Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 23:58:47.405 00:00:11.807 TCP 12.102.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:59:08.576 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-17 23:59:08.747 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:59:08.695 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-17 23:59:08.558 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-17 23:59:08.480 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-17 23:59:08.382 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-17 23:59:08.537 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-17 23:54:52.928 00:06:00.059 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-17 23:59:49.253 00:00:11.810 TCP 12.102.0.1:53466 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:00:51.102 00:00:11.769 TCP 12.102.0.1:47996 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:01:52.911 00:00:11.800 TCP 12.102.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:02:54.748 00:00:11.815 TCP 12.102.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:58:52.929 00:06:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 00:04:08.809 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:04:08.761 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:04:08.747 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:04:08.526 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:03:56.608 00:00:11.759 TCP 12.102.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:04:08.757 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:04:08.720 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:04:08.504 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:04:58.402 00:00:11.800 TCP 12.102.0.1:40560 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:06:00.242 00:00:11.801 TCP 12.102.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:01:52.935 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 00:07:02.085 00:00:11.798 TCP 12.102.0.1:52546 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:08:03.918 00:00:11.829 TCP 12.102.0.1:45304 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:09:08.718 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:09:08.916 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:09:08.957 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:09:08.742 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:09:08.944 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:09:08.754 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:09:08.856 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:09:05.786 00:00:11.758 TCP 12.102.0.1:44454 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:10:07.580 00:00:11.804 TCP 12.102.0.1:43436 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:05:52.934 00:06:00.060 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 00:11:09.424 00:00:11.831 TCP 12.102.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:12:11.293 00:00:11.802 TCP 12.102.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:13:13.134 00:00:11.765 TCP 12.102.0.1:47218 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:08:52.937 00:06:00.055 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 00:14:08.987 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:14:09.117 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:14:09.083 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:14:09.368 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:14:09.011 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:14:09.129 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:14:09.249 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:14:14.933 00:00:11.822 TCP 12.102.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:15:16.787 00:00:11.768 TCP 12.102.0.1:33544 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:16:18.589 00:00:11.808 TCP 12.102.0.1:47932 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:17:20.435 00:00:11.809 TCP 12.102.0.1:44410 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:12:52.939 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 00:18:22.279 00:00:11.864 TCP 12.102.0.1:58318 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:19:09.034 00:00:00.043 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:19:08.820 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:19:09.199 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:19:09.357 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:19:09.118 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:19:09.056 00:00:00.043 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:19:09.353 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:19:24.186 00:00:11.795 TCP 12.102.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:20:26.021 00:00:11.764 TCP 12.102.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:15:52.941 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 00:21:27.824 00:00:11.762 TCP 12.102.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:22:29.628 00:00:11.796 TCP 12.102.0.1:46614 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:23:31.465 00:00:11.807 TCP 12.102.0.1:59708 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:24:08.887 00:00:00.032 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:24:09.120 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:24:09.306 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:24:09.062 00:00:00.040 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:24:09.282 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:24:09.164 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:24:09.041 00:00:00.041 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:24:33.311 00:00:11.801 TCP 12.102.0.1:53190 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:19:52.938 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 00:25:35.147 00:00:11.820 TCP 12.102.0.1:40212 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:26:37.012 00:00:11.803 TCP 12.102.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:22:52.941 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 00:27:38.850 00:00:12.571 TCP 12.102.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:28:41.456 00:00:11.798 TCP 12.102.0.1:42634 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:29:09.307 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:29:09.122 00:00:00.046 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:29:09.382 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:29:09.337 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:29:09.330 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:29:09.275 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:29:09.256 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:29:43.291 00:00:11.801 TCP 12.102.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:30:45.128 00:00:11.804 TCP 12.102.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:26:52.941 00:06:00.058 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-18 00:31:46.963 00:00:11.811 TCP 12.102.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:32:48.809 00:00:11.760 TCP 12.102.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:33:50.607 00:00:11.809 TCP 12.102.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:34:09.602 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:34:09.834 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:34:09.684 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:34:09.521 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:34:09.625 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:34:09.675 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:34:09.498 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:29:52.944 00:06:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 00:34:52.453 00:00:11.801 TCP 12.102.0.1:39790 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:35:54.287 00:00:12.479 TCP 12.102.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:36:56.802 00:00:11.929 TCP 12.102.0.1:40882 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:33:52.944 00:05:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-18 00:37:58.768 00:00:11.815 TCP 12.102.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:39:09.102 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:39:09.453 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:39:00.618 00:00:11.804 TCP 12.102.0.1:35680 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:39:09.638 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:39:09.268 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:39:09.125 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:39:09.464 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:39:09.466 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:40:02.460 00:00:11.806 TCP 12.102.0.1:52556 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:41:04.305 00:00:11.802 TCP 12.102.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:36:52.945 00:06:00.056 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-18 00:42:06.142 00:00:11.819 TCP 12.102.0.1:37080 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:43:07.996 00:00:11.829 TCP 12.102.0.1:59170 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:39:52.943 00:05:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-18 00:44:09.528 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:44:09.607 00:00:00.028 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:44:09.615 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:44:09.556 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:44:09.551 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:44:09.565 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:44:09.426 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:44:09.866 00:00:11.800 TCP 12.102.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:45:11.707 00:00:11.808 TCP 12.102.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:46:13.553 00:00:11.817 TCP 12.102.0.1:55532 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:47:15.400 00:00:11.772 TCP 12.102.0.1:44714 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:43:52.950 00:05:00.052 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-18 00:48:17.211 00:00:11.809 TCP 12.102.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:49:09.427 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:49:09.484 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:49:09.712 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:49:09.586 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:49:09.451 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:49:09.759 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:49:09.537 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:49:19.080 00:00:11.852 TCP 12.102.0.1:56356 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:45:52.948 00:05:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-18 00:50:20.971 00:00:11.817 TCP 12.102.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:51:22.827 00:00:11.772 TCP 12.102.0.1:60358 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:52:24.638 00:00:11.796 TCP 12.102.0.1:49850 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:53:26.479 00:00:11.776 TCP 12.102.0.1:59666 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:49:52.950 00:05:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-18 00:54:09.668 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-18 00:54:09.731 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-18 00:54:09.720 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:54:09.671 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-18 00:54:09.690 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-18 00:54:09.834 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-18 00:54:09.628 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-18 00:54:28.294 00:00:11.817 TCP 12.102.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:55:30.147 00:00:11.766 TCP 12.102.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:51:52.948 00:05:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-18 00:56:31.958 00:00:11.806 TCP 12.102.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:57:33.803 00:00:11.784 TCP 12.102.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:58:35.623 00:00:11.804 TCP 12.102.0.1:50220 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 124841, total packets: 1141, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-10-17 23:54:52 - 2025-10-18 00:58:47 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0032s User: 0.0024s Wall: 0.0023s flows/second: 70799.2 Runtime: 0.0023s