Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 04:58:44.569 00:00:11.773 TCP 12.102.0.1:55358 -> 1.101.0.1:3000 11 1507 1 2025-10-24 04:59:46.386 00:00:11.764 TCP 12.102.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:00:48.192 00:00:11.774 TCP 12.102.0.1:60434 -> 1.101.0.1:3000 11 1507 1 2025-10-24 04:56:55.877 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:01:50.006 00:00:11.805 TCP 12.102.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:02:07.895 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:02:08.058 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:02:08.097 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:02:07.972 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:02:07.921 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:02:07.982 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:02:07.950 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:02:51.853 00:00:11.804 TCP 12.102.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:03:53.700 00:00:11.775 TCP 12.102.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-10-24 04:59:55.875 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 05:04:55.513 00:00:11.815 TCP 12.102.0.1:59822 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:05:57.362 00:00:11.827 TCP 12.102.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:07:07.937 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:07:07.973 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:07:08.079 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:07:08.238 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:07:07.960 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:07:08.083 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:07:07.967 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:06:59.226 00:00:11.805 TCP 12.102.0.1:59688 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:08:01.079 00:00:11.804 TCP 12.102.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:03:55.878 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:09:02.925 00:00:11.777 TCP 12.102.0.1:54780 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:10:04.758 00:00:11.806 TCP 12.102.0.1:49468 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:11:06.608 00:00:11.767 TCP 12.102.0.1:46888 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:06:55.876 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 05:12:08.134 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:12:08.240 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:12:08.026 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:12:08.171 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:12:08.156 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:12:08.283 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:12:08.151 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:12:08.411 00:00:11.811 TCP 12.102.0.1:38164 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:13:10.259 00:00:11.802 TCP 12.102.0.1:41674 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:14:12.100 00:00:11.801 TCP 12.102.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:15:13.943 00:00:11.815 TCP 12.102.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:10:55.881 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:16:15.796 00:00:11.807 TCP 12.102.0.1:42604 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:17:08.049 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:17:08.362 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:17:08.395 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:17:08.286 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:17:08.030 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:17:08.276 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:17:08.371 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:17:17.644 00:00:11.913 TCP 12.102.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:18:19.596 00:00:11.803 TCP 12.102.0.1:37408 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:13:55.877 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 05:19:21.438 00:00:11.811 TCP 12.102.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:20:23.286 00:00:11.772 TCP 12.102.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:21:25.098 00:00:11.803 TCP 12.102.0.1:42696 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:22:09.655 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:22:09.615 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:22:09.652 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:22:09.652 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:22:09.516 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:22:09.637 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:22:09.493 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:22:26.935 00:00:11.777 TCP 12.102.0.1:37854 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:17:55.882 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:23:28.743 00:00:11.803 TCP 12.102.0.1:42362 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:24:30.592 00:00:13.254 TCP 12.102.0.1:46754 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:25:33.883 00:00:11.760 TCP 12.102.0.1:58754 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:20:55.880 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 05:26:35.677 00:00:11.767 TCP 12.102.0.1:55642 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:27:08.349 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:27:08.459 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:27:08.657 00:00:00.017 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:27:08.327 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:27:08.559 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:27:08.527 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:27:08.303 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:27:37.482 00:00:11.796 TCP 12.102.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:28:39.316 00:00:11.800 TCP 12.102.0.1:53172 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:29:41.152 00:00:11.800 TCP 12.102.0.1:59492 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:24:55.888 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:30:42.989 00:00:11.762 TCP 12.102.0.1:40482 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:31:44.788 00:00:11.798 TCP 12.102.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:32:08.697 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:32:08.582 00:00:00.033 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:32:08.495 00:00:00.012 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:32:08.793 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:32:08.718 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:32:08.710 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:32:08.560 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:32:46.626 00:00:11.802 TCP 12.102.0.1:36492 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:27:55.884 00:06:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 05:33:48.466 00:00:12.108 TCP 12.102.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:34:50.616 00:00:12.244 TCP 12.102.0.1:51892 -> 1.101.0.1:3000 15 1926 1 2025-10-24 05:35:52.899 00:00:11.802 TCP 12.102.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:31:55.889 00:06:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:37:08.354 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:37:08.753 00:00:00.037 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:36:54.738 00:00:11.763 TCP 12.102.0.1:44036 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:37:08.577 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:37:08.353 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:37:08.787 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:37:08.702 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:37:08.333 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:37:56.539 00:00:11.804 TCP 12.102.0.1:54582 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:38:58.382 00:00:11.809 TCP 12.102.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:34:55.886 00:06:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 05:40:00.227 00:00:11.801 TCP 12.102.0.1:43510 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:41:02.075 00:00:11.801 TCP 12.102.0.1:44726 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:42:08.547 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:42:08.880 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:42:08.747 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:42:08.928 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:42:08.711 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:42:08.568 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:42:09.005 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:42:03.909 00:00:11.873 TCP 12.102.0.1:46694 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:43:05.821 00:00:11.801 TCP 12.102.0.1:37912 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:38:55.889 00:06:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:44:07.663 00:00:11.809 TCP 12.102.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:45:09.507 00:00:11.812 TCP 12.102.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:46:11.358 00:00:11.779 TCP 12.102.0.1:60840 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:41:55.888 00:06:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 05:47:08.857 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:47:08.766 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:47:08.886 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:47:08.940 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:47:08.865 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:47:08.615 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:47:08.918 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:47:13.180 00:00:12.715 TCP 12.102.0.1:60624 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:48:15.935 00:00:11.865 TCP 12.102.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:49:17.842 00:00:11.800 TCP 12.102.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:50:19.684 00:00:11.797 TCP 12.102.0.1:57866 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:45:55.892 00:06:00.087 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:51:21.520 00:00:11.801 TCP 12.102.0.1:60116 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:52:08.916 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:52:08.962 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:52:08.920 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:52:08.939 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:52:08.994 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:52:09.029 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:52:09.029 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:52:23.362 00:00:11.777 TCP 12.102.0.1:50700 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:53:25.176 00:00:11.803 TCP 12.102.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:48:55.889 00:06:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-24 05:54:27.023 00:00:11.763 TCP 12.102.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:55:28.822 00:00:11.798 TCP 12.102.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:56:30.662 00:00:11.808 TCP 12.102.0.1:50930 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:57:09.544 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 05:57:09.494 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-24 05:57:09.390 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-24 05:57:09.525 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-24 05:57:09.427 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-24 05:57:09.406 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-24 05:57:09.368 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-24 05:57:32.511 00:00:11.799 TCP 12.102.0.1:48618 -> 1.101.0.1:3000 11 1507 1 2025-10-24 05:52:55.892 00:06:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-24 05:58:34.351 00:00:11.818 TCP 12.102.0.1:50370 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 269, avg pps: 0, avg bpp: 109 Time window: 2025-10-24 04:56:55 - 2025-10-24 05:58:55 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0034s User: 0.0017s Wall: 0.0019s flows/second: 82778.9 Runtime: 0.0020s