Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 04:59:34.088 00:00:12.409 TCP 12.102.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-11-02 04:55:00.331 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 04:55:00.328 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:00:36.540 00:00:11.805 TCP 12.102.0.1:48834 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:01:28.277 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:01:28.417 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:01:28.298 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:01:27.850 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:01:28.180 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:01:27.976 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:01:27.827 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:01:38.381 00:00:11.807 TCP 12.102.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:02:40.222 00:00:11.800 TCP 12.102.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:03:42.074 00:00:11.804 TCP 12.102.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:04:43.916 00:00:11.838 TCP 12.102.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:05:45.778 00:00:11.807 TCP 12.102.0.1:54636 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:06:28.303 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:06:28.405 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:06:28.351 00:00:00.033 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:06:27.978 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:06:28.326 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:06:28.201 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:06:27.955 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:06:47.623 00:00:11.827 TCP 12.102.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:02:00.328 00:06:00.097 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:02:00.332 00:06:00.092 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 05:07:49.491 00:00:11.799 TCP 12.102.0.1:58866 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:08:51.335 00:00:11.802 TCP 12.102.0.1:53252 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:09:53.209 00:00:11.811 TCP 12.102.0.1:34440 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:10:55.079 00:00:11.769 TCP 12.102.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:11:28.463 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:11:28.605 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:11:28.133 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:11:28.409 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:11:28.558 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:11:28.384 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:11:28.387 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:11:56.898 00:00:11.803 TCP 12.102.0.1:38128 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:12:58.739 00:00:11.820 TCP 12.102.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:09:00.330 00:06:00.101 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:09:00.333 00:06:00.095 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 05:14:00.583 00:00:11.806 TCP 12.102.0.1:39808 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:15:02.430 00:00:19.998 TCP 12.102.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:16:28.676 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:16:28.709 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:16:12.467 00:00:11.808 TCP 12.102.0.1:36992 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:16:28.483 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:16:28.618 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:16:28.699 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:16:28.702 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:16:28.467 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:17:14.314 00:00:11.797 TCP 12.102.0.1:46612 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:18:16.151 00:00:11.811 TCP 12.102.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:19:17.994 00:00:11.805 TCP 12.102.0.1:51744 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:20:19.833 00:00:23.110 TCP 12.102.0.1:41294 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:16:00.334 00:06:00.094 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 05:16:00.333 00:06:00.098 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:21:28.548 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:21:28.686 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:21:28.633 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:21:28.572 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:21:28.692 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:21:28.635 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:21:28.505 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:21:32.986 00:00:11.817 TCP 12.102.0.1:60216 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:22:34.836 00:00:11.822 TCP 12.102.0.1:51814 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:23:36.691 00:00:11.767 TCP 12.102.0.1:44392 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:24:38.500 00:00:11.806 TCP 12.102.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:25:40.346 00:00:11.843 TCP 12.102.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:26:28.525 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:26:28.711 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:26:28.691 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:26:28.703 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:26:28.647 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:26:28.704 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:26:28.682 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:26:42.224 00:00:11.806 TCP 12.102.0.1:44350 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:27:44.078 00:00:11.761 TCP 12.102.0.1:58354 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:23:00.333 00:06:00.099 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:23:00.335 00:06:00.094 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 05:28:45.878 00:00:11.803 TCP 12.102.0.1:40390 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:29:47.718 00:00:11.859 TCP 12.102.0.1:37216 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:30:49.621 00:00:11.808 TCP 12.102.0.1:40254 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:31:28.939 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:31:28.664 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:31:28.862 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:31:28.932 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:31:28.963 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:31:28.781 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:31:28.883 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:31:51.480 00:00:11.824 TCP 12.102.0.1:40344 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:32:53.338 00:00:11.772 TCP 12.102.0.1:42032 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:33:55.146 00:00:11.763 TCP 12.102.0.1:43928 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:30:00.342 00:06:00.089 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 05:30:00.338 00:06:00.094 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:34:56.954 00:00:11.810 TCP 12.102.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:35:58.798 00:00:11.803 TCP 12.102.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:36:28.940 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:36:28.835 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:36:29.220 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:36:29.004 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:36:29.244 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:36:29.104 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:36:28.990 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:37:00.640 00:00:11.762 TCP 12.102.0.1:47936 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:38:02.444 00:00:11.809 TCP 12.102.0.1:38908 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:39:04.296 00:00:11.802 TCP 12.102.0.1:57094 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:40:06.137 00:00:11.815 TCP 12.102.0.1:49822 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:41:07.987 00:00:11.808 TCP 12.102.0.1:53614 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:41:29.010 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:41:28.748 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:41:29.154 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:41:29.072 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:41:29.031 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:41:29.161 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:41:29.045 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:37:00.341 00:06:00.095 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:37:00.343 00:06:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 05:42:09.833 00:00:11.802 TCP 12.102.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:43:11.669 00:00:11.810 TCP 12.102.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:44:13.520 00:00:11.805 TCP 12.102.0.1:35848 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:45:15.364 00:00:11.786 TCP 12.102.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:46:17.190 00:00:11.756 TCP 12.102.0.1:36252 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:46:28.888 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:46:28.865 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:46:29.137 00:00:00.047 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:46:29.270 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:46:29.264 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:46:29.042 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:46:29.261 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:47:18.985 00:00:11.799 TCP 12.102.0.1:33862 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:48:20.819 00:00:11.799 TCP 12.102.0.1:33894 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:44:00.345 00:06:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 05:44:00.344 00:06:00.095 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:49:22.655 00:00:11.831 TCP 12.102.0.1:48534 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:50:24.523 00:00:11.799 TCP 12.102.0.1:53706 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:51:29.343 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:51:29.180 00:00:00.048 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:51:29.237 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:51:29.421 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:51:29.160 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:51:29.232 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:51:29.215 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:51:26.358 00:00:11.802 TCP 12.102.0.1:59830 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:52:28.203 00:00:11.800 TCP 12.102.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:53:30.061 00:00:11.799 TCP 12.102.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:54:31.899 00:00:12.281 TCP 12.102.0.1:49358 -> 1.101.0.1:3000 15 1926 1 2025-11-02 05:55:34.219 00:00:11.772 TCP 12.102.0.1:47406 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:51:00.343 00:06:00.095 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-02 05:51:00.345 00:06:00.090 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-02 05:56:29.488 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-02 05:56:29.547 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 05:56:29.390 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-02 05:56:29.394 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-02 05:56:29.440 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-02 05:56:29.227 00:00:00.013 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-02 05:56:29.372 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 05:56:36.031 00:00:11.808 TCP 12.102.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:57:37.870 00:00:11.802 TCP 12.102.0.1:44740 -> 1.101.0.1:3000 11 1507 1 2025-11-02 05:58:39.711 00:00:11.801 TCP 12.102.0.1:33670 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124491, total packets: 1146, avg bps: 259, avg pps: 0, avg bpp: 108 Time window: 2025-11-02 04:55:00 - 2025-11-02 05:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0029s User: 0.0019s Wall: 0.0016s flows/second: 99068.3 Runtime: 0.0016s