Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 09:59:24.687 00:00:11.810 TCP 12.102.0.1:33190 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:00:26.534 00:00:11.810 TCP 12.102.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:01:05.212 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:01:05.513 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:01:05.445 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:01:05.374 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:01:05.336 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:01:05.378 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:01:05.351 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:01:28.379 00:00:11.803 TCP 12.102.0.1:46170 -> 1.101.0.1:3000 11 1507 1 2025-11-01 09:57:59.968 00:05:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 09:57:59.971 00:05:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:02:30.223 00:00:11.803 TCP 12.102.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:03:32.077 00:00:11.782 TCP 12.102.0.1:53198 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:04:33.899 00:00:11.799 TCP 12.102.0.1:43798 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:05:35.749 00:00:11.814 TCP 12.102.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:06:05.333 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:06:05.394 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:06:05.463 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:06:05.574 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:06:05.356 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:06:05.498 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:06:05.493 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:06:37.598 00:00:11.803 TCP 12.102.0.1:33884 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:07:39.435 00:00:11.811 TCP 12.102.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:03:59.969 00:05:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:03:59.971 00:05:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:08:41.287 00:00:12.201 TCP 12.102.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:09:43.526 00:00:11.810 TCP 12.102.0.1:42154 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:10:45.380 00:00:11.862 TCP 12.102.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:11:05.985 00:00:00.026 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:11:05.991 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:11:05.678 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:11:05.884 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:11:06.009 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:11:05.775 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:11:05.570 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:11:47.283 00:00:11.800 TCP 12.102.0.1:58710 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:12:49.117 00:00:11.803 TCP 12.102.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:09:59.972 00:05:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:09:59.970 00:05:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:13:50.958 00:00:11.804 TCP 12.102.0.1:43550 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:14:52.800 00:00:12.194 TCP 12.102.0.1:60386 -> 1.101.0.1:3000 15 1926 1 2025-11-01 10:16:05.600 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:16:05.782 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:16:05.621 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:16:05.575 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:15:55.049 00:00:11.812 TCP 12.102.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:16:05.700 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:16:05.801 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:16:05.553 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:16:56.898 00:00:11.805 TCP 12.102.0.1:41316 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:17:58.742 00:00:11.798 TCP 12.102.0.1:36518 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:19:00.581 00:00:11.804 TCP 12.102.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:15:59.972 00:05:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:15:59.974 00:05:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:20:02.423 00:00:11.756 TCP 12.102.0.1:43562 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:21:05.616 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:21:05.741 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:21:05.844 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:21:05.767 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:21:05.639 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:21:05.990 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:21:05.715 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:21:04.217 00:00:11.802 TCP 12.102.0.1:45886 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:22:06.080 00:00:11.805 TCP 12.102.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:23:07.932 00:00:11.816 TCP 12.102.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:24:09.777 00:00:11.801 TCP 12.102.0.1:57244 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:25:11.609 00:00:11.807 TCP 12.102.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:21:59.975 00:05:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:26:05.855 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:21:59.972 00:05:00.087 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:26:05.646 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:26:05.776 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:26:05.885 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:26:05.878 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:26:05.867 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:26:05.743 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:26:13.451 00:00:11.810 TCP 12.102.0.1:48694 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:27:15.299 00:00:11.797 TCP 12.102.0.1:60648 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:28:17.135 00:00:11.816 TCP 12.102.0.1:55828 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:29:18.986 00:00:11.831 TCP 12.102.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:30:20.853 00:00:11.762 TCP 12.102.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:31:05.949 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:31:05.815 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:31:05.916 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:31:05.859 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:31:05.972 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:31:06.116 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:31:05.784 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:31:22.652 00:00:11.974 TCP 12.102.0.1:50530 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:27:59.974 00:05:00.089 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:27:59.976 00:05:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:32:24.666 00:00:11.800 TCP 12.102.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:33:26.503 00:00:11.798 TCP 12.102.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:34:28.340 00:00:11.818 TCP 12.102.0.1:40576 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:35:30.198 00:00:11.800 TCP 12.102.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:36:06.062 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:36:05.930 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:36:06.102 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:36:06.032 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:36:06.078 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:36:06.089 00:00:00.040 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:36:06.010 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:36:32.059 00:00:11.815 TCP 12.102.0.1:56160 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:37:33.918 00:00:11.824 TCP 12.102.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:33:59.977 00:05:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:33:59.975 00:05:00.090 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:38:35.778 00:00:11.802 TCP 12.102.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:39:37.617 00:00:11.853 TCP 12.102.0.1:42710 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:40:39.515 00:00:11.801 TCP 12.102.0.1:39378 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:41:06.194 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:41:06.095 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:41:06.083 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:41:06.095 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:41:06.215 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:41:06.197 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:41:06.173 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:41:41.358 00:00:11.853 TCP 12.102.0.1:44304 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:42:43.264 00:00:11.830 TCP 12.102.0.1:57174 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:43:45.132 00:00:11.812 TCP 12.102.0.1:35916 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:39:59.979 00:05:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:39:59.975 00:05:00.089 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:44:46.979 00:00:11.819 TCP 12.102.0.1:40204 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:45:48.844 00:00:11.813 TCP 12.102.0.1:45852 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:46:06.202 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:46:06.403 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:46:06.203 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:46:06.274 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:46:06.067 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:46:06.254 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:46:06.182 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:46:50.696 00:00:11.825 TCP 12.102.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:47:52.556 00:00:11.767 TCP 12.102.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:48:54.362 00:00:11.836 TCP 12.102.0.1:36572 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:45:59.979 00:05:00.087 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:45:59.980 00:05:00.082 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:49:56.237 00:00:11.768 TCP 12.102.0.1:55562 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:51:06.219 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:51:06.397 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:51:06.450 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:51:06.134 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:51:06.241 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:51:06.443 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:51:06.366 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:50:58.062 00:00:11.856 TCP 12.102.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:51:59.959 00:00:11.769 TCP 12.102.0.1:56682 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:53:01.778 00:00:11.785 TCP 12.102.0.1:33106 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:54:03.605 00:00:11.773 TCP 12.102.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:55:05.416 00:00:11.773 TCP 12.102.0.1:49174 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:51:59.982 00:05:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 10:51:59.979 00:05:00.088 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:56:06.524 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 10:56:06.713 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 10:56:06.432 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 10:56:06.508 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 10:56:06.644 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 10:56:06.589 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 10:56:06.488 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 10:56:07.234 00:00:11.808 TCP 12.102.0.1:33016 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:57:09.084 00:00:11.807 TCP 12.102.0.1:59818 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:58:10.931 00:00:11.810 TCP 12.102.0.1:45652 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 273, avg pps: 0, avg bpp: 109 Time window: 2025-11-01 09:57:59 - 2025-11-01 10:58:22 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0033s User: 0.0022s Wall: 0.0031s flows/second: 52039.3 Runtime: 0.0031s