Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 08:59:38.927 00:00:11.819 TCP 12.102.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:00:06.002 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:00:06.224 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:00:06.213 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:00:06.144 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:00:06.024 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:00:06.352 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:00:06.188 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:00:40.798 00:00:11.798 TCP 12.102.0.1:42398 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:56:58.985 00:05:00.095 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-30 09:01:42.635 00:00:11.803 TCP 12.102.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:02:44.475 00:00:11.765 TCP 12.102.0.1:44262 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:03:46.280 00:00:11.798 TCP 12.102.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:59:58.983 00:05:00.100 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-30 09:04:48.123 00:00:11.832 TCP 12.102.0.1:57048 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:05:06.864 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:05:06.627 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:05:06.502 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:05:06.817 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:05:06.578 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:05:06.430 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:05:06.479 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:05:49.995 00:00:11.776 TCP 12.102.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:02:58.985 00:05:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-30 09:06:51.808 00:00:11.867 TCP 12.102.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:07:53.737 00:00:11.760 TCP 12.102.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:08:55.538 00:00:11.809 TCP 12.102.0.1:44344 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:05:58.984 00:05:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-30 09:10:06.628 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:10:06.527 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:10:06.345 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:10:06.642 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:10:06.651 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:10:06.429 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:10:06.424 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:09:57.386 00:00:11.805 TCP 12.102.0.1:33088 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:10:59.243 00:00:11.765 TCP 12.102.0.1:41546 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:12:01.087 00:00:11.806 TCP 12.102.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:08:58.992 00:05:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-30 09:13:02.933 00:00:11.828 TCP 12.102.0.1:58086 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:14:04.798 00:00:11.772 TCP 12.102.0.1:39026 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:15:07.038 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:15:07.167 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:15:07.201 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:15:06.802 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:15:06.888 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:15:07.123 00:00:00.037 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:15:07.178 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:15:06.608 00:00:11.804 TCP 12.102.0.1:36988 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:11:58.991 00:05:00.095 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-30 09:16:08.448 00:00:11.808 TCP 12.102.0.1:54508 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:17:10.293 00:00:11.848 TCP 12.102.0.1:43970 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:18:12.182 00:00:11.800 TCP 12.102.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:14:58.994 00:05:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-30 09:19:14.028 00:00:11.804 TCP 12.102.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:20:06.899 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:20:06.753 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:20:06.843 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:20:06.976 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:20:06.920 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:20:07.048 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:20:06.923 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:20:15.871 00:00:11.763 TCP 12.102.0.1:35590 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:21:17.675 00:00:11.806 TCP 12.102.0.1:55378 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:17:58.992 00:05:00.096 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-30 09:22:19.521 00:00:11.798 TCP 12.102.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:23:21.358 00:00:11.809 TCP 12.102.0.1:47092 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:24:23.204 00:00:11.818 TCP 12.102.0.1:52218 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:20:58.994 00:05:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-30 09:25:06.968 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:25:06.987 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:25:07.005 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:25:06.799 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:25:06.774 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:25:06.779 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:25:06.777 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:25:25.075 00:00:11.760 TCP 12.102.0.1:54052 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:26:26.874 00:00:11.808 TCP 12.102.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:27:28.721 00:00:11.802 TCP 12.102.0.1:55186 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:23:58.992 00:05:00.097 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-30 09:28:30.560 00:00:11.805 TCP 12.102.0.1:47618 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:29:32.400 00:00:11.807 TCP 12.102.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:30:06.728 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:30:06.935 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:30:07.030 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:30:06.888 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:30:06.751 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:30:07.031 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:30:06.613 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:30:34.248 00:00:11.862 TCP 12.102.0.1:33550 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:26:58.999 00:05:00.088 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-10-30 09:31:36.143 00:00:11.807 TCP 12.102.0.1:33576 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:32:37.992 00:00:11.799 TCP 12.102.0.1:55192 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:33:39.830 00:00:11.802 TCP 12.102.0.1:37322 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:29:58.997 00:05:00.101 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-30 09:34:41.672 00:00:11.777 TCP 12.102.0.1:39034 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:35:07.126 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:35:07.234 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:35:07.157 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:35:07.166 00:00:00.054 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:35:07.153 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:35:06.876 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:35:07.206 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:35:43.471 00:00:11.804 TCP 12.102.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:36:45.310 00:00:11.761 TCP 12.102.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:37:47.110 00:00:11.768 TCP 12.102.0.1:39824 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:32:59.000 00:06:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 09:38:48.919 00:00:11.817 TCP 12.102.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:39:50.777 00:00:11.814 TCP 12.102.0.1:52694 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:40:07.105 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:40:07.208 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:40:06.925 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:40:07.187 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:40:07.260 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:40:06.992 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:35:58.999 00:05:00.103 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-10-30 09:40:07.161 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:40:52.632 00:00:11.799 TCP 12.102.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:41:54.477 00:00:11.800 TCP 12.102.0.1:58114 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:42:56.315 00:00:12.235 TCP 12.102.0.1:39142 -> 1.101.0.1:3000 16 1978 1 2025-10-30 09:43:58.588 00:00:11.770 TCP 12.102.0.1:46304 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:39:59.002 00:06:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 09:45:07.344 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:45:07.275 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:45:07.381 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:45:07.329 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:45:07.344 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:45:07.005 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:45:07.307 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:45:00.393 00:00:11.852 TCP 12.102.0.1:56006 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:46:02.283 00:00:11.803 TCP 12.102.0.1:40630 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:41:59.001 00:06:00.102 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 09:47:04.126 00:00:11.808 TCP 12.102.0.1:33912 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:48:05.967 00:00:11.760 TCP 12.102.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:49:07.764 00:00:11.761 TCP 12.102.0.1:46622 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:50:07.472 00:00:00.032 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:50:07.884 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:50:07.291 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:50:07.495 00:00:00.032 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:50:07.524 00:00:00.036 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:50:07.138 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:50:07.829 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:50:09.563 00:00:11.798 TCP 12.102.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:51:11.398 00:00:11.805 TCP 12.102.0.1:59328 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:46:59.004 00:06:00.101 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-10-30 09:52:13.240 00:00:11.809 TCP 12.102.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:53:15.086 00:00:11.798 TCP 12.102.0.1:52974 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:48:59.030 00:06:00.074 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-10-30 09:54:16.919 00:00:11.827 TCP 12.102.0.1:54320 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:55:07.521 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-10-30 09:55:07.771 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:55:07.623 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-10-30 09:55:07.564 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-10-30 09:55:07.605 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-10-30 09:55:07.612 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-10-30 09:55:07.543 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-10-30 09:55:18.785 00:00:11.807 TCP 12.102.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:56:20.626 00:00:11.821 TCP 12.102.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:57:22.489 00:00:11.769 TCP 12.102.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:58:24.299 00:00:11.801 TCP 12.102.0.1:49212 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 122944, total packets: 1121, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-10-30 08:56:58 - 2025-10-30 09:58:36 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0035s User: 0.0026s Wall: 0.0023s flows/second: 70767.5 Runtime: 0.0023s