Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 23:59:12.520 00:00:11.809 TCP 12.102.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:00:14.374 00:00:11.805 TCP 12.102.0.1:46858 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:01:16.214 00:00:11.815 TCP 12.102.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-11-14 23:57:06.793 00:06:00.194 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-14 23:57:06.791 00:06:00.199 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 00:02:18.081 00:00:11.800 TCP 12.102.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:02:37.617 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:02:37.624 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:02:37.636 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:02:37.545 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:02:37.638 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:02:37.724 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:02:37.654 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:03:19.920 00:00:11.782 TCP 12.102.0.1:41892 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:04:21.740 00:00:11.799 TCP 12.102.0.1:52466 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:05:23.579 00:00:11.802 TCP 12.102.0.1:34558 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:06:25.425 00:00:13.422 TCP 12.102.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:07:37.672 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:07:37.765 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:07:37.691 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:07:37.434 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:07:37.760 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:07:37.700 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:07:37.411 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:07:28.888 00:00:12.015 TCP 12.102.0.1:46858 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:08:30.939 00:00:12.290 TCP 12.102.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:04:06.795 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 00:04:06.793 00:06:00.199 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 00:09:33.266 00:00:11.834 TCP 12.102.0.1:35680 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:10:35.140 00:00:12.243 TCP 12.102.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:11:37.421 00:00:11.806 TCP 12.102.0.1:34174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:12:37.916 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:12:37.920 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:12:37.903 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:12:37.593 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:12:37.922 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:12:37.843 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:12:37.571 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:12:39.262 00:00:11.804 TCP 12.102.0.1:47270 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:13:41.105 00:00:11.799 TCP 12.102.0.1:33098 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:14:42.937 00:00:11.811 TCP 12.102.0.1:49664 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:15:44.787 00:00:11.814 TCP 12.102.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:11:06.798 00:06:00.199 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 00:11:06.794 00:06:00.206 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 00:16:46.639 00:00:11.826 TCP 12.102.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:17:38.051 00:00:00.048 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:17:38.031 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:17:38.064 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:17:37.891 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:17:38.074 00:00:00.048 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:17:38.137 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:17:38.011 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:17:48.507 00:00:11.807 TCP 12.102.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:18:50.346 00:00:11.821 TCP 12.102.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:19:52.207 00:00:11.760 TCP 12.102.0.1:40304 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:20:54.004 00:00:11.798 TCP 12.102.0.1:33410 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:21:55.837 00:00:11.828 TCP 12.102.0.1:45084 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:22:37.918 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:22:37.778 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:22:37.778 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:22:38.117 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:22:37.941 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:22:38.060 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:22:38.013 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:18:06.798 00:06:00.193 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 00:18:06.796 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 00:22:57.699 00:00:11.809 TCP 12.102.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:23:59.545 00:00:11.800 TCP 12.102.0.1:35396 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:25:01.386 00:00:11.803 TCP 12.102.0.1:50220 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:26:03.230 00:00:11.803 TCP 12.102.0.1:47104 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:27:05.076 00:00:11.806 TCP 12.102.0.1:55408 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:27:38.083 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:27:38.081 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:27:37.847 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:27:38.317 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:27:38.051 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:27:37.843 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:27:37.824 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:28:06.915 00:00:11.822 TCP 12.102.0.1:46554 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:29:08.777 00:00:11.799 TCP 12.102.0.1:59132 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:25:06.798 00:06:00.198 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 00:25:06.801 00:06:00.192 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 00:30:10.618 00:00:11.978 TCP 12.102.0.1:48998 -> 1.101.0.1:3000 13 1611 1 2025-11-15 00:31:12.636 00:00:11.759 TCP 12.102.0.1:42930 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:32:14.434 00:00:11.801 TCP 12.102.0.1:49792 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:32:38.408 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:32:38.326 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:32:38.433 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:32:37.850 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:32:38.398 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:32:38.274 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:32:37.829 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:33:16.274 00:00:11.798 TCP 12.102.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:34:18.111 00:00:11.761 TCP 12.102.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:35:19.905 00:00:11.815 TCP 12.102.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:36:21.802 00:00:11.800 TCP 12.102.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:32:06.798 00:06:00.200 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 00:32:06.801 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 00:37:38.573 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:37:38.569 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:37:38.596 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:37:23.640 00:00:11.803 TCP 12.102.0.1:36296 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:37:38.469 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:37:38.313 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:37:38.455 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:37:38.446 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:38:25.479 00:00:11.809 TCP 12.102.0.1:37882 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:39:27.331 00:00:11.765 TCP 12.102.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:40:29.135 00:00:11.819 TCP 12.102.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:41:30.994 00:00:11.804 TCP 12.102.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:42:38.280 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:42:38.376 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:42:38.403 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:42:38.304 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:42:38.326 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:42:38.193 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:42:38.286 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:42:32.830 00:00:11.774 TCP 12.102.0.1:59958 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:39:06.800 00:05:00.201 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 00:43:34.646 00:00:11.811 TCP 12.102.0.1:50886 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:39:06.802 00:06:00.195 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 00:44:36.497 00:00:11.815 TCP 12.102.0.1:45468 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:45:38.351 00:00:11.830 TCP 12.102.0.1:33266 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:46:40.224 00:00:11.808 TCP 12.102.0.1:59054 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:47:38.387 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:47:38.576 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:47:38.461 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:47:38.497 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:47:38.410 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:47:38.542 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:47:38.416 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:47:42.079 00:00:11.801 TCP 12.102.0.1:38652 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:48:43.927 00:00:11.818 TCP 12.102.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:45:06.800 00:05:00.204 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 00:49:45.782 00:00:11.794 TCP 12.102.0.1:35982 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:46:06.803 00:05:00.211 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 00:50:47.616 00:00:11.816 TCP 12.102.0.1:42112 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:51:49.472 00:00:11.826 TCP 12.102.0.1:52336 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:52:39.080 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:52:39.587 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:52:39.276 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:52:39.315 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:52:39.056 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:52:39.215 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:52:39.254 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:52:51.340 00:00:11.822 TCP 12.102.0.1:51824 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:53:53.201 00:00:11.808 TCP 12.102.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:51:06.804 00:05:00.230 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 00:54:55.077 00:00:11.776 TCP 12.102.0.1:52408 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:55:56.889 00:00:11.807 TCP 12.102.0.1:35270 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:52:06.808 00:05:00.223 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 00:56:58.734 00:00:11.810 TCP 12.102.0.1:49442 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:57:38.745 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 00:57:38.769 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 00:57:38.891 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 00:57:38.612 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 00:57:38.786 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 00:57:38.714 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:57:39.020 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 00:58:00.581 00:00:11.803 TCP 12.102.0.1:51002 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 123561, total packets: 1134, avg bps: 269, avg pps: 0, avg bpp: 108 Time window: 2025-11-14 23:57:06 - 2025-11-15 00:58:12 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0045s User: 0.0009s Wall: 0.0030s flows/second: 54220.6 Runtime: 0.0030s