311 00:00:11.805 TCP 12.102.0.1:44494 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:50:29.166 00:00:11.757 TCP 12.102.0.1:45220 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:45:52.082 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:51:30.964 00:00:11.807 TCP 12.102.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:52:32.819 00:00:11.805 TCP 12.102.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:53:14.352 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:53:14.429 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.733 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.375 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.664 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.614 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.576 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:53:34.661 00:00:11.822 TCP 12.102.0.1:51138 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:54:36.521 00:00:11.820 TCP 12.102.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:49:52.064 00:06:00.022 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 02:55:38.414 00:00:11.807 TCP 12.102.0.1:55536 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:56:40.255 00:00:11.771 TCP 12.102.0.1:52450 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:52:52.083 00:06:00.000 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 02:57:42.081 00:00:11.803 TCP 12.102.0.1:58756 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:58:14.323 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 02:58:14.548 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.660 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.479 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.345 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.564 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.443 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 159, total bytes: 119935, total packets: 1065, avg bps: 257, avg pps: 0, avg bpp: 112 Time window: 2025-10-16 01:56:52 - 2025-10-16 02:58:52 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0031s User: 0.0021s Wall: 0.0023s flows/second: 70630.6 Runtime: 0.0023s