Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 17:58:43.506 00:00:11.802 TCP 12.102.0.1:40908 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:59:45.348 00:00:11.801 TCP 12.102.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-10-27 17:55:57.584 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:00:47.191 00:00:11.798 TCP 12.102.0.1:37316 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:01:49.033 00:00:11.800 TCP 12.102.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:02:50.875 00:00:11.799 TCP 12.102.0.1:40522 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:03:50.722 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:03:50.914 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:03:50.666 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:03:50.766 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:03:50.798 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:03:50.799 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:03:50.746 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 17:58:57.582 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 18:03:52.707 00:00:11.798 TCP 12.102.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:04:54.543 00:00:11.800 TCP 12.102.0.1:56650 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:05:56.382 00:00:11.820 TCP 12.102.0.1:45258 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:06:58.236 00:00:11.847 TCP 12.102.0.1:53764 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:02:57.591 00:06:00.174 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:08:00.125 00:00:11.801 TCP 12.102.0.1:35554 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:08:51.175 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:08:51.227 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:08:51.067 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:08:51.248 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:08:51.198 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:08:51.196 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:08:51.088 00:00:00.049 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:09:01.966 00:00:11.802 TCP 12.102.0.1:35972 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:10:03.808 00:00:11.802 TCP 12.102.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:05:57.589 00:06:00.178 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 18:11:05.650 00:00:11.806 TCP 12.102.0.1:33980 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:12:07.495 00:00:11.810 TCP 12.102.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:13:09.337 00:00:12.160 TCP 12.102.0.1:32910 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:13:50.848 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:13:50.894 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:13:51.049 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:13:50.927 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:13:50.870 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:13:50.797 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:13:50.863 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:14:11.536 00:00:11.803 TCP 12.102.0.1:34982 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:09:57.592 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:15:13.374 00:00:11.814 TCP 12.102.0.1:41198 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:16:15.222 00:00:11.831 TCP 12.102.0.1:40630 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:17:17.089 00:00:11.818 TCP 12.102.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:12:57.590 00:06:00.178 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 18:18:18.932 00:00:11.814 TCP 12.102.0.1:58498 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:18:51.031 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:18:50.927 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:18:51.245 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:18:51.018 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:18:51.193 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:18:51.008 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:18:50.996 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:19:20.781 00:00:11.802 TCP 12.102.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:20:22.621 00:00:11.816 TCP 12.102.0.1:34240 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:21:24.477 00:00:11.802 TCP 12.102.0.1:53882 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:16:57.593 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:22:26.316 00:00:11.762 TCP 12.102.0.1:60310 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:23:28.113 00:00:11.764 TCP 12.102.0.1:49468 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:23:51.339 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:23:51.397 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:23:51.512 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:23:51.487 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:23:51.363 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:23:51.495 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:23:51.366 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:24:29.920 00:00:11.781 TCP 12.102.0.1:58144 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:19:57.593 00:06:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 18:25:31.743 00:00:11.798 TCP 12.102.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:26:33.583 00:00:12.243 TCP 12.102.0.1:55294 -> 1.101.0.1:3000 15 1926 1 2025-10-27 18:27:35.875 00:00:11.858 TCP 12.102.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:28:51.139 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:28:51.403 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:28:37.777 00:00:11.820 TCP 12.102.0.1:60408 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:28:51.306 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:28:51.163 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:28:51.352 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:28:51.242 00:00:00.015 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:28:51.080 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:23:57.596 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:29:39.654 00:00:11.774 TCP 12.102.0.1:33200 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:30:41.475 00:00:11.810 TCP 12.102.0.1:55650 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:31:43.329 00:00:11.814 TCP 12.102.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:26:57.619 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 18:32:45.185 00:00:11.776 TCP 12.102.0.1:47378 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:33:51.291 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:33:51.449 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:33:51.488 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:33:51.450 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:33:51.314 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:33:51.302 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:33:51.044 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:33:47.008 00:00:11.806 TCP 12.102.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:34:48.856 00:00:11.865 TCP 12.102.0.1:48720 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:30:57.621 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:35:50.763 00:00:11.769 TCP 12.102.0.1:42166 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:36:52.570 00:00:11.808 TCP 12.102.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:37:54.419 00:00:11.809 TCP 12.102.0.1:37642 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:38:51.675 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:38:51.652 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:38:51.845 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:38:51.468 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:38:51.561 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:38:51.705 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:38:51.446 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:33:57.620 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 18:38:56.263 00:00:11.763 TCP 12.102.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:39:58.080 00:00:11.794 TCP 12.102.0.1:59944 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:40:59.917 00:00:11.782 TCP 12.102.0.1:36724 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:42:01.738 00:00:11.766 TCP 12.102.0.1:46286 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:37:57.624 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:43:03.545 00:00:11.803 TCP 12.102.0.1:40410 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:43:51.366 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:43:51.659 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:43:51.545 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:43:51.618 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:43:51.389 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:43:51.750 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:43:51.635 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:44:05.389 00:00:12.076 TCP 12.102.0.1:48650 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:45:07.504 00:00:11.761 TCP 12.102.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:40:57.621 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 18:46:09.311 00:00:11.803 TCP 12.102.0.1:44604 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:47:11.153 00:00:11.796 TCP 12.102.0.1:51960 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:48:12.988 00:00:11.760 TCP 12.102.0.1:48770 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:48:51.642 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:48:51.661 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:48:51.829 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:48:51.691 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:48:51.664 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:48:51.640 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:48:51.556 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:49:14.788 00:00:11.813 TCP 12.102.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:44:57.624 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:50:16.649 00:00:11.810 TCP 12.102.0.1:53648 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:51:18.507 00:00:11.771 TCP 12.102.0.1:37362 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:52:20.320 00:00:11.813 TCP 12.102.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:47:57.623 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-27 18:53:22.163 00:00:11.807 TCP 12.102.0.1:32918 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:53:51.299 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:53:51.529 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-27 18:53:51.694 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:53:51.532 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:53:51.322 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:53:51.695 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:53:51.558 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:54:24.017 00:00:11.804 TCP 12.102.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:55:25.865 00:00:11.819 TCP 12.102.0.1:41046 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:56:27.726 00:00:11.877 TCP 12.102.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:51:57.626 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-27 18:57:29.659 00:00:11.808 TCP 12.102.0.1:48348 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:58:31.524 00:00:11.805 TCP 12.102.0.1:59254 -> 1.101.0.1:3000 11 1507 1 2025-10-27 18:58:51.616 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-27 18:58:51.752 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 18:58:51.757 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-27 18:58:51.638 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-27 18:58:51.641 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-27 18:58:51.715 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-27 18:58:51.879 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-10-27 17:55:57 - 2025-10-27 18:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0048s User: 0.0010s Wall: 0.0020s flows/second: 80283.4 Runtime: 0.0020s