Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 12:58:49.551 00:00:11.797 TCP 12.102.0.1:39422 -> 1.101.0.1:3000 11 1507 1 2025-10-28 12:59:13.288 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 12:59:13.422 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 12:59:13.434 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 12:59:13.529 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 12:59:13.556 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 12:59:13.161 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 12:59:13.506 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 12:54:58.056 00:06:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 12:59:51.389 00:00:11.807 TCP 12.102.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:00:53.234 00:00:11.760 TCP 12.102.0.1:56572 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:01:55.045 00:00:13.824 TCP 12.102.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:02:58.907 00:00:11.820 TCP 12.102.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-10-28 12:58:58.058 00:05:00.091 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-28 13:04:13.183 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:04:13.496 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:04:00.766 00:00:11.804 TCP 12.102.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:04:13.627 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:04:13.605 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:04:13.212 00:00:00.017 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:04:13.613 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:04:13.537 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:05:02.608 00:00:11.765 TCP 12.102.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:06:04.409 00:00:11.852 TCP 12.102.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:01:58.061 00:06:00.086 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 13:07:06.300 00:00:11.758 TCP 12.102.0.1:36994 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:08:08.098 00:00:11.802 TCP 12.102.0.1:40482 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:04:58.059 00:04:00.091 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-10-28 13:09:13.433 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:09:13.547 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:09:13.673 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:09:13.596 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:09:13.457 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:09:13.734 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:09:13.546 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:09:09.960 00:00:11.800 TCP 12.102.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:10:11.802 00:00:11.801 TCP 12.102.0.1:58388 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:11:13.643 00:00:11.800 TCP 12.102.0.1:47914 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:12:15.481 00:00:11.800 TCP 12.102.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:13:17.313 00:00:11.802 TCP 12.102.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:09:58.062 00:04:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-10-28 13:08:58.065 00:06:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 13:14:13.679 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:14:13.711 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:14:13.671 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:14:13.781 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:14:13.678 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:14:13.857 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:14:13.657 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:14:19.150 00:00:11.806 TCP 12.102.0.1:52572 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:15:20.996 00:00:11.805 TCP 12.102.0.1:35810 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:16:22.843 00:00:13.036 TCP 12.102.0.1:54042 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:17:25.919 00:00:11.825 TCP 12.102.0.1:50440 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:18:27.783 00:00:11.801 TCP 12.102.0.1:38858 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:19:13.717 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:19:13.599 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:19:13.966 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:19:13.592 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:19:13.562 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:19:13.692 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:19:13.570 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:19:29.621 00:00:11.767 TCP 12.102.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:14:58.068 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 13:20:31.430 00:00:11.796 TCP 12.102.0.1:37758 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:15:58.071 00:05:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-28 13:21:33.275 00:00:12.065 TCP 12.102.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:22:35.376 00:00:11.805 TCP 12.102.0.1:60840 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:23:37.223 00:00:11.802 TCP 12.102.0.1:40332 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:24:13.810 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:24:13.956 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:24:13.833 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:24:13.720 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:24:14.065 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:24:14.099 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:24:14.104 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:24:39.076 00:00:11.810 TCP 12.102.0.1:51646 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:25:40.924 00:00:11.780 TCP 12.102.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:21:58.073 00:04:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-10-28 13:26:42.755 00:00:11.808 TCP 12.102.0.1:34710 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:21:58.069 00:06:00.087 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 13:27:44.604 00:00:11.801 TCP 12.102.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:28:46.441 00:00:11.806 TCP 12.102.0.1:56580 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:29:14.061 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:29:14.085 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:29:14.122 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:29:14.062 00:00:00.031 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:29:14.101 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:29:14.025 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:29:14.038 00:00:00.032 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:29:48.284 00:00:11.804 TCP 12.102.0.1:56716 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:30:50.123 00:00:18.011 TCP 12.102.0.1:59966 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:26:58.074 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 13:31:58.188 00:00:12.266 TCP 12.102.0.1:42806 -> 1.101.0.1:3000 15 1926 1 2025-10-28 13:33:00.506 00:00:11.808 TCP 12.102.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:28:58.070 00:06:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 13:34:13.959 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:34:14.013 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:34:14.232 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:34:14.086 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:34:14.036 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:34:14.078 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:34:14.129 00:00:00.041 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:34:02.353 00:00:11.811 TCP 12.102.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:35:04.204 00:00:11.810 TCP 12.102.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:35:58.073 00:00:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 2 123 1 2025-10-28 13:36:06.077 00:00:11.821 TCP 12.102.0.1:59002 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:37:07.934 00:00:11.811 TCP 12.102.0.1:59542 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:38:09.779 00:00:19.855 TCP 12.102.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:33:58.074 00:06:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 13:39:13.935 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:39:13.958 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:39:13.971 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:39:14.302 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:39:14.139 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:39:14.176 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:39:14.272 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:39:19.691 00:00:11.804 TCP 12.102.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:40:21.534 00:00:11.778 TCP 12.102.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:36:58.072 00:04:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-10-28 13:41:23.350 00:00:11.803 TCP 12.102.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:42:25.195 00:00:11.806 TCP 12.102.0.1:45946 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:43:27.065 00:00:11.805 TCP 12.102.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:44:14.238 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:44:14.314 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:44:14.404 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:44:14.335 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:44:14.260 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:44:14.464 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:44:14.281 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:44:28.907 00:00:11.786 TCP 12.102.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:45:30.735 00:00:11.809 TCP 12.102.0.1:59364 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:40:58.076 00:06:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-28 13:41:58.080 00:04:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 10 615 1 2025-10-28 13:46:32.586 00:00:11.863 TCP 12.102.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:47:34.489 00:00:11.808 TCP 12.102.0.1:34756 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:48:36.335 00:00:11.765 TCP 12.102.0.1:55872 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:49:14.494 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:49:14.498 00:00:00.032 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:49:14.353 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:49:14.307 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:49:14.366 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:49:14.316 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:49:14.284 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:49:38.135 00:00:11.817 TCP 12.102.0.1:42986 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:50:39.991 00:00:11.824 TCP 12.102.0.1:55306 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:51:41.846 00:00:11.812 TCP 12.102.0.1:60256 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:46:58.081 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-28 13:47:58.084 00:05:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-28 13:52:43.696 00:00:12.203 TCP 12.102.0.1:60892 -> 1.101.0.1:3000 15 1926 1 2025-10-28 13:53:45.938 00:00:11.814 TCP 12.102.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:54:14.580 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-28 13:54:14.531 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 13:54:14.694 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-28 13:54:14.453 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-28 13:54:14.305 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-28 13:54:14.466 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-28 13:54:14.432 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-28 13:54:47.787 00:00:11.760 TCP 12.102.0.1:40992 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:55:49.586 00:00:11.800 TCP 12.102.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:56:51.432 00:00:11.819 TCP 12.102.0.1:58274 -> 1.101.0.1:3000 11 1507 1 2025-10-28 13:53:58.085 00:04:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 10 615 1 2025-10-28 13:57:53.289 00:00:12.236 TCP 12.102.0.1:37326 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124049, total packets: 1136, avg bps: 262, avg pps: 0, avg bpp: 109 Time window: 2025-10-28 12:54:58 - 2025-10-28 13:58:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0028s User: 0.0028s Wall: 0.0020s flows/second: 81687.6 Runtime: 0.0020s