Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 10:59:12.779 00:00:11.817 TCP 12.102.0.1:46306 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:00:14.633 00:00:11.808 TCP 12.102.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:01:06.556 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:01:06.478 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:01:06.579 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:01:06.721 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:01:06.578 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:01:06.487 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:01:06.326 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:01:16.482 00:00:11.798 TCP 12.102.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:57:59.981 00:05:00.087 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 10:57:59.983 00:05:00.083 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 11:02:18.323 00:00:11.802 TCP 12.102.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:03:20.161 00:00:11.802 TCP 12.102.0.1:34180 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:04:22.005 00:00:11.764 TCP 12.102.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:05:23.805 00:00:11.798 TCP 12.102.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:06:06.707 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:06:06.452 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:06:06.473 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:06:06.729 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:06:06.690 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:06:06.704 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:06:06.734 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:06:25.640 00:00:11.813 TCP 12.102.0.1:35590 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:07:27.491 00:00:11.806 TCP 12.102.0.1:51422 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:03:59.984 00:05:00.084 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 11:03:59.982 00:05:00.089 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 11:08:29.333 00:00:11.796 TCP 12.102.0.1:43486 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:09:31.169 00:00:11.800 TCP 12.102.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:10:33.011 00:00:11.815 TCP 12.102.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:11:06.598 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:11:06.734 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:11:06.817 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:11:06.753 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:11:06.620 00:00:00.026 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:11:06.648 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:11:06.697 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:11:34.867 00:00:11.806 TCP 12.102.0.1:53458 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:12:36.713 00:00:11.800 TCP 12.102.0.1:58572 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:13:38.554 00:00:11.759 TCP 12.102.0.1:57990 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:09:59.985 00:05:00.086 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 11:09:59.988 00:05:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 11:14:40.354 00:00:12.893 TCP 12.102.0.1:47404 -> 1.101.0.1:3000 15 1926 1 2025-11-01 11:15:43.268 00:00:11.799 TCP 12.102.0.1:58206 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:16:07.809 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:16:07.943 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:16:08.065 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:16:07.968 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:16:07.832 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:16:07.971 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:16:07.993 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:16:45.106 00:00:11.764 TCP 12.102.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:17:46.907 00:00:11.830 TCP 12.102.0.1:46550 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:18:48.778 00:00:11.801 TCP 12.102.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:15:59.989 00:05:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 11:15:59.988 00:05:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 11:19:50.622 00:00:11.804 TCP 12.102.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:21:06.734 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:21:06.909 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:21:06.972 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:21:06.970 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:20:52.464 00:00:11.800 TCP 12.102.0.1:53722 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:21:06.935 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:21:06.822 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:21:06.948 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:21:54.305 00:00:11.799 TCP 12.102.0.1:55938 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:22:56.144 00:00:11.809 TCP 12.102.0.1:43412 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:23:57.989 00:00:11.798 TCP 12.102.0.1:45676 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:24:59.827 00:00:11.796 TCP 12.102.0.1:39652 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:21:59.991 00:05:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 11:21:59.986 00:05:00.086 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 11:26:06.894 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:26:07.100 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:26:07.131 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:26:06.947 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:26:06.917 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:26:06.930 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:26:07.073 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:26:01.666 00:00:11.806 TCP 12.102.0.1:42484 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:27:03.512 00:00:11.794 TCP 12.102.0.1:42838 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:28:05.344 00:00:11.862 TCP 12.102.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:29:07.247 00:00:11.798 TCP 12.102.0.1:48718 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:30:09.082 00:00:11.807 TCP 12.102.0.1:60242 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:31:07.708 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:31:07.539 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:31:07.637 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:31:07.340 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:31:07.729 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:31:07.691 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:31:07.416 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:31:10.932 00:00:11.815 TCP 12.102.0.1:33132 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:27:59.995 00:05:00.081 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 11:27:59.994 00:05:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 11:32:12.791 00:00:11.805 TCP 12.102.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:33:14.635 00:00:11.803 TCP 12.102.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:34:16.476 00:00:11.801 TCP 12.102.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:35:18.316 00:00:11.812 TCP 12.102.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:36:07.153 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:36:07.270 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:36:07.184 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:36:07.293 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:36:07.177 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:36:07.164 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:36:07.172 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:36:20.160 00:00:11.800 TCP 12.102.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:37:21.999 00:00:11.796 TCP 12.102.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:33:59.994 00:05:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 11:33:59.996 00:05:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 11:38:23.834 00:00:11.803 TCP 12.102.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:39:25.676 00:00:11.804 TCP 12.102.0.1:33036 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:40:27.522 00:00:11.811 TCP 12.102.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:41:07.423 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:41:07.345 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:41:07.459 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:41:07.240 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:41:07.353 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:41:07.398 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:41:07.218 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:41:29.360 00:00:11.818 TCP 12.102.0.1:48050 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:42:31.214 00:00:11.803 TCP 12.102.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:43:33.078 00:00:11.798 TCP 12.102.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:39:59.995 00:05:00.085 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-01 11:39:59.998 00:05:00.079 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-01 11:44:34.919 00:00:11.824 TCP 12.102.0.1:46986 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:45:36.778 00:00:11.812 TCP 12.102.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:46:07.259 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:46:07.470 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:46:07.296 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:46:07.302 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:46:07.283 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:46:07.589 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:46:07.361 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:46:38.640 00:00:13.093 TCP 12.102.0.1:53910 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:47:41.774 00:00:11.762 TCP 12.102.0.1:49034 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:48:43.573 00:00:11.760 TCP 12.102.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:49:45.399 00:00:11.822 TCP 12.102.0.1:42854 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:46:00.004 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 11:46:00.001 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 11:50:47.261 00:00:11.788 TCP 12.102.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:51:07.435 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:51:07.633 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:51:07.383 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:51:07.679 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:51:07.457 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:51:07.676 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:51:07.547 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:51:49.089 00:00:11.803 TCP 12.102.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:52:50.929 00:00:11.813 TCP 12.102.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:53:52.772 00:00:11.815 TCP 12.102.0.1:33778 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:54:54.625 00:00:11.803 TCP 12.102.0.1:48930 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:56:07.853 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 11:55:56.464 00:00:11.759 TCP 12.102.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:56:07.947 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:56:07.993 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 11:56:07.822 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 11:56:07.940 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 11:56:07.886 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 11:56:07.800 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 11:56:58.258 00:00:11.799 TCP 12.102.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:53:00.004 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 11:53:00.002 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 11:58:00.101 00:00:11.798 TCP 12.102.0.1:45880 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124245, total packets: 1142, avg bps: 271, avg pps: 0, avg bpp: 108 Time window: 2025-11-01 10:57:59 - 2025-11-01 11:59:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0059s User: 0.0008s Wall: 0.0021s flows/second: 78871.4 Runtime: 0.0021s