Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 15:59:21.643 00:00:11.814 TCP 12.102.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:00:23.475 00:00:11.799 TCP 12.102.0.1:43556 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:01:25.313 00:00:11.797 TCP 12.102.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:01:58.829 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:01:58.850 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:01:58.994 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.338 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.000 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.113 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.029 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:02:27.149 00:00:11.797 TCP 12.102.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:03:28.987 00:00:11.758 TCP 12.102.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:59:06.059 00:06:00.063 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 15:59:06.062 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:04:30.789 00:00:11.807 TCP 12.102.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:05:32.637 00:00:11.797 TCP 12.102.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:06:34.474 00:00:11.805 TCP 12.102.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:06:59.655 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.771 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.716 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.812 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.350 00:00:00.033 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.730 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.789 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:07:36.319 00:00:11.804 TCP 12.102.0.1:56570 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:08:38.160 00:00:11.758 TCP 12.102.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:09:39.953 00:00:11.931 TCP 12.102.0.1:51326 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:10:41.921 00:00:11.821 TCP 12.102.0.1:58494 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:06:06.061 00:06:00.063 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:06:06.062 00:06:00.059 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:11:43.782 00:00:11.809 TCP 12.102.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:11:59.325 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:11:59.255 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.161 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.070 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.348 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.170 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.253 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:12:45.631 00:00:12.061 TCP 12.102.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:13:47.728 00:00:11.809 TCP 12.102.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:14:49.571 00:00:12.244 TCP 12.102.0.1:43412 -> 1.101.0.1:3000 15 1926 1 2025-11-13 16:15:51.853 00:00:11.804 TCP 12.102.0.1:48258 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:16:59.496 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.391 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.268 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.391 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.486 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.493 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.473 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:16:53.699 00:00:11.801 TCP 12.102.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:13:06.064 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:13:06.062 00:06:00.063 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:17:55.538 00:00:11.766 TCP 12.102.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:18:57.350 00:00:11.792 TCP 12.102.0.1:39664 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:19:59.181 00:00:11.795 TCP 12.102.0.1:37078 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:21:01.019 00:00:11.798 TCP 12.102.0.1:36378 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:21:59.371 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:21:59.425 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.504 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.534 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.394 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.649 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.385 00:00:00.027 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:22:02.848 00:00:11.800 TCP 12.102.0.1:38670 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:23:04.692 00:00:11.803 TCP 12.102.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:24:06.535 00:00:11.802 TCP 12.102.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:20:06.067 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:20:06.065 00:06:00.061 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:25:08.375 00:00:11.828 TCP 12.102.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:26:10.241 00:00:11.807 TCP 12.102.0.1:38194 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:26:59.351 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.664 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.713 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.446 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.666 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.438 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.424 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:27:12.087 00:00:11.796 TCP 12.102.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:28:13.919 00:00:11.826 TCP 12.102.0.1:57988 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:29:15.779 00:00:11.763 TCP 12.102.0.1:48456 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:30:17.580 00:00:11.807 TCP 12.102.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:31:19.422 00:00:11.794 TCP 12.102.0.1:42982 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:31:59.850 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.608 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.805 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.721 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.500 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.588 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.699 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:27:06.067 00:06:00.061 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:27:06.068 00:06:00.057 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:32:21.258 00:00:11.802 TCP 12.102.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:33:23.097 00:00:11.763 TCP 12.102.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:34:24.895 00:00:11.799 TCP 12.102.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:35:26.739 00:00:11.804 TCP 12.102.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:36:28.578 00:00:11.800 TCP 12.102.0.1:46274 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:36:59.679 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:36:59.795 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.708 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.740 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.702 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.841 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.773 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:37:30.419 00:00:11.801 TCP 12.102.0.1:45210 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:38:32.260 00:00:11.802 TCP 12.102.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:34:06.069 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:34:06.072 00:06:00.056 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:39:34.099 00:00:11.760 TCP 12.102.0.1:44770 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:40:35.894 00:00:11.760 TCP 12.102.0.1:53056 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:41:37.693 00:00:11.827 TCP 12.102.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:42:00.510 00:00:00.027 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:42:00.250 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.308 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.030 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.533 00:00:00.027 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.614 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.271 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:42:39.560 00:00:11.797 TCP 12.102.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:43:41.397 00:00:11.813 TCP 12.102.0.1:60560 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:44:43.255 00:00:11.759 TCP 12.102.0.1:59766 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:45:45.080 00:00:11.798 TCP 12.102.0.1:35290 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:41:06.074 00:06:00.054 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:41:06.070 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:46:59.945 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:46:46.919 00:00:11.836 TCP 12.102.0.1:47074 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:47:00.011 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:47:00.065 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.982 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.968 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.998 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.917 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:47:48.796 00:00:11.779 TCP 12.102.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:48:50.612 00:00:11.785 TCP 12.102.0.1:42558 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:49:52.428 00:00:11.831 TCP 12.102.0.1:32926 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:50:54.301 00:00:11.799 TCP 12.102.0.1:44340 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:52:00.064 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.159 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.103 00:00:00.019 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.121 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.283 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.032 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.098 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:51:56.134 00:00:11.810 TCP 12.102.0.1:36150 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:48:06.071 00:06:00.060 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 16:48:06.075 00:06:00.055 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 16:52:57.980 00:00:11.806 TCP 12.102.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:53:59.824 00:00:11.808 TCP 12.102.0.1:47892 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:55:01.660 00:00:11.840 TCP 12.102.0.1:58612 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:56:03.514 00:00:11.802 TCP 12.102.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:57:00.188 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.405 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.081 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.066 00:00:00.052 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.195 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.065 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.043 00:00:00.051 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 16:57:05.352 00:00:11.800 TCP 12.102.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:58:07.189 00:00:11.763 TCP 12.102.0.1:36938 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122769, total packets: 1118, avg bps: 276, avg pps: 0, avg bpp: 109 Time window: 2025-11-13 15:59:06 - 2025-11-13 16:58:18 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0044s User: 0.0009s Wall: 0.0027s flows/second: 59328.6 Runtime: 0.0027s