Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 11:59:05.186 00:00:11.797 TCP 12.102.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:00:07.022 00:00:11.807 TCP 12.102.0.1:35202 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:56:06.486 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 11:56:06.490 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:01:08.862 00:00:11.852 TCP 12.102.0.1:45362 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:02:23.111 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:02:23.083 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:02:23.336 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:02:23.285 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:02:23.134 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:02:10.759 00:00:11.806 TCP 12.102.0.1:53634 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:02:23.106 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:02:23.056 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:03:12.604 00:00:11.803 TCP 12.102.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:04:14.445 00:00:11.807 TCP 12.102.0.1:36772 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:05:16.287 00:00:11.811 TCP 12.102.0.1:40592 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:06:18.134 00:00:11.769 TCP 12.102.0.1:33960 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:07:23.301 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:07:23.016 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:07:23.283 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:07:23.324 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:07:23.149 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:07:23.215 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:07:23.252 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:07:19.944 00:00:11.799 TCP 12.102.0.1:45748 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:03:06.493 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:03:06.491 00:06:00.196 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 12:08:21.784 00:00:11.799 TCP 12.102.0.1:38926 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:09:23.628 00:00:11.798 TCP 12.102.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:10:25.463 00:00:11.809 TCP 12.102.0.1:47484 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:11:27.314 00:00:11.801 TCP 12.102.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:12:23.311 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:12:23.228 00:00:00.045 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:12:23.293 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:12:23.333 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:12:23.369 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:12:23.463 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:12:23.263 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:12:29.165 00:00:11.861 TCP 12.102.0.1:49090 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:13:31.087 00:00:11.809 TCP 12.102.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:14:32.938 00:00:11.804 TCP 12.102.0.1:45188 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:10:06.491 00:06:00.197 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 12:10:06.494 00:06:00.191 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:15:34.786 00:00:12.195 TCP 12.102.0.1:33708 -> 1.101.0.1:3000 15 1926 1 2025-11-14 12:16:37.027 00:00:11.824 TCP 12.102.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:17:23.443 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:17:23.253 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:17:23.622 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:17:23.666 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:17:23.466 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:17:23.554 00:00:00.027 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:17:23.412 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:17:38.892 00:00:11.799 TCP 12.102.0.1:57342 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:18:40.725 00:00:11.767 TCP 12.102.0.1:40824 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:19:42.530 00:00:11.806 TCP 12.102.0.1:47338 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:20:44.370 00:00:11.822 TCP 12.102.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:21:46.237 00:00:11.802 TCP 12.102.0.1:44988 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:17:06.495 00:06:00.193 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:17:06.494 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 12:22:23.561 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:22:23.564 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:22:23.624 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:22:23.719 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:22:23.584 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:22:23.717 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:22:23.330 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:22:48.082 00:00:11.809 TCP 12.102.0.1:56670 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:23:49.931 00:00:11.813 TCP 12.102.0.1:56840 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:24:51.781 00:00:11.801 TCP 12.102.0.1:47118 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:25:53.622 00:00:11.801 TCP 12.102.0.1:49482 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:26:55.467 00:00:11.808 TCP 12.102.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:27:23.614 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:27:23.666 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:27:23.724 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:27:23.616 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:27:23.636 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:27:23.814 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:27:23.785 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:27:57.316 00:00:11.800 TCP 12.102.0.1:37816 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:24:06.501 00:06:00.190 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:24:06.498 00:06:00.195 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 12:28:59.155 00:00:11.800 TCP 12.102.0.1:50012 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:30:01.005 00:00:11.803 TCP 12.102.0.1:58490 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:31:02.854 00:00:11.766 TCP 12.102.0.1:58918 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:32:23.637 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:32:04.660 00:00:11.817 TCP 12.102.0.1:56264 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:32:23.653 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:32:23.877 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:32:23.966 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:32:23.660 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:32:23.780 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:32:23.853 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:33:06.522 00:00:11.802 TCP 12.102.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:34:08.364 00:00:11.785 TCP 12.102.0.1:38248 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:35:10.194 00:00:11.804 TCP 12.102.0.1:34734 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:31:06.501 00:06:00.194 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:31:06.499 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 12:36:12.069 00:00:11.820 TCP 12.102.0.1:56688 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:37:23.947 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:37:23.786 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:37:23.715 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:37:23.902 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:37:23.762 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:37:23.832 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:37:23.810 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:37:13.927 00:00:11.816 TCP 12.102.0.1:52510 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:38:15.785 00:00:11.924 TCP 12.102.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:39:17.753 00:00:11.819 TCP 12.102.0.1:41244 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:40:19.603 00:00:11.772 TCP 12.102.0.1:32834 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:41:21.410 00:00:11.801 TCP 12.102.0.1:57306 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:42:23.895 00:00:00.027 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:42:23.944 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:42:24.301 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:42:24.038 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:42:24.372 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:42:24.482 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:42:24.349 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:42:23.254 00:00:11.801 TCP 12.102.0.1:47904 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:38:06.507 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 12:38:06.510 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:43:25.099 00:00:11.801 TCP 12.102.0.1:51228 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:44:26.942 00:00:11.805 TCP 12.102.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:45:28.782 00:00:11.811 TCP 12.102.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:46:30.638 00:00:11.783 TCP 12.102.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:47:24.008 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:47:23.880 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:47:24.131 00:00:00.039 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:47:24.160 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:47:24.085 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:47:24.030 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:47:24.166 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:47:32.453 00:00:11.759 TCP 12.102.0.1:55738 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:48:34.251 00:00:11.759 TCP 12.102.0.1:54568 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:49:36.072 00:00:11.808 TCP 12.102.0.1:39770 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:45:06.509 00:06:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:45:06.509 00:06:00.194 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 12:50:37.919 00:00:11.810 TCP 12.102.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:51:39.774 00:00:11.801 TCP 12.102.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:52:23.967 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:52:24.304 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:52:24.110 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:52:24.139 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:52:23.991 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:52:24.206 00:00:00.044 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:52:23.986 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:52:41.615 00:00:11.802 TCP 12.102.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:53:43.457 00:00:11.801 TCP 12.102.0.1:58982 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:54:45.303 00:00:11.801 TCP 12.102.0.1:39600 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:55:47.141 00:00:12.256 TCP 12.102.0.1:59354 -> 1.101.0.1:3000 15 1926 1 2025-11-14 12:56:49.436 00:00:11.824 TCP 12.102.0.1:51996 -> 1.101.0.1:3000 11 1507 1 2025-11-14 12:52:06.509 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-14 12:52:06.512 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 12:57:24.272 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-14 12:57:24.227 00:00:00.047 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 12:57:24.147 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-14 12:57:24.024 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-14 12:57:24.355 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-14 12:57:24.235 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-14 12:57:24.001 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-14 12:57:51.289 00:00:11.805 TCP 12.102.0.1:50954 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 268, avg pps: 0, avg bpp: 108 Time window: 2025-11-14 11:56:06 - 2025-11-14 12:58:06 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0047s User: 0.0019s Wall: 0.0024s flows/second: 65709.3 Runtime: 0.0025s