Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 09:59:11.437 00:00:11.809 TCP 12.102.0.1:43968 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:00:13.282 00:00:11.802 TCP 12.102.0.1:33018 -> 1.101.0.1:3000 11 1507 1 2025-11-05 09:56:01.798 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:01:15.120 00:00:11.810 TCP 12.102.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:02:16.968 00:00:11.803 TCP 12.102.0.1:33374 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:03:01.035 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.171 00:00:00.046 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.051 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.064 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.018 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:03:00.720 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.028 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 09:58:01.801 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-05 10:03:18.813 00:00:11.801 TCP 12.102.0.1:43996 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:04:20.650 00:00:11.818 TCP 12.102.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:05:22.504 00:00:11.803 TCP 12.102.0.1:60318 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:06:24.347 00:00:11.801 TCP 12.102.0.1:55804 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:07:26.181 00:00:11.806 TCP 12.102.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:08:00.801 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:03:01.800 00:06:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:08:00.754 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:08:01.062 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:08:00.878 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:08:00.823 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:08:00.868 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:08:00.825 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:08:28.034 00:00:11.765 TCP 12.102.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:09:29.832 00:00:11.802 TCP 12.102.0.1:42356 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:05:01.804 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-05 10:10:31.682 00:00:12.515 TCP 12.102.0.1:54476 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:11:34.238 00:00:12.232 TCP 12.102.0.1:48306 -> 1.101.0.1:3000 15 1926 1 2025-11-05 10:12:36.512 00:00:11.801 TCP 12.102.0.1:42254 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:13:01.043 00:00:00.044 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:13:01.115 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:13:00.973 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:13:01.226 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:13:01.065 00:00:00.044 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:13:01.059 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:13:00.835 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:13:38.354 00:00:11.800 TCP 12.102.0.1:35308 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:14:40.192 00:00:11.800 TCP 12.102.0.1:55300 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:10:01.802 00:06:00.126 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:15:42.066 00:00:11.776 TCP 12.102.0.1:60912 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:16:43.878 00:00:11.758 TCP 12.102.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:12:01.806 00:06:00.119 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-05 10:17:45.672 00:00:11.803 TCP 12.102.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:18:01.210 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:18:01.441 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:18:01.439 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:18:01.070 00:00:00.043 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:18:01.381 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:18:01.334 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:18:01.048 00:00:00.042 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:18:47.513 00:00:11.802 TCP 12.102.0.1:58452 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:19:49.354 00:00:11.804 TCP 12.102.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:20:51.197 00:00:11.800 TCP 12.102.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:17:01.804 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:21:53.049 00:00:11.801 TCP 12.102.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:23:01.438 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.440 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.585 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.220 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.563 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.653 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.199 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:22:54.890 00:00:11.801 TCP 12.102.0.1:44266 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:19:01.809 00:06:00.120 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-05 10:23:56.728 00:00:11.808 TCP 12.102.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:24:58.571 00:00:11.805 TCP 12.102.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:26:00.413 00:00:11.766 TCP 12.102.0.1:42330 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:27:02.213 00:00:11.811 TCP 12.102.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:28:01.366 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.601 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.387 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.334 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.321 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.471 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.312 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:28:04.077 00:00:11.801 TCP 12.102.0.1:37982 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:24:01.813 00:06:00.119 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:29:05.917 00:00:11.828 TCP 12.102.0.1:49338 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:30:07.784 00:00:11.765 TCP 12.102.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:26:01.816 00:06:00.114 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-05 10:31:09.587 00:00:11.800 TCP 12.102.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:32:11.425 00:00:11.799 TCP 12.102.0.1:59992 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:33:01.292 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:33:01.502 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:33:01.479 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:33:01.507 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:33:01.609 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:33:01.436 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:33:01.316 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:33:13.265 00:00:11.805 TCP 12.102.0.1:34778 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:34:15.105 00:00:11.799 TCP 12.102.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:35:16.941 00:00:11.803 TCP 12.102.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:31:01.813 00:06:00.120 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:36:18.781 00:00:12.563 TCP 12.102.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:37:21.386 00:00:11.807 TCP 12.102.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:38:01.507 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:38:01.624 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:38:02.407 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:38:02.143 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:38:02.017 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:38:01.593 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:38:02.120 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:33:01.816 00:06:00.118 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-05 10:38:23.232 00:00:11.762 TCP 12.102.0.1:35874 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:39:25.044 00:00:12.040 TCP 12.102.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:40:27.120 00:00:12.156 TCP 12.102.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:41:29.317 00:00:11.802 TCP 12.102.0.1:33432 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:42:31.155 00:00:11.805 TCP 12.102.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:43:02.437 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:38:01.818 00:06:00.122 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:43:02.448 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.323 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.438 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.461 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.537 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.309 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:43:33.000 00:00:11.758 TCP 12.102.0.1:35900 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:44:34.794 00:00:12.117 TCP 12.102.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:40:01.819 00:06:00.117 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-05 10:45:36.951 00:00:11.764 TCP 12.102.0.1:56212 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:46:38.746 00:00:14.560 TCP 12.102.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:47:43.350 00:00:11.795 TCP 12.102.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:48:01.651 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:48:01.887 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:48:01.911 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:48:02.008 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:48:01.674 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:48:01.914 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:48:01.956 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:48:45.183 00:00:11.804 TCP 12.102.0.1:43710 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:49:47.036 00:00:11.797 TCP 12.102.0.1:47172 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:45:01.819 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:50:48.884 00:00:11.803 TCP 12.102.0.1:48482 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:51:50.721 00:00:11.759 TCP 12.102.0.1:49342 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:47:01.823 00:06:00.118 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-05 10:53:02.331 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:53:02.447 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:53:02.315 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:53:02.468 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:53:02.354 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:53:02.526 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:53:02.437 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:52:52.525 00:00:11.804 TCP 12.102.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:53:54.374 00:00:11.833 TCP 12.102.0.1:56814 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:54:56.245 00:00:11.807 TCP 12.102.0.1:38860 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:55:58.094 00:00:11.757 TCP 12.102.0.1:58048 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:52:01.821 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-05 10:56:59.889 00:00:12.236 TCP 12.102.0.1:48984 -> 1.101.0.1:3000 15 1926 1 2025-11-05 10:58:02.256 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-05 10:58:01.951 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.369 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.361 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.278 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.278 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.235 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.164 00:00:11.901 TCP 12.102.0.1:41954 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-11-05 09:56:01 - 2025-11-05 10:58:14 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0033s User: 0.0017s Wall: 0.0024s flows/second: 66609.5 Runtime: 0.0024s