Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 02:58:43.924 00:00:11.820 TCP 12.102.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:59:45.780 00:00:11.804 TCP 12.102.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:00:47.622 00:00:12.550 TCP 12.102.0.1:40812 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:56:52.068 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:01:50.211 00:00:11.811 TCP 12.102.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:02:52.090 00:00:11.807 TCP 12.102.0.1:54092 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:03:14.410 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.433 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.810 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.653 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.748 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.563 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.631 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:03:53.936 00:00:11.987 TCP 12.102.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:59:52.085 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:04:55.966 00:00:11.817 TCP 12.102.0.1:46992 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:05:57.819 00:00:11.764 TCP 12.102.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:06:59.618 00:00:11.808 TCP 12.102.0.1:36382 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:08:01.469 00:00:11.804 TCP 12.102.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:08:14.745 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.838 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.727 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.592 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.732 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.721 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:08:14.570 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:03:52.070 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:09:03.313 00:00:11.800 TCP 12.102.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:10:05.153 00:00:11.773 TCP 12.102.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:11:06.969 00:00:12.079 TCP 12.102.0.1:53778 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:06:52.086 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:12:09.092 00:00:12.239 TCP 12.102.0.1:45034 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:13:14.961 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.781 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.821 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.957 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.939 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.854 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.798 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:13:11.373 00:00:11.826 TCP 12.102.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:14:13.250 00:00:11.801 TCP 12.102.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:15:15.099 00:00:11.764 TCP 12.102.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:10:52.071 00:06:00.019 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:16:16.904 00:00:11.805 TCP 12.102.0.1:36832 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:17:18.744 00:00:11.804 TCP 12.102.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:18:15.213 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:18:14.675 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:18:15.016 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:18:15.058 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:18:14.964 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:18:14.977 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:18:15.035 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:18:20.586 00:00:11.806 TCP 12.102.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:13:52.087 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:19:22.430 00:00:11.821 TCP 12.102.0.1:40008 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:20:24.288 00:00:11.804 TCP 12.102.0.1:32776 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:21:26.126 00:00:12.240 TCP 12.102.0.1:39748 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:22:28.407 00:00:11.802 TCP 12.102.0.1:54726 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:17:52.073 00:06:00.021 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:23:15.057 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:23:15.018 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:23:15.018 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:23:14.958 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:23:14.817 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:23:14.902 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:23:14.936 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:23:30.246 00:00:11.778 TCP 12.102.0.1:50890 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:24:32.080 00:00:11.762 TCP 12.102.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:25:33.885 00:00:11.800 TCP 12.102.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:20:52.091 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:26:35.728 00:00:11.849 TCP 12.102.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:27:37.619 00:00:11.808 TCP 12.102.0.1:59598 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:28:14.711 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:28:15.200 00:00:00.044 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:28:14.950 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:28:15.053 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:28:15.208 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:28:15.298 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:28:14.734 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:28:39.461 00:00:12.113 TCP 12.102.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:29:41.610 00:00:12.065 TCP 12.102.0.1:36524 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:24:52.076 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:30:43.722 00:00:11.811 TCP 12.102.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:31:45.560 00:00:11.792 TCP 12.102.0.1:40686 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:27:52.093 00:06:00.002 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:32:47.358 00:00:11.783 TCP 12.102.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:33:15.093 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:33:15.216 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:33:14.957 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:33:15.219 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:33:15.116 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:33:15.018 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:33:15.006 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:33:49.182 00:00:11.836 TCP 12.102.0.1:39614 -> 1.101.0.1:3000 12 1559 1 2025-10-16 03:34:51.076 00:00:11.807 TCP 12.102.0.1:46898 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:35:52.917 00:00:11.844 TCP 12.102.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:31:52.078 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:36:54.789 00:00:11.813 TCP 12.102.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:37:56.639 00:00:11.828 TCP 12.102.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:38:15.402 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.153 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.287 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.253 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.130 00:00:00.047 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.338 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.131 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:38:58.506 00:00:11.800 TCP 12.102.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:34:52.095 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:40:00.344 00:00:11.804 TCP 12.102.0.1:40496 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:41:02.182 00:00:11.768 TCP 12.102.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:42:03.984 00:00:11.760 TCP 12.102.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:43:15.440 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:43:15.512 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.323 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.463 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.521 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:43:05.783 00:00:11.766 TCP 12.102.0.1:35562 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:43:15.174 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:43:15.411 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:38:52.080 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:44:07.582 00:00:11.861 TCP 12.102.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:45:09.479 00:00:11.800 TCP 12.102.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:46:11.315 00:00:11.804 TCP 12.102.0.1:59698 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:41:52.096 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:47:13.159 00:00:11.765 TCP 12.102.0.1:49670 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:48:15.338 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:48:15.451 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.378 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.392 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.360 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.573 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.351 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:48:14.959 00:00:11.795 TCP 12.102.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:49:16.793 00:00:11.800 TCP 12.102.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:50:18.634 00:00:11.799 TCP 12.102.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:45:52.080 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:51:20.471 00:00:12.200 TCP 12.102.0.1:40958 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:52:22.711 00:00:11.801 TCP 12.102.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:53:15.585 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.490 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.451 00:00:00.019 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.701 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.579 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.484 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:53:15.429 00:00:00.019 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:53:24.554 00:00:11.798 TCP 12.102.0.1:55186 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:48:52.097 00:06:00.001 TCP 179.10.12.12:58070 -> 179.10.12.10:179 7 497 1 2025-10-16 03:54:26.389 00:00:12.234 TCP 12.102.0.1:37614 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:55:28.662 00:00:11.814 TCP 12.102.0.1:47994 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:56:30.514 00:00:11.799 TCP 12.102.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:57:32.357 00:00:11.803 TCP 12.102.0.1:47856 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:52:52.081 00:06:00.020 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-16 03:58:15.598 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.818 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.874 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.603 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.716 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.486 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-16 03:58:15.580 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-16 03:58:34.194 00:00:11.755 TCP 12.102.0.1:46442 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 123115, total packets: 1096, avg bps: 264, avg pps: 0, avg bpp: 112 Time window: 2025-10-16 02:56:52 - 2025-10-16 03:58:52 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0019s User: 0.0019s Wall: 0.0016s flows/second: 101649.3 Runtime: 0.0016s