Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 23:58:47.470 00:00:11.802 TCP 12.102.0.1:43784 -> 1.101.0.1:3000 11 1507 1 2025-11-12 23:59:49.313 00:00:11.813 TCP 12.102.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-11-12 23:55:05.627 00:06:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:00:51.161 00:00:11.814 TCP 12.102.0.1:59678 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:01:39.691 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:01:39.945 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:01:39.930 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:01:40.048 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:01:39.714 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:01:39.954 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:01:39.913 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:01:53.024 00:00:11.761 TCP 12.102.0.1:34858 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:02:54.823 00:00:11.809 TCP 12.102.0.1:57516 -> 1.101.0.1:3000 11 1507 1 2025-11-12 23:59:05.631 00:06:00.066 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 00:03:56.670 00:00:11.774 TCP 12.102.0.1:43998 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:04:58.488 00:00:11.804 TCP 12.102.0.1:48538 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:06:00.335 00:00:11.814 TCP 12.102.0.1:57376 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:06:40.089 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:06:40.040 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:06:39.848 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:06:39.957 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:06:39.743 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:06:39.939 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:06:39.824 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:02:05.628 00:06:00.072 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:07:02.185 00:00:11.802 TCP 12.102.0.1:45382 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:08:04.035 00:00:11.799 TCP 12.102.0.1:35212 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:09:05.872 00:00:11.799 TCP 12.102.0.1:38068 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:10:07.709 00:00:12.287 TCP 12.102.0.1:40822 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:06:05.632 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 00:11:10.034 00:00:11.806 TCP 12.102.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:11:40.138 00:00:00.046 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:11:40.148 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:11:40.432 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:11:40.234 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:11:40.179 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:11:40.024 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:11:40.213 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:12:11.882 00:00:11.802 TCP 12.102.0.1:54554 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:13:13.736 00:00:11.800 TCP 12.102.0.1:40788 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:09:05.630 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:14:15.569 00:00:11.908 TCP 12.102.0.1:58884 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:15:17.512 00:00:11.819 TCP 12.102.0.1:55628 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:16:19.351 00:00:11.803 TCP 12.102.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:16:40.399 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:16:40.155 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:16:40.402 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:16:40.135 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:16:40.504 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:16:40.388 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:16:40.113 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:17:21.195 00:00:11.797 TCP 12.102.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:13:05.637 00:06:00.071 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 00:18:23.045 00:00:13.367 TCP 12.102.0.1:51602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:19:26.448 00:00:11.804 TCP 12.102.0.1:45930 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:20:28.288 00:00:11.803 TCP 12.102.0.1:60190 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:16:05.635 00:06:00.075 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:21:40.374 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:21:40.222 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:21:30.129 00:00:11.816 TCP 12.102.0.1:35976 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:21:40.370 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:21:40.326 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:21:40.229 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:21:40.093 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:21:40.199 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:22:31.984 00:00:11.801 TCP 12.102.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:23:33.823 00:00:11.760 TCP 12.102.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:24:35.621 00:00:11.760 TCP 12.102.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:20:05.637 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 00:25:37.418 00:00:11.797 TCP 12.102.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:26:40.318 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:26:40.378 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:26:40.606 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:26:40.539 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:26:40.342 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:26:40.247 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:26:40.503 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:26:39.253 00:00:12.214 TCP 12.102.0.1:57948 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:27:41.509 00:00:11.756 TCP 12.102.0.1:49270 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:23:05.635 00:06:00.078 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:28:43.305 00:00:11.805 TCP 12.102.0.1:42042 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:29:45.157 00:00:11.803 TCP 12.102.0.1:36932 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:30:47.007 00:00:11.804 TCP 12.102.0.1:50854 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:31:40.469 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:31:40.239 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:31:40.614 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:31:40.374 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:31:40.492 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:31:40.683 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:31:40.608 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:31:48.848 00:00:11.797 TCP 12.102.0.1:56600 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:27:05.639 00:06:00.073 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 00:32:50.684 00:00:11.773 TCP 12.102.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:33:52.495 00:00:11.813 TCP 12.102.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:30:05.638 00:06:00.079 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:34:54.339 00:00:11.800 TCP 12.102.0.1:39898 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:35:56.176 00:00:11.805 TCP 12.102.0.1:34226 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:36:40.886 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:36:40.885 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:36:41.049 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:36:40.921 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:36:40.909 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:36:40.835 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:36:40.806 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:36:58.023 00:00:11.829 TCP 12.102.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:37:59.886 00:00:11.761 TCP 12.102.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:34:05.651 00:06:00.065 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 00:39:01.681 00:00:11.799 TCP 12.102.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:40:03.517 00:00:11.806 TCP 12.102.0.1:53506 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:41:05.357 00:00:11.816 TCP 12.102.0.1:48230 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:41:40.760 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:41:40.724 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:41:40.893 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:41:40.571 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:41:40.783 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:41:40.748 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:41:40.754 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:37:05.665 00:06:00.054 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:42:07.208 00:00:11.766 TCP 12.102.0.1:52178 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:43:09.020 00:00:11.772 TCP 12.102.0.1:53146 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:44:10.835 00:00:11.816 TCP 12.102.0.1:42904 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:45:12.690 00:00:11.798 TCP 12.102.0.1:53186 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:41:05.669 00:06:00.049 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 00:46:14.525 00:00:11.801 TCP 12.102.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:46:40.719 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:46:40.737 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:46:40.628 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:46:40.927 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:46:40.741 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:46:40.873 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:46:40.732 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:47:16.363 00:00:11.833 TCP 12.102.0.1:58364 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:48:18.234 00:00:11.768 TCP 12.102.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:44:05.667 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:49:20.057 00:00:11.854 TCP 12.102.0.1:48304 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:50:21.954 00:00:11.812 TCP 12.102.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:51:23.807 00:00:11.805 TCP 12.102.0.1:49004 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:51:40.918 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:51:41.040 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:51:40.906 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:51:40.909 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:51:40.940 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:51:40.885 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:51:40.653 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:52:25.657 00:00:11.810 TCP 12.102.0.1:49174 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:48:05.671 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 757 1 2025-11-13 00:53:27.505 00:00:11.759 TCP 12.102.0.1:56472 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:54:29.302 00:00:11.804 TCP 12.102.0.1:38392 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:55:31.144 00:00:11.822 TCP 12.102.0.1:56822 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:51:05.669 00:06:00.057 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 00:56:41.059 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 00:56:41.190 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:56:41.091 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 00:56:40.886 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 00:56:40.992 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 00:56:40.966 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 00:56:40.862 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 00:56:32.997 00:00:11.801 TCP 12.102.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:57:34.837 00:00:11.789 TCP 12.102.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:58:36.657 00:00:11.756 TCP 12.102.0.1:54584 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124614, total packets: 1137, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-11-12 23:55:05 - 2025-11-13 00:58:48 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0058s User: 0.0000s Wall: 0.0025s flows/second: 63161.3 Runtime: 0.0025s