Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 15:54:07.128 00:06:00.283 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 15:59:12.861 00:00:11.824 TCP 12.102.0.1:37988 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:00:14.714 00:00:11.867 TCP 12.102.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:01:16.619 00:00:11.778 TCP 12.102.0.1:56722 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:02:18.456 00:00:11.821 TCP 12.102.0.1:57602 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:02:56.911 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:02:56.835 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:02:56.771 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:02:56.751 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:02:56.992 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:02:56.823 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:02:56.728 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:03:20.315 00:00:11.784 TCP 12.102.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:59:07.127 00:06:00.287 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 16:04:22.136 00:00:11.785 TCP 12.102.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:05:23.970 00:00:11.765 TCP 12.102.0.1:55674 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:01:07.129 00:06:00.282 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 16:06:25.775 00:00:11.800 TCP 12.102.0.1:50854 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:07:27.660 00:00:11.819 TCP 12.102.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:07:56.983 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:07:57.073 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:07:56.651 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:07:56.884 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:07:57.027 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:07:56.820 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:07:56.861 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:08:29.514 00:00:11.768 TCP 12.102.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:09:31.324 00:00:11.776 TCP 12.102.0.1:46714 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:10:33.139 00:00:11.814 TCP 12.102.0.1:37580 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:06:07.129 00:06:00.288 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 16:11:34.995 00:00:11.804 TCP 12.102.0.1:60822 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:12:36.842 00:00:11.859 TCP 12.102.0.1:45034 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:12:56.861 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:12:57.069 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:12:57.023 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:12:57.231 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:12:56.883 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:12:57.015 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:12:56.903 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:08:07.132 00:06:00.283 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 16:13:38.741 00:00:11.799 TCP 12.102.0.1:36718 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:14:40.580 00:00:11.810 TCP 12.102.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:15:42.425 00:00:11.801 TCP 12.102.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:16:44.266 00:00:11.772 TCP 12.102.0.1:35348 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:17:57.073 00:00:00.040 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:17:57.146 00:00:00.028 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:17:57.191 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:17:57.109 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:17:46.084 00:00:11.802 TCP 12.102.0.1:34110 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:17:57.128 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:17:57.164 00:00:00.012 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:17:57.050 00:00:00.041 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:13:07.133 00:06:00.285 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 16:18:47.925 00:00:11.782 TCP 12.102.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:19:49.746 00:00:11.802 TCP 12.102.0.1:57012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:15:07.138 00:06:00.278 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 16:20:51.587 00:00:12.347 TCP 12.102.0.1:42530 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:21:53.965 00:00:11.814 TCP 12.102.0.1:57348 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:22:57.291 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:22:57.009 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:22:57.388 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:22:57.332 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:22:57.313 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:22:57.500 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:22:57.084 00:00:00.047 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:22:55.815 00:00:11.802 TCP 12.102.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:23:57.653 00:00:11.878 TCP 12.102.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:20:07.136 00:06:00.283 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 16:24:59.564 00:00:11.802 TCP 12.102.0.1:41914 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:26:01.404 00:00:11.804 TCP 12.102.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:22:07.139 00:06:00.279 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 16:27:03.242 00:00:11.765 TCP 12.102.0.1:41496 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:27:57.561 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:27:57.687 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:27:57.659 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:27:57.536 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:27:57.788 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:27:57.528 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:27:57.513 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:28:05.069 00:00:11.802 TCP 12.102.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:29:06.910 00:00:11.824 TCP 12.102.0.1:53068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:30:08.767 00:00:11.757 TCP 12.102.0.1:47452 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:31:10.564 00:00:11.800 TCP 12.102.0.1:59340 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:27:07.139 00:06:00.282 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 16:32:12.400 00:00:11.806 TCP 12.102.0.1:38248 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:32:57.203 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:32:57.601 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:32:57.352 00:00:00.007 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:32:57.529 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:32:57.225 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:32:57.594 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:32:57.413 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:33:14.248 00:00:11.803 TCP 12.102.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:29:07.142 00:06:00.277 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 16:34:16.090 00:00:11.802 TCP 12.102.0.1:56876 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:35:17.933 00:00:11.815 TCP 12.102.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:36:19.782 00:00:12.007 TCP 12.102.0.1:43046 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:37:21.829 00:00:11.813 TCP 12.102.0.1:35114 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:37:57.589 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:37:57.632 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:37:57.614 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:37:57.583 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:37:57.610 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:37:57.365 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:37:57.561 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:38:23.682 00:00:11.800 TCP 12.102.0.1:49090 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:34:07.139 00:06:00.293 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 16:39:25.524 00:00:11.810 TCP 12.102.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:40:27.373 00:00:11.805 TCP 12.102.0.1:42568 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:36:07.142 00:06:00.288 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 16:41:29.217 00:00:12.230 TCP 12.102.0.1:36572 -> 1.101.0.1:3000 15 1926 1 2025-11-15 16:42:31.485 00:00:11.801 TCP 12.102.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:42:57.624 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:42:57.682 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:42:57.827 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:42:57.925 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:42:57.646 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:42:57.528 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:42:57.748 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:43:33.323 00:00:11.760 TCP 12.102.0.1:60658 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:44:35.120 00:00:11.807 TCP 12.102.0.1:42174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:45:36.960 00:00:11.807 TCP 12.102.0.1:38442 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:41:07.142 00:06:00.292 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 16:46:38.805 00:00:11.801 TCP 12.102.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:47:40.649 00:00:11.829 TCP 12.102.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:47:57.843 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:47:57.725 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:47:57.929 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:47:57.841 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:47:57.690 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:47:57.804 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:47:57.817 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:43:07.144 00:06:00.287 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 16:48:42.518 00:00:11.803 TCP 12.102.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:49:44.366 00:00:11.781 TCP 12.102.0.1:58514 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:50:46.187 00:00:11.802 TCP 12.102.0.1:58398 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:51:48.032 00:00:11.809 TCP 12.102.0.1:47806 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:52:57.754 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:52:57.744 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:52:57.995 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:52:57.739 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:52:57.777 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:52:57.919 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:52:57.716 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:52:49.881 00:00:11.811 TCP 12.102.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:48:07.144 00:06:00.292 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-15 16:53:51.729 00:00:11.763 TCP 12.102.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:54:53.531 00:00:11.804 TCP 12.102.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:50:07.148 00:06:00.287 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-15 16:55:55.377 00:00:12.570 TCP 12.102.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:56:57.984 00:00:11.806 TCP 12.102.0.1:48722 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:57:57.883 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-15 16:57:57.906 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-15 16:57:58.112 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-15 16:57:57.907 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-15 16:57:58.082 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-15 16:57:57.914 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:57:58.124 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-15 16:57:59.825 00:00:11.816 TCP 12.102.0.1:49390 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-11-15 15:54:07 - 2025-11-15 16:58:11 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0036s User: 0.0018s Wall: 0.0035s flows/second: 45559.1 Runtime: 0.0035s