Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 14:59:30.441 00:00:11.763 TCP 12.102.0.1:58560 -> 1.101.0.1:3000 11 1507 1 2025-11-01 14:55:00.075 00:06:00.061 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 14:55:00.078 00:06:00.056 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:00:32.238 00:00:12.042 TCP 12.102.0.1:59896 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:01:11.542 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:01:11.411 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:01:11.448 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:01:11.322 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:01:11.428 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:01:11.463 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:01:11.301 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:01:34.319 00:00:11.800 TCP 12.102.0.1:44966 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:02:36.159 00:00:11.806 TCP 12.102.0.1:49664 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:03:38.005 00:00:11.819 TCP 12.102.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:04:39.861 00:00:11.802 TCP 12.102.0.1:56074 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:05:41.706 00:00:11.807 TCP 12.102.0.1:57940 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:06:11.441 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:06:11.498 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:06:11.480 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:06:11.480 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:06:11.464 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:06:11.480 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:06:11.342 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:06:43.548 00:00:11.819 TCP 12.102.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:02:00.078 00:06:00.062 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 15:02:00.080 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:07:45.404 00:00:11.807 TCP 12.102.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:08:47.250 00:00:11.816 TCP 12.102.0.1:54150 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:09:49.103 00:00:11.855 TCP 12.102.0.1:37388 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:10:51.019 00:00:14.758 TCP 12.102.0.1:45168 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:11:11.580 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:11:11.471 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:11:11.477 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:11:11.597 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:11:11.603 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:11:11.598 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:11:11.610 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:11:55.819 00:00:11.760 TCP 12.102.0.1:53406 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:12:57.618 00:00:11.757 TCP 12.102.0.1:57820 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:09:00.082 00:06:00.058 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:09:00.079 00:06:00.063 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 15:13:59.411 00:00:11.808 TCP 12.102.0.1:34808 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:15:01.254 00:00:11.802 TCP 12.102.0.1:57612 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:16:11.579 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:16:11.699 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:16:11.606 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:16:11.645 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:16:11.486 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:16:11.573 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:16:11.622 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:16:03.100 00:00:11.802 TCP 12.102.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:17:04.944 00:00:11.804 TCP 12.102.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:18:06.783 00:00:11.809 TCP 12.102.0.1:43620 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:19:08.639 00:00:11.802 TCP 12.102.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:20:10.478 00:00:11.802 TCP 12.102.0.1:33264 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:16:00.080 00:06:00.064 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 15:16:00.082 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:21:11.861 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:21:12.012 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:21:12.000 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:21:12.024 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:21:11.883 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:21:12.026 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:21:11.972 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:21:12.318 00:00:11.803 TCP 12.102.0.1:42994 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:22:14.159 00:00:11.765 TCP 12.102.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:23:15.975 00:00:11.808 TCP 12.102.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:24:17.819 00:00:11.819 TCP 12.102.0.1:46364 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:25:19.677 00:00:11.811 TCP 12.102.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:26:11.968 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:26:11.874 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:26:11.820 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:26:11.686 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:26:11.778 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:26:11.768 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:26:11.663 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:26:21.528 00:00:11.801 TCP 12.102.0.1:50294 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:27:23.369 00:00:11.830 TCP 12.102.0.1:53528 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:23:00.083 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:23:00.080 00:06:00.064 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 15:28:25.237 00:00:11.816 TCP 12.102.0.1:44470 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:29:27.092 00:00:11.801 TCP 12.102.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:30:28.934 00:00:11.862 TCP 12.102.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:31:11.992 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:31:12.223 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:31:11.915 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:31:12.015 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:31:12.015 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:31:11.980 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:31:12.032 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:31:30.839 00:00:12.523 TCP 12.102.0.1:38740 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:32:33.401 00:00:11.760 TCP 12.102.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:33:35.197 00:00:11.771 TCP 12.102.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:34:37.010 00:00:11.797 TCP 12.102.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:30:00.082 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 15:30:00.085 00:06:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:35:38.846 00:00:11.803 TCP 12.102.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:36:11.887 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:36:12.076 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:36:12.032 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:36:12.034 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:36:11.910 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:36:12.178 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:36:11.900 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:36:40.685 00:00:11.805 TCP 12.102.0.1:48056 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:37:42.533 00:00:11.799 TCP 12.102.0.1:44076 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:38:44.371 00:00:11.778 TCP 12.102.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:39:46.194 00:00:11.824 TCP 12.102.0.1:45070 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:40:48.077 00:00:11.778 TCP 12.102.0.1:59816 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:41:12.005 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:41:12.244 00:00:00.032 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:41:12.041 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:41:12.027 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:41:12.268 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:41:12.143 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:41:12.140 00:00:00.035 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:37:00.087 00:06:00.062 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:37:00.084 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 15:41:49.898 00:00:11.839 TCP 12.102.0.1:33348 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:42:51.793 00:00:12.314 TCP 12.102.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:43:54.144 00:00:11.814 TCP 12.102.0.1:49560 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:44:55.996 00:00:11.818 TCP 12.102.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:46:12.273 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:46:12.237 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:46:12.490 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:45:57.849 00:00:11.768 TCP 12.102.0.1:50348 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:46:12.137 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:46:12.296 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:46:12.417 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:46:12.355 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:46:59.652 00:00:11.820 TCP 12.102.0.1:33616 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:48:01.524 00:00:11.773 TCP 12.102.0.1:56392 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:44:00.086 00:06:00.068 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 15:44:00.089 00:06:00.063 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:49:03.337 00:00:11.803 TCP 12.102.0.1:51796 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:50:05.178 00:00:11.824 TCP 12.102.0.1:45848 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:51:12.403 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:51:12.333 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:51:12.501 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:51:12.280 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:51:12.492 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:51:12.511 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:51:12.256 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:51:07.061 00:00:11.882 TCP 12.102.0.1:38816 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:52:08.989 00:00:11.761 TCP 12.102.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:53:10.791 00:00:11.811 TCP 12.102.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:54:12.642 00:00:11.821 TCP 12.102.0.1:40360 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:55:14.502 00:00:11.801 TCP 12.102.0.1:35620 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:51:00.093 00:06:00.060 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 15:51:00.090 00:06:00.064 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 15:56:12.828 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 15:56:12.721 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 15:56:12.819 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 15:56:13.079 00:00:00.036 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 15:56:12.851 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 15:56:12.884 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 15:56:12.766 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 15:56:16.342 00:00:11.771 TCP 12.102.0.1:58818 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:57:18.153 00:00:11.806 TCP 12.102.0.1:60698 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:58:19.993 00:00:11.801 TCP 12.102.0.1:36474 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 260, avg pps: 0, avg bpp: 108 Time window: 2025-11-01 14:55:00 - 2025-11-01 15:58:31 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0054s User: 0.0011s Wall: 0.0037s flows/second: 43560.2 Runtime: 0.0037s