Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 21:59:25.388 00:00:11.774 TCP 12.102.0.1:42440 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:00:10.684 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:00:10.720 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:00:10.701 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:00:10.901 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:00:10.708 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:00:10.727 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:00:10.584 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:00:27.203 00:00:11.863 TCP 12.102.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:01:29.106 00:00:11.803 TCP 12.102.0.1:59580 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:02:30.954 00:00:11.772 TCP 12.102.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:03:32.764 00:00:11.830 TCP 12.102.0.1:59544 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:00:03.960 00:05:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:00:03.957 00:05:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:04:34.636 00:00:11.800 TCP 12.102.0.1:41030 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:05:10.874 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:05:10.944 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:05:10.887 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:05:10.990 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:05:10.896 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:05:10.789 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:05:10.782 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:05:36.478 00:00:11.800 TCP 12.102.0.1:34026 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:06:38.314 00:00:15.830 TCP 12.102.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:07:44.183 00:00:20.468 TCP 12.102.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:08:54.696 00:00:11.809 TCP 12.102.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:06:03.962 00:05:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:09:56.550 00:00:11.805 TCP 12.102.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:06:03.959 00:05:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:10:10.902 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:10:10.920 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:10:10.958 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:10:10.939 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:10:10.925 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:10:11.065 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:10:10.936 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:10:58.390 00:00:11.983 TCP 12.102.0.1:43692 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:12:00.408 00:00:11.810 TCP 12.102.0.1:56934 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:13:02.262 00:00:11.855 TCP 12.102.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:14:04.158 00:00:11.925 TCP 12.102.0.1:52108 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:15:11.187 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:15:11.133 00:00:00.038 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:15:11.220 00:00:00.034 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:15:11.285 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:15:11.210 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:15:11.135 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:15:11.146 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:15:06.118 00:00:11.767 TCP 12.102.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:12:03.959 00:05:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:12:03.962 00:05:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:16:07.922 00:00:11.782 TCP 12.102.0.1:51530 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:17:09.737 00:00:11.799 TCP 12.102.0.1:51128 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:18:11.579 00:00:11.815 TCP 12.102.0.1:51608 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:19:13.435 00:00:11.828 TCP 12.102.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:20:11.069 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:20:11.374 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:20:11.500 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:20:11.092 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:20:11.197 00:00:00.047 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:20:11.346 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:20:11.076 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:20:15.303 00:00:11.805 TCP 12.102.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:21:17.148 00:00:11.811 TCP 12.102.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:18:03.962 00:05:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:18:03.959 00:05:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:22:18.994 00:00:11.806 TCP 12.102.0.1:51096 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:23:20.838 00:00:11.800 TCP 12.102.0.1:41814 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:24:22.681 00:00:11.831 TCP 12.102.0.1:50690 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:25:11.363 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:25:11.043 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:25:11.395 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:25:11.170 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:25:11.265 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:25:11.320 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:25:11.147 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:25:24.549 00:00:11.796 TCP 12.102.0.1:55956 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:26:26.387 00:00:11.806 TCP 12.102.0.1:36342 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:27:28.229 00:00:11.807 TCP 12.102.0.1:36088 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:24:03.964 00:05:00.143 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:24:03.967 00:05:00.138 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:28:30.077 00:00:11.801 TCP 12.102.0.1:38480 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:29:31.914 00:00:11.825 TCP 12.102.0.1:58920 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:30:11.529 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:30:11.267 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:30:11.398 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:30:11.373 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:30:11.339 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:30:11.473 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:30:11.450 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:30:33.789 00:00:11.806 TCP 12.102.0.1:36350 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:31:35.639 00:00:11.766 TCP 12.102.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:32:37.439 00:00:11.835 TCP 12.102.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:33:39.312 00:00:11.803 TCP 12.102.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:30:03.968 00:05:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:30:03.965 00:05:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:34:41.149 00:00:11.859 TCP 12.102.0.1:37978 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:35:11.719 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:35:11.729 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:35:11.485 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:35:11.839 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:35:11.742 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:35:11.886 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:35:11.349 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:35:43.071 00:00:11.800 TCP 12.102.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:36:44.905 00:00:11.803 TCP 12.102.0.1:50526 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:37:46.745 00:00:12.233 TCP 12.102.0.1:39554 -> 1.101.0.1:3000 15 1926 1 2025-11-09 22:38:49.024 00:00:11.805 TCP 12.102.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:39:50.864 00:00:11.799 TCP 12.102.0.1:38320 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:36:03.969 00:05:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:36:03.967 00:05:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:40:11.749 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:40:12.318 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:40:12.071 00:00:00.037 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:40:11.829 00:00:00.038 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:40:12.500 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:40:11.951 00:00:00.061 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:40:12.050 00:00:00.037 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:40:52.703 00:00:11.814 TCP 12.102.0.1:44298 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:41:54.555 00:00:11.812 TCP 12.102.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:42:56.406 00:00:12.244 TCP 12.102.0.1:48796 -> 1.101.0.1:3000 15 1926 1 2025-11-09 22:43:58.688 00:00:11.804 TCP 12.102.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:45:11.823 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:45:11.654 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:45:11.726 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:45:00.531 00:00:11.815 TCP 12.102.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:45:11.855 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:45:11.816 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:45:11.904 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:45:11.702 00:00:00.028 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:42:03.968 00:05:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:42:03.971 00:05:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:46:02.380 00:00:11.809 TCP 12.102.0.1:35648 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:47:04.234 00:00:11.805 TCP 12.102.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:48:06.078 00:00:11.819 TCP 12.102.0.1:35440 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:49:07.933 00:00:11.773 TCP 12.102.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:50:11.934 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:50:11.919 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:50:11.915 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:50:11.789 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:50:11.977 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:50:11.899 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:50:11.764 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:50:09.745 00:00:11.797 TCP 12.102.0.1:59704 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:51:11.582 00:00:11.802 TCP 12.102.0.1:41342 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:48:03.972 00:05:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:48:03.969 00:05:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:52:13.423 00:00:11.804 TCP 12.102.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:53:15.266 00:00:11.809 TCP 12.102.0.1:43362 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:54:17.111 00:00:12.033 TCP 12.102.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:55:11.986 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-09 22:55:11.838 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 22:55:12.016 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-09 22:55:11.890 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-09 22:55:11.710 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-09 22:55:11.907 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-09 22:55:11.868 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-09 22:55:19.180 00:00:11.799 TCP 12.102.0.1:46498 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:56:21.028 00:00:11.799 TCP 12.102.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:57:22.892 00:00:11.810 TCP 12.102.0.1:38236 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:54:03.975 00:05:00.138 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-09 22:54:03.972 00:05:00.143 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-09 22:58:24.743 00:00:11.803 TCP 12.102.0.1:56112 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 277, avg pps: 0, avg bpp: 109 Time window: 2025-11-09 21:59:25 - 2025-11-09 22:59:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0037s User: 0.0015s Wall: 0.0026s flows/second: 61860.6 Runtime: 0.0026s