Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 00:59:02.420 00:00:11.876 TCP 12.102.0.1:50274 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:00:04.334 00:00:11.848 TCP 12.102.0.1:47674 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:57:06.808 00:05:00.231 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:01:06.222 00:00:11.799 TCP 12.102.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:58:06.809 00:05:00.227 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:02:08.083 00:00:11.802 TCP 12.102.0.1:57918 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:02:38.887 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:02:38.955 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:02:38.879 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:02:38.910 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:02:38.924 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:02:38.979 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:02:39.071 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:03:09.925 00:00:11.821 TCP 12.102.0.1:45334 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:04:11.783 00:00:11.801 TCP 12.102.0.1:58682 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:05:13.622 00:00:11.800 TCP 12.102.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:06:15.461 00:00:12.236 TCP 12.102.0.1:33624 -> 1.101.0.1:3000 15 1926 1 2025-11-15 01:03:06.808 00:05:00.233 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:07:17.735 00:00:11.814 TCP 12.102.0.1:56362 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:07:38.741 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:07:38.764 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:07:39.075 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:07:39.065 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:07:38.981 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:07:38.990 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:07:39.110 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:04:06.811 00:05:00.227 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:08:19.589 00:00:11.810 TCP 12.102.0.1:50588 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:09:21.438 00:00:11.822 TCP 12.102.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:10:23.300 00:00:11.797 TCP 12.102.0.1:58472 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:11:25.138 00:00:11.809 TCP 12.102.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:12:26.988 00:00:11.808 TCP 12.102.0.1:46428 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:12:38.968 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:12:38.730 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:12:38.982 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:12:39.083 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:12:39.042 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:12:39.213 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:12:39.020 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:09:06.811 00:05:00.230 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:13:28.840 00:00:11.809 TCP 12.102.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:10:06.813 00:05:00.226 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:14:30.691 00:00:11.809 TCP 12.102.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:15:32.542 00:00:11.761 TCP 12.102.0.1:59892 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:16:34.344 00:00:11.804 TCP 12.102.0.1:60364 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:17:38.966 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:17:38.939 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:17:38.818 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:17:39.135 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:17:39.072 00:00:00.041 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:17:39.141 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:17:39.048 00:00:00.041 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:17:36.199 00:00:11.799 TCP 12.102.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:18:38.057 00:00:11.802 TCP 12.102.0.1:46356 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:15:06.811 00:05:00.231 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:19:39.894 00:00:11.818 TCP 12.102.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:16:06.815 00:05:00.224 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:20:41.741 00:00:11.853 TCP 12.102.0.1:59832 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:21:43.634 00:00:12.234 TCP 12.102.0.1:60560 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:22:39.101 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:22:39.056 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.325 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.365 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.124 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.272 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.118 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:22:45.908 00:00:11.758 TCP 12.102.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:23:47.702 00:00:11.798 TCP 12.102.0.1:59768 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:24:49.546 00:00:11.801 TCP 12.102.0.1:38748 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:21:06.814 00:05:00.228 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:22:06.818 00:05:00.223 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:25:51.384 00:00:14.316 TCP 12.102.0.1:60470 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:26:55.755 00:00:11.828 TCP 12.102.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:27:39.620 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:27:39.682 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.712 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.761 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.643 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.514 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.588 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:27:57.628 00:00:11.803 TCP 12.102.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:28:59.474 00:00:11.810 TCP 12.102.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:30:01.333 00:00:11.757 TCP 12.102.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:27:06.815 00:05:00.233 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:31:03.133 00:00:11.760 TCP 12.102.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:28:06.818 00:05:00.229 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:32:04.933 00:00:11.821 TCP 12.102.0.1:38876 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:32:39.983 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:32:39.905 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:32:39.292 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:32:39.923 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:32:40.007 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:32:39.476 00:00:00.037 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:32:39.240 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:33:06.790 00:00:11.825 TCP 12.102.0.1:57484 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:34:08.649 00:00:11.812 TCP 12.102.0.1:43842 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:35:10.500 00:00:11.802 TCP 12.102.0.1:55538 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:36:12.343 00:00:11.815 TCP 12.102.0.1:59108 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:33:06.820 00:05:00.231 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:37:14.200 00:00:11.806 TCP 12.102.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:37:39.660 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.411 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.592 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.193 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.532 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.297 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.170 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:34:06.822 00:05:00.225 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:38:16.054 00:00:11.801 TCP 12.102.0.1:41474 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:39:17.898 00:00:11.799 TCP 12.102.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:40:19.736 00:00:11.814 TCP 12.102.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:41:21.586 00:00:12.235 TCP 12.102.0.1:37128 -> 1.101.0.1:3000 15 1926 1 2025-11-15 01:42:23.862 00:00:11.808 TCP 12.102.0.1:47086 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:42:39.571 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.504 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.674 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.473 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.390 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.367 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.451 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:39:06.820 00:05:00.231 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:43:25.699 00:00:11.809 TCP 12.102.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:40:06.823 00:05:00.226 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:44:27.547 00:00:11.802 TCP 12.102.0.1:59240 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:45:29.388 00:00:11.808 TCP 12.102.0.1:36436 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:46:31.232 00:00:11.806 TCP 12.102.0.1:44960 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:47:39.941 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:47:40.139 00:00:00.039 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:47:40.023 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:47:39.806 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:47:39.964 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:47:40.080 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:47:40.096 00:00:00.044 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:47:33.085 00:00:11.761 TCP 12.102.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:48:34.887 00:00:11.755 TCP 12.102.0.1:43794 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:45:06.824 00:05:00.228 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:49:36.683 00:00:11.802 TCP 12.102.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:46:06.830 00:05:00.220 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:50:38.525 00:00:11.801 TCP 12.102.0.1:59930 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:51:40.374 00:00:11.816 TCP 12.102.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:52:39.931 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:52:39.795 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:52:40.128 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:52:39.953 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:52:40.002 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:52:39.891 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:52:39.816 00:00:00.028 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:52:42.232 00:00:11.818 TCP 12.102.0.1:35594 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:53:44.089 00:00:11.833 TCP 12.102.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:54:45.960 00:00:11.813 TCP 12.102.0.1:46622 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:51:06.829 00:05:00.224 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-15 01:55:47.808 00:00:11.772 TCP 12.102.0.1:45246 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:52:06.832 00:05:00.219 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-15 01:56:49.619 00:00:11.807 TCP 12.102.0.1:48660 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:57:39.861 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 01:57:40.035 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 01:57:40.075 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:57:39.929 00:00:00.014 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 01:57:39.883 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 01:57:39.728 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 01:57:39.881 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 01:57:51.467 00:00:11.818 TCP 12.102.0.1:33306 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124172, total packets: 1138, avg bps: 271, avg pps: 0, avg bpp: 109 Time window: 2025-11-15 00:57:06 - 2025-11-15 01:58:03 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0052s User: 0.0010s Wall: 0.0021s flows/second: 76089.3 Runtime: 0.0021s