Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 00:59:26.318 00:00:11.805 TCP 12.102.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-10-25 00:54:56.249 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:00:28.161 00:00:11.802 TCP 12.102.0.1:45864 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:01:30.002 00:00:11.758 TCP 12.102.0.1:46892 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:02:32.426 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:02:32.604 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:02:32.595 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:02:32.320 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:02:32.658 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:02:32.475 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:02:32.298 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:02:31.797 00:00:11.802 TCP 12.102.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:03:33.635 00:00:11.805 TCP 12.102.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-10-25 00:58:56.252 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-25 01:04:35.477 00:00:11.797 TCP 12.102.0.1:54464 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:05:37.312 00:00:11.805 TCP 12.102.0.1:58820 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:06:39.165 00:00:11.762 TCP 12.102.0.1:38394 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:01:56.250 00:06:00.133 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:07:32.569 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:07:32.645 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:07:32.668 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:07:32.313 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:07:32.669 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:07:32.532 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:07:32.291 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:07:40.962 00:00:11.803 TCP 12.102.0.1:51176 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:08:42.804 00:00:11.808 TCP 12.102.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:09:44.650 00:00:11.810 TCP 12.102.0.1:33394 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:05:56.255 00:06:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-25 01:10:46.497 00:00:11.802 TCP 12.102.0.1:50634 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:11:48.332 00:00:11.813 TCP 12.102.0.1:40388 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:12:33.006 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:12:32.993 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:12:33.001 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:12:32.931 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:12:33.028 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:12:33.105 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:12:33.036 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:12:50.182 00:00:11.762 TCP 12.102.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:08:56.252 00:06:00.131 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:13:51.981 00:00:11.803 TCP 12.102.0.1:53474 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:14:53.819 00:00:11.809 TCP 12.102.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:15:55.662 00:00:11.814 TCP 12.102.0.1:49252 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:16:57.514 00:00:11.798 TCP 12.102.0.1:60288 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:17:32.794 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:17:32.988 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:17:33.305 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:17:32.989 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:17:32.973 00:00:00.032 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:17:33.059 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:17:32.965 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:12:56.257 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-25 01:17:59.354 00:00:11.800 TCP 12.102.0.1:35586 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:19:01.196 00:00:11.808 TCP 12.102.0.1:48032 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:20:03.065 00:00:11.800 TCP 12.102.0.1:38724 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:15:56.254 00:06:00.131 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:21:04.903 00:00:11.764 TCP 12.102.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:22:06.702 00:00:11.798 TCP 12.102.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:22:32.870 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:22:32.856 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:22:32.841 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:22:32.866 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:22:32.891 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:22:32.876 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:22:32.893 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:23:08.545 00:00:11.764 TCP 12.102.0.1:42390 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:24:10.346 00:00:11.766 TCP 12.102.0.1:48828 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:19:56.258 00:06:00.125 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-25 01:25:12.172 00:00:11.813 TCP 12.102.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:26:14.034 00:00:11.809 TCP 12.102.0.1:47270 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:27:15.885 00:00:11.804 TCP 12.102.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:27:32.730 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:27:33.017 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:27:32.780 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:27:32.806 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:27:32.962 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:27:33.066 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:27:32.758 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:22:56.255 00:06:00.131 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:28:17.731 00:00:11.815 TCP 12.102.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:29:19.583 00:00:11.797 TCP 12.102.0.1:58438 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:30:21.419 00:00:11.762 TCP 12.102.0.1:52410 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:31:23.221 00:00:11.809 TCP 12.102.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:26:56.258 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-25 01:32:33.046 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:32:33.046 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:32:33.091 00:00:00.030 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:32:32.958 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:32:33.056 00:00:00.016 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:32:32.952 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:32:32.936 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:32:25.084 00:00:11.862 TCP 12.102.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:33:26.989 00:00:11.756 TCP 12.102.0.1:50678 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:34:28.783 00:00:11.808 TCP 12.102.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:29:56.256 00:06:00.132 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:35:30.630 00:00:11.802 TCP 12.102.0.1:55530 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:36:32.473 00:00:11.780 TCP 12.102.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:37:33.565 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:37:33.644 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:37:33.452 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:37:33.644 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:37:33.633 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:37:33.548 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:37:33.431 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:37:34.294 00:00:11.814 TCP 12.102.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:38:36.149 00:00:11.774 TCP 12.102.0.1:44526 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:33:56.259 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-25 01:39:37.959 00:00:11.823 TCP 12.102.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:40:39.817 00:00:11.770 TCP 12.102.0.1:47246 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:41:41.637 00:00:11.830 TCP 12.102.0.1:39838 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:36:56.258 00:06:00.133 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:42:33.360 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:42:33.284 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:42:33.037 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:42:33.362 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:42:33.298 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:42:33.055 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:42:33.015 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:42:43.503 00:00:11.803 TCP 12.102.0.1:57830 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:43:45.344 00:00:12.372 TCP 12.102.0.1:41190 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:44:47.751 00:00:11.758 TCP 12.102.0.1:60986 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:40:56.261 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-25 01:45:49.547 00:00:11.805 TCP 12.102.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:46:51.393 00:00:11.807 TCP 12.102.0.1:42300 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:47:33.260 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:47:33.543 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:47:33.507 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:47:33.588 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:47:33.282 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:47:33.061 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:47:33.449 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:47:53.239 00:00:11.810 TCP 12.102.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:43:56.259 00:06:00.133 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:48:55.090 00:00:11.761 TCP 12.102.0.1:35064 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:49:56.889 00:00:11.840 TCP 12.102.0.1:38862 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:50:58.773 00:00:12.238 TCP 12.102.0.1:48786 -> 1.101.0.1:3000 15 1926 1 2025-10-25 01:52:01.071 00:00:11.803 TCP 12.102.0.1:53338 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:52:33.504 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:52:33.372 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:52:33.535 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:52:33.461 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:52:33.463 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:52:33.406 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:52:33.439 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:47:56.262 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-25 01:53:02.913 00:00:11.891 TCP 12.102.0.1:35242 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:54:04.843 00:00:11.810 TCP 12.102.0.1:57464 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:55:06.693 00:00:11.802 TCP 12.102.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:50:56.259 00:06:00.134 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-25 01:56:08.532 00:00:11.800 TCP 12.102.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:57:10.370 00:00:11.985 TCP 12.102.0.1:40278 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:57:33.798 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-25 01:57:33.651 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-25 01:57:33.806 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 01:57:33.844 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-25 01:57:33.820 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-25 01:57:33.464 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-25 01:57:33.785 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-25 01:58:12.398 00:00:11.802 TCP 12.102.0.1:58030 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 259, avg pps: 0, avg bpp: 109 Time window: 2025-10-25 00:54:56 - 2025-10-25 01:58:24 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0033s User: 0.0033s Wall: 0.0028s flows/second: 56540.4 Runtime: 0.0028s