Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 18:59:03.407 00:00:11.765 TCP 12.102.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:00:05.212 00:00:11.777 TCP 12.102.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:01:16.392 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.431 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:01:15.853 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.208 00:00:00.036 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.372 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:01:16.234 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:01:15.830 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:01:07.032 00:00:11.985 TCP 12.102.0.1:55868 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:02:09.080 00:00:11.817 TCP 12.102.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:03:10.932 00:00:11.811 TCP 12.102.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:04:12.780 00:00:11.763 TCP 12.102.0.1:42716 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:00:00.134 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:00:00.136 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:05:14.587 00:00:11.809 TCP 12.102.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:06:16.548 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.431 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.628 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.454 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.516 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.466 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:06:16.434 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:06:16.431 00:00:11.809 TCP 12.102.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:07:18.282 00:00:11.800 TCP 12.102.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:08:20.114 00:00:11.813 TCP 12.102.0.1:43534 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:09:21.967 00:00:11.799 TCP 12.102.0.1:58462 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:10:23.804 00:00:11.812 TCP 12.102.0.1:50452 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:11:16.389 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.416 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.489 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.411 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.397 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.418 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:11:16.389 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:11:25.657 00:00:12.409 TCP 12.102.0.1:56642 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:07:00.139 00:06:00.075 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:07:00.135 00:06:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:12:28.106 00:00:11.810 TCP 12.102.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:13:29.950 00:00:11.759 TCP 12.102.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:14:31.754 00:00:11.795 TCP 12.102.0.1:35388 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:15:33.595 00:00:11.799 TCP 12.102.0.1:45710 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:16:16.238 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:16:16.455 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.478 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.465 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.260 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.544 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:16:16.514 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:16:35.435 00:00:11.813 TCP 12.102.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:17:37.290 00:00:11.832 TCP 12.102.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:18:39.159 00:00:11.814 TCP 12.102.0.1:40604 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:14:00.140 00:06:00.080 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:14:00.142 00:06:00.075 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:19:41.012 00:00:11.804 TCP 12.102.0.1:51138 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:20:42.852 00:00:11.796 TCP 12.102.0.1:35674 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:21:16.676 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.806 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.544 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.701 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.612 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.640 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:21:16.680 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:21:44.689 00:00:11.801 TCP 12.102.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:22:46.526 00:00:11.805 TCP 12.102.0.1:34854 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:23:48.371 00:00:11.813 TCP 12.102.0.1:47194 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:24:50.225 00:00:12.248 TCP 12.102.0.1:49654 -> 1.101.0.1:3000 15 1926 1 2025-11-01 19:21:00.145 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:21:00.144 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:25:52.513 00:00:11.804 TCP 12.102.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:26:16.747 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.591 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.692 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.638 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.689 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.644 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:26:16.615 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:26:54.358 00:00:11.815 TCP 12.102.0.1:46654 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:27:56.209 00:00:11.760 TCP 12.102.0.1:56998 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:28:58.025 00:00:11.816 TCP 12.102.0.1:51756 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:29:59.879 00:00:11.809 TCP 12.102.0.1:54818 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:31:01.724 00:00:11.807 TCP 12.102.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:31:16.871 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:31:16.821 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.905 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.965 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.894 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.973 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:31:16.713 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:32:03.568 00:00:11.760 TCP 12.102.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:28:00.148 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:28:00.148 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:33:05.370 00:00:11.822 TCP 12.102.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:34:07.236 00:00:11.812 TCP 12.102.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:35:09.095 00:00:12.485 TCP 12.102.0.1:40002 -> 1.101.0.1:3000 15 1926 1 2025-11-01 19:36:16.917 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:36:16.863 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.888 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.723 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.940 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:36:17.025 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:36:16.775 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:36:11.621 00:00:11.764 TCP 12.102.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:37:13.422 00:00:11.765 TCP 12.102.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:38:15.223 00:00:11.807 TCP 12.102.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:39:17.080 00:00:11.800 TCP 12.102.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:35:00.148 00:06:00.081 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:35:00.151 00:06:00.076 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:40:18.921 00:00:11.828 TCP 12.102.0.1:42786 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:41:16.801 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:41:17.135 00:00:00.044 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:41:17.285 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:41:17.255 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:41:16.826 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:41:17.280 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:41:17.030 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:41:20.793 00:00:11.804 TCP 12.102.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:42:22.638 00:00:11.807 TCP 12.102.0.1:38412 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:43:24.486 00:00:11.815 TCP 12.102.0.1:46592 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:44:26.369 00:00:11.840 TCP 12.102.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:45:28.252 00:00:11.960 TCP 12.102.0.1:57318 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:46:17.005 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:46:17.291 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:46:17.271 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:46:16.967 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:46:17.089 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:46:17.251 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:46:16.944 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:46:30.249 00:00:11.810 TCP 12.102.0.1:51222 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:42:00.151 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:42:00.149 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:47:32.094 00:00:11.804 TCP 12.102.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:48:33.942 00:00:11.773 TCP 12.102.0.1:33732 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:49:35.751 00:00:11.813 TCP 12.102.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:50:37.602 00:00:11.760 TCP 12.102.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:51:16.875 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:51:17.232 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:51:17.218 00:00:00.047 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:51:17.260 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:51:16.897 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:51:17.157 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:51:17.133 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:51:39.396 00:00:11.808 TCP 12.102.0.1:60634 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:52:41.239 00:00:11.759 TCP 12.102.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:53:43.070 00:00:11.799 TCP 12.102.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:49:00.152 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 19:49:00.150 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:54:44.906 00:00:11.821 TCP 12.102.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:55:46.762 00:00:11.798 TCP 12.102.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:56:17.260 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 19:56:17.209 00:00:00.010 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.290 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.401 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.283 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.275 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 19:56:17.346 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 19:56:48.600 00:00:11.807 TCP 12.102.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:57:50.446 00:00:11.809 TCP 12.102.0.1:34514 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 278, avg pps: 0, avg bpp: 109 Time window: 2025-11-01 18:59:03 - 2025-11-01 19:58:02 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0034s User: 0.0022s Wall: 0.0027s flows/second: 57666.2 Runtime: 0.0028s