Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 10:59:39.964 00:00:11.803 TCP 12.102.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:00:41.799 00:00:11.802 TCP 12.102.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:55:57.444 00:06:00.180 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:01:43.636 00:00:11.930 TCP 12.102.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:02:45.610 00:00:11.849 TCP 12.102.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:03:42.228 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:03:42.339 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:03:42.411 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:03:41.911 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:03:42.263 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:03:42.273 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:03:41.889 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 10:58:57.443 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 11:03:47.494 00:00:11.805 TCP 12.102.0.1:38296 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:04:49.334 00:00:11.857 TCP 12.102.0.1:39922 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:05:51.225 00:00:11.776 TCP 12.102.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:06:53.045 00:00:11.800 TCP 12.102.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:02:57.449 00:06:00.178 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:07:54.883 00:00:11.763 TCP 12.102.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:08:42.722 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:08:42.528 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:08:42.846 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:08:42.562 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:08:42.799 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:08:42.627 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:08:42.540 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:08:56.681 00:00:11.796 TCP 12.102.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:09:58.517 00:00:11.795 TCP 12.102.0.1:54316 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:05:57.447 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 11:11:00.353 00:00:11.777 TCP 12.102.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:12:02.171 00:00:11.765 TCP 12.102.0.1:52192 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:13:03.972 00:00:12.054 TCP 12.102.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:13:42.454 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:13:42.560 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:13:42.610 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:13:42.479 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:13:42.389 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:13:42.543 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:13:42.446 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:14:06.080 00:00:11.807 TCP 12.102.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:09:57.451 00:06:00.180 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:15:07.928 00:00:11.820 TCP 12.102.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:16:09.788 00:00:12.256 TCP 12.102.0.1:53204 -> 1.101.0.1:3000 15 1926 1 2025-10-27 11:17:12.086 00:00:11.800 TCP 12.102.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:12:57.450 00:06:00.185 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 11:18:13.919 00:00:11.816 TCP 12.102.0.1:51034 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:18:42.516 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:18:42.432 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:18:42.383 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:18:42.500 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:18:42.663 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:18:42.520 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:18:42.493 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:19:15.773 00:00:11.809 TCP 12.102.0.1:38038 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:20:17.620 00:00:11.760 TCP 12.102.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:21:19.417 00:00:11.808 TCP 12.102.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:16:57.458 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:22:21.265 00:00:11.764 TCP 12.102.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:23:23.078 00:00:11.813 TCP 12.102.0.1:43702 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:23:42.392 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:23:42.837 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:23:42.781 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:23:42.709 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:23:42.772 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:23:42.656 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:23:42.687 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:24:24.930 00:00:11.817 TCP 12.102.0.1:58960 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:19:57.455 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 11:25:26.781 00:00:11.799 TCP 12.102.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:26:28.623 00:00:11.795 TCP 12.102.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:27:30.456 00:00:11.943 TCP 12.102.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:28:43.042 00:00:00.047 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:28:42.941 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:28:43.092 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:28:43.064 00:00:00.048 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:28:43.086 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:28:43.194 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:28:43.179 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:28:32.437 00:00:11.803 TCP 12.102.0.1:47230 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:23:57.459 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:29:34.276 00:00:11.806 TCP 12.102.0.1:56484 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:30:36.117 00:00:11.798 TCP 12.102.0.1:35240 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:31:37.950 00:00:11.758 TCP 12.102.0.1:35928 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:26:57.456 00:06:00.183 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 11:32:39.747 00:00:11.799 TCP 12.102.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:33:43.043 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:33:42.731 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:33:42.794 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:33:42.936 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:33:42.880 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:33:42.790 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:33:42.772 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:33:41.588 00:00:12.325 TCP 12.102.0.1:55880 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:34:43.952 00:00:11.760 TCP 12.102.0.1:51334 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:30:57.461 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:35:45.748 00:00:11.802 TCP 12.102.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:36:47.588 00:00:11.806 TCP 12.102.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:37:49.435 00:00:11.809 TCP 12.102.0.1:58382 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:38:42.940 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:38:42.637 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:38:43.040 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:38:43.028 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:38:42.963 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:38:43.089 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:38:42.964 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:33:57.458 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 11:38:51.281 00:00:11.816 TCP 12.102.0.1:41052 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:39:53.122 00:00:11.798 TCP 12.102.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:40:54.960 00:00:11.805 TCP 12.102.0.1:48582 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:41:56.802 00:00:11.831 TCP 12.102.0.1:52940 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:37:57.460 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:42:58.662 00:00:11.806 TCP 12.102.0.1:33552 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:43:42.939 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:43:42.712 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:43:42.900 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:43:43.149 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:43:42.963 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:43:42.841 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:43:42.972 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:44:00.504 00:00:11.764 TCP 12.102.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:45:02.310 00:00:11.764 TCP 12.102.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:40:57.459 00:06:00.185 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 11:46:04.112 00:00:12.201 TCP 12.102.0.1:54520 -> 1.101.0.1:3000 15 1926 1 2025-10-27 11:47:06.350 00:00:11.805 TCP 12.102.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:48:08.191 00:00:11.758 TCP 12.102.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:48:43.331 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:48:43.326 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:48:43.147 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:48:43.029 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:48:43.039 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:48:43.254 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:48:43.008 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:49:09.993 00:00:11.804 TCP 12.102.0.1:49746 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:44:57.464 00:06:00.178 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:50:11.841 00:00:11.814 TCP 12.102.0.1:46984 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:51:13.698 00:00:11.816 TCP 12.102.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:52:15.547 00:00:11.802 TCP 12.102.0.1:44062 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:47:57.464 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 11:53:17.388 00:00:11.809 TCP 12.102.0.1:33338 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:53:43.100 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:53:43.204 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:53:43.114 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:53:42.986 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:53:42.848 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:53:43.077 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 11:53:42.963 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:54:19.232 00:00:11.801 TCP 12.102.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:55:21.082 00:00:11.796 TCP 12.102.0.1:41190 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:56:22.915 00:00:11.826 TCP 12.102.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:51:57.464 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 11:57:24.777 00:00:11.805 TCP 12.102.0.1:43978 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:58:26.618 00:00:11.776 TCP 12.102.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:58:42.954 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 11:58:43.321 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 11:58:43.326 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 11:58:43.495 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 11:58:42.977 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 11:58:43.200 00:00:00.047 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 11:58:42.970 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 263, avg pps: 0, avg bpp: 109 Time window: 2025-10-27 10:55:57 - 2025-10-27 11:58:43 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0040s User: 0.0020s Wall: 0.0020s flows/second: 80426.2 Runtime: 0.0020s