Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 19:58:52.293 00:00:11.799 TCP 12.102.0.1:43738 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:59:54.132 00:00:11.801 TCP 12.102.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:56:00.151 00:06:00.083 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 19:56:00.153 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:00:55.972 00:00:11.805 TCP 12.102.0.1:52926 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:01:17.353 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:01:17.528 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:01:17.428 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:01:17.333 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:01:17.376 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:01:17.555 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:01:17.440 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:01:57.814 00:00:11.759 TCP 12.102.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:02:59.611 00:00:11.759 TCP 12.102.0.1:33322 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:04:01.410 00:00:11.804 TCP 12.102.0.1:44182 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:05:03.252 00:00:11.864 TCP 12.102.0.1:41322 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:06:17.470 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:06:17.454 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:06:05.155 00:00:11.801 TCP 12.102.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:06:17.623 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:06:17.556 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:06:17.492 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:06:17.622 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:06:17.503 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:07:06.994 00:00:11.821 TCP 12.102.0.1:41326 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:03:00.155 00:06:00.078 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:03:00.152 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 20:08:08.853 00:00:11.766 TCP 12.102.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:09:10.653 00:00:11.805 TCP 12.102.0.1:59906 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:10:12.516 00:00:11.797 TCP 12.102.0.1:41762 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:11:17.508 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:11:17.616 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:11:17.711 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:11:17.578 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:11:17.717 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:11:17.587 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:11:17.555 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:11:14.353 00:00:11.764 TCP 12.102.0.1:49494 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:12:16.162 00:00:11.818 TCP 12.102.0.1:49746 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:13:18.023 00:00:11.851 TCP 12.102.0.1:59022 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:14:19.910 00:00:11.803 TCP 12.102.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:10:00.157 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:10:00.154 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 20:15:21.756 00:00:11.814 TCP 12.102.0.1:34192 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:16:18.661 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:16:18.283 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:16:18.571 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:16:18.511 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:16:18.554 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:16:18.451 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:16:18.490 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:16:23.611 00:00:11.816 TCP 12.102.0.1:35824 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:17:25.463 00:00:11.801 TCP 12.102.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:18:27.305 00:00:11.856 TCP 12.102.0.1:55862 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:19:29.210 00:00:12.234 TCP 12.102.0.1:34802 -> 1.101.0.1:3000 15 1926 1 2025-11-01 20:20:31.486 00:00:11.769 TCP 12.102.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:21:17.828 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:21:17.823 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:21:18.018 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:21:17.719 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:21:17.750 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:21:17.612 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:21:17.697 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:21:33.295 00:00:11.848 TCP 12.102.0.1:56534 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:17:00.158 00:06:00.077 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:17:00.157 00:06:00.082 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 20:22:35.202 00:00:11.807 TCP 12.102.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:23:37.078 00:00:11.803 TCP 12.102.0.1:47418 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:24:38.926 00:00:11.772 TCP 12.102.0.1:46002 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:25:40.746 00:00:11.829 TCP 12.102.0.1:35608 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:26:18.022 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:26:17.708 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:26:17.978 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:26:17.932 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:26:18.036 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:26:17.713 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:26:17.689 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:26:42.618 00:00:11.799 TCP 12.102.0.1:52598 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:27:44.461 00:00:11.761 TCP 12.102.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:28:46.263 00:00:11.816 TCP 12.102.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:24:00.165 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:24:00.162 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 20:29:48.114 00:00:11.798 TCP 12.102.0.1:59912 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:30:49.951 00:00:11.763 TCP 12.102.0.1:48414 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:31:17.965 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:31:18.112 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:31:17.962 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:31:17.988 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:31:17.988 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:31:17.984 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:31:17.935 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:31:51.753 00:00:11.770 TCP 12.102.0.1:33536 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:32:53.561 00:00:11.799 TCP 12.102.0.1:50360 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:33:55.398 00:00:11.801 TCP 12.102.0.1:46656 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:34:57.237 00:00:11.809 TCP 12.102.0.1:49742 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:31:00.169 00:06:00.069 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:31:00.167 00:06:00.074 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 20:35:59.083 00:00:11.813 TCP 12.102.0.1:39670 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:36:18.021 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:36:18.119 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:36:18.031 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:36:18.070 00:00:00.042 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:36:18.116 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:36:17.995 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:36:18.048 00:00:00.041 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:37:00.932 00:00:11.816 TCP 12.102.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:38:02.789 00:00:11.804 TCP 12.102.0.1:53616 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:39:04.636 00:00:11.809 TCP 12.102.0.1:35252 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:40:06.484 00:00:11.804 TCP 12.102.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:41:18.015 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:41:18.265 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:41:18.274 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:41:18.084 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:41:18.039 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:41:18.068 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:41:18.152 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:41:08.325 00:00:11.809 TCP 12.102.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:42:10.180 00:00:11.810 TCP 12.102.0.1:50818 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:38:00.171 00:06:00.067 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:38:00.170 00:06:00.072 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 20:43:12.038 00:00:11.806 TCP 12.102.0.1:52982 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:44:13.884 00:00:11.799 TCP 12.102.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:45:15.731 00:00:11.813 TCP 12.102.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:46:18.731 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:46:18.747 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:46:18.918 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:46:18.700 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:46:18.756 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:46:18.627 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:46:18.677 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:46:17.589 00:00:11.767 TCP 12.102.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:47:19.398 00:00:11.804 TCP 12.102.0.1:38312 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:48:21.242 00:00:11.761 TCP 12.102.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:49:23.069 00:00:11.817 TCP 12.102.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:45:00.176 00:06:00.067 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 20:45:00.179 00:06:00.061 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:50:24.935 00:00:11.812 TCP 12.102.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:51:18.249 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:51:18.376 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:51:18.299 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:51:18.505 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:51:18.270 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:51:18.293 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:51:18.362 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:51:26.783 00:00:11.820 TCP 12.102.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:52:28.648 00:00:11.817 TCP 12.102.0.1:48030 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:53:30.511 00:00:11.818 TCP 12.102.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:54:32.370 00:00:11.854 TCP 12.102.0.1:52818 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:55:34.266 00:00:11.804 TCP 12.102.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:56:18.489 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-01 20:56:18.598 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-01 20:56:18.613 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:56:18.548 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-01 20:56:18.511 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-01 20:56:18.503 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-01 20:56:18.332 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-01 20:56:36.110 00:00:11.766 TCP 12.102.0.1:60428 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:52:00.191 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-01 20:52:00.189 00:06:00.061 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-01 20:57:37.920 00:00:11.829 TCP 12.102.0.1:56648 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:58:39.785 00:00:11.764 TCP 12.102.0.1:55694 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 125998, total packets: 1157, avg bps: 267, avg pps: 0, avg bpp: 108 Time window: 2025-11-01 19:56:00 - 2025-11-01 20:58:51 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0031s User: 0.0031s Wall: 0.0024s flows/second: 66753.9 Runtime: 0.0024s