Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 22:59:08.864 00:00:11.804 TCP 12.102.0.1:50016 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:00:10.705 00:00:11.800 TCP 12.102.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:01:12.544 00:00:11.804 TCP 12.102.0.1:38678 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:02:07.422 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:02:07.603 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:02:07.690 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:02:07.580 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:02:07.445 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:02:07.703 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:02:07.317 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:02:14.385 00:00:11.808 TCP 12.102.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:03:16.232 00:00:11.807 TCP 12.102.0.1:32780 -> 1.101.0.1:3000 11 1507 1 2025-11-13 22:59:06.211 00:06:00.058 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 22:59:06.213 00:06:00.053 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 23:04:18.082 00:00:11.816 TCP 12.102.0.1:42984 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:05:19.939 00:00:12.297 TCP 12.102.0.1:34152 -> 1.101.0.1:3000 15 1926 1 2025-11-13 23:06:22.277 00:00:11.810 TCP 12.102.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:07:07.751 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.483 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.613 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.474 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.490 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.479 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.452 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:07:24.130 00:00:11.805 TCP 12.102.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:08:25.974 00:00:11.811 TCP 12.102.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:09:27.826 00:00:11.816 TCP 12.102.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:10:29.678 00:00:11.820 TCP 12.102.0.1:43758 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:06:06.213 00:06:00.058 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 23:06:06.215 00:06:00.054 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 23:11:31.538 00:00:11.802 TCP 12.102.0.1:53602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:12:07.856 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:12:07.727 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:12:07.890 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:12:07.514 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:12:07.657 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:12:07.696 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:12:07.492 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:12:33.381 00:00:11.766 TCP 12.102.0.1:56326 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:13:35.188 00:00:11.843 TCP 12.102.0.1:54388 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:14:37.086 00:00:11.816 TCP 12.102.0.1:57580 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:15:38.938 00:00:11.807 TCP 12.102.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:16:40.787 00:00:11.804 TCP 12.102.0.1:51384 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:17:07.731 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:17:07.871 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:17:07.792 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:17:07.804 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:17:07.754 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:17:07.953 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:17:07.762 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:17:42.631 00:00:11.857 TCP 12.102.0.1:42356 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:13:06.213 00:06:00.072 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 23:13:06.216 00:06:00.067 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 23:18:44.531 00:00:11.794 TCP 12.102.0.1:37622 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:19:46.369 00:00:11.818 TCP 12.102.0.1:44770 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:20:48.225 00:00:11.803 TCP 12.102.0.1:49672 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:21:50.082 00:00:11.814 TCP 12.102.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:22:07.695 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:22:07.936 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:22:08.016 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:22:08.062 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:22:07.725 00:00:00.015 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:22:08.057 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:22:08.027 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:22:51.932 00:00:11.826 TCP 12.102.0.1:48242 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:23:53.799 00:00:11.802 TCP 12.102.0.1:59708 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:20:06.216 00:06:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 23:24:55.640 00:00:11.812 TCP 12.102.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:20:06.218 00:06:00.065 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 23:25:57.490 00:00:11.810 TCP 12.102.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:27:08.048 00:00:00.031 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:27:08.161 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:27:07.877 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:27:08.071 00:00:00.031 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:27:08.016 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:27:08.086 00:00:00.041 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:27:08.109 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:26:59.342 00:00:11.759 TCP 12.102.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:28:01.147 00:00:11.813 TCP 12.102.0.1:52354 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:29:03.004 00:00:24.342 TCP 12.102.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:30:17.390 00:00:11.758 TCP 12.102.0.1:47148 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:31:19.187 00:00:11.801 TCP 12.102.0.1:38686 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:32:08.044 00:00:00.040 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:27:06.220 00:06:00.065 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 23:32:08.204 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:32:07.937 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:32:08.068 00:00:00.040 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:32:08.110 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:32:08.176 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:27:06.219 00:06:00.070 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 23:32:08.203 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:32:21.043 00:00:11.863 TCP 12.102.0.1:45194 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:33:22.945 00:00:11.801 TCP 12.102.0.1:33798 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:34:24.783 00:00:11.771 TCP 12.102.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:35:26.590 00:00:11.800 TCP 12.102.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:36:28.429 00:00:11.813 TCP 12.102.0.1:39686 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:37:08.281 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:37:08.123 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:37:08.195 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:37:08.150 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:37:08.305 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:37:08.352 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:37:08.230 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:37:30.282 00:00:11.800 TCP 12.102.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:38:32.120 00:00:11.801 TCP 12.102.0.1:40220 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:34:06.218 00:06:00.071 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 23:34:06.221 00:06:00.066 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 23:39:33.962 00:00:12.513 TCP 12.102.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:40:36.516 00:00:11.826 TCP 12.102.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:41:38.381 00:00:11.815 TCP 12.102.0.1:51372 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:42:08.010 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:42:08.202 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:42:08.164 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:42:07.960 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:42:08.031 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:42:08.290 00:00:00.014 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:42:08.163 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:42:40.234 00:00:11.810 TCP 12.102.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:43:42.084 00:00:11.769 TCP 12.102.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:44:43.894 00:00:11.761 TCP 12.102.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:45:45.692 00:00:11.773 TCP 12.102.0.1:50262 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:41:06.221 00:06:00.069 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 23:41:06.223 00:06:00.065 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 23:46:47.501 00:00:11.802 TCP 12.102.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:47:08.289 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:47:08.537 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:47:08.548 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:47:08.444 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:47:08.310 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:47:08.264 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:47:08.309 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:47:49.340 00:00:11.815 TCP 12.102.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:48:51.180 00:00:11.800 TCP 12.102.0.1:43382 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:49:53.022 00:00:11.802 TCP 12.102.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:50:54.862 00:00:11.878 TCP 12.102.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:52:08.543 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:52:08.528 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:51:56.781 00:00:11.811 TCP 12.102.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:52:08.709 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:52:08.571 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:52:08.566 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:52:08.433 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:52:08.567 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:48:06.233 00:06:00.056 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-13 23:48:06.231 00:06:00.061 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-13 23:52:58.634 00:00:11.803 TCP 12.102.0.1:51064 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:54:00.470 00:00:11.811 TCP 12.102.0.1:50924 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:55:02.318 00:00:11.799 TCP 12.102.0.1:44486 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:56:04.158 00:00:11.803 TCP 12.102.0.1:33770 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:57:08.846 00:00:00.029 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-13 23:57:08.643 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-13 23:57:08.751 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-13 23:57:08.618 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-13 23:57:09.015 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-13 23:57:09.208 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:57:09.186 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-13 23:57:05.998 00:00:11.759 TCP 12.102.0.1:35384 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:58:07.795 00:00:11.799 TCP 12.102.0.1:49498 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 122769, total packets: 1118, avg bps: 276, avg pps: 0, avg bpp: 109 Time window: 2025-11-13 22:59:06 - 2025-11-13 23:58:19 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0062s User: 0.0000s Wall: 0.0023s flows/second: 69574.8 Runtime: 0.0023s