Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 15:59:21.415 00:00:11.804 TCP 12.102.0.1:42636 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:00:23.269 00:00:11.819 TCP 12.102.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:57:07.558 00:05:00.506 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:01:25.123 00:00:11.796 TCP 12.102.0.1:36948 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:02:26.960 00:00:11.803 TCP 12.102.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:03:26.028 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:03:26.207 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:03:25.643 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:03:26.059 00:00:00.040 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:03:26.192 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:03:26.073 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:03:26.036 00:00:00.040 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:03:28.798 00:00:11.765 TCP 12.102.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:00:07.555 00:05:00.511 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:04:30.599 00:00:11.858 TCP 12.102.0.1:39854 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:05:32.502 00:00:11.808 TCP 12.102.0.1:53716 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:06:34.361 00:00:11.788 TCP 12.102.0.1:39394 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:03:07.558 00:05:00.509 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:07:36.194 00:00:11.815 TCP 12.102.0.1:49378 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:08:25.819 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:08:25.878 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:08:25.664 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:08:25.911 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:08:25.841 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:08:26.077 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:08:25.860 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:08:38.106 00:00:11.804 TCP 12.102.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:09:39.948 00:00:11.811 TCP 12.102.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:06:07.556 00:05:00.538 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:10:41.797 00:00:11.809 TCP 12.102.0.1:35658 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:11:43.642 00:00:11.804 TCP 12.102.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:12:45.483 00:00:11.804 TCP 12.102.0.1:40788 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:09:07.560 00:05:00.531 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:13:25.922 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:13:25.947 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:13:25.947 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:13:25.881 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:13:25.944 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:13:25.901 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:13:25.910 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:13:47.324 00:00:11.801 TCP 12.102.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:14:49.163 00:00:11.804 TCP 12.102.0.1:34012 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:15:51.005 00:00:11.796 TCP 12.102.0.1:42042 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:12:07.558 00:05:00.544 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:16:52.848 00:00:12.233 TCP 12.102.0.1:51788 -> 1.101.0.1:3000 15 1926 1 2025-11-16 16:17:55.124 00:00:11.811 TCP 12.102.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:18:26.208 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:18:26.045 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:18:26.294 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:18:26.158 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:18:26.039 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:18:26.170 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:18:26.135 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:18:56.964 00:00:11.854 TCP 12.102.0.1:54694 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:15:07.562 00:05:00.539 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:19:58.861 00:00:11.799 TCP 12.102.0.1:42896 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:21:00.698 00:00:11.800 TCP 12.102.0.1:49252 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:18:07.560 00:05:00.543 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:22:02.536 00:00:11.850 TCP 12.102.0.1:49030 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:23:04.427 00:00:11.761 TCP 12.102.0.1:34858 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:23:26.370 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:23:26.519 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:23:26.546 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:23:26.431 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:23:26.471 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:23:26.541 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:23:26.409 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:24:06.221 00:00:11.806 TCP 12.102.0.1:39982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:21:07.564 00:05:00.537 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:25:08.074 00:00:11.818 TCP 12.102.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:26:09.931 00:00:11.816 TCP 12.102.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:27:11.788 00:00:11.798 TCP 12.102.0.1:43580 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:24:07.561 00:05:00.544 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:28:26.155 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:28:26.191 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:28:26.039 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:28:26.327 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:28:26.177 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:28:26.285 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:28:13.626 00:00:11.799 TCP 12.102.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:28:26.138 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:29:15.466 00:00:11.797 TCP 12.102.0.1:40032 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:30:17.301 00:00:11.801 TCP 12.102.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:27:07.564 00:05:00.541 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:31:19.141 00:00:11.813 TCP 12.102.0.1:58844 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:32:20.988 00:00:12.134 TCP 12.102.0.1:57608 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:33:26.315 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:33:26.393 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:33:26.335 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:33:26.322 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:33:26.418 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:33:26.327 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:33:26.299 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:33:23.167 00:00:11.758 TCP 12.102.0.1:38766 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:30:07.562 00:05:00.546 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:34:24.964 00:00:11.758 TCP 12.102.0.1:57456 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:35:26.761 00:00:11.797 TCP 12.102.0.1:43140 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:36:28.599 00:00:12.065 TCP 12.102.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:33:07.565 00:05:00.540 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:37:30.705 00:00:11.797 TCP 12.102.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:38:26.342 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:38:26.371 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:38:26.714 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:38:26.606 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:38:26.365 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:38:26.610 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:38:26.374 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:38:32.544 00:00:11.801 TCP 12.102.0.1:54992 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:39:34.383 00:00:11.811 TCP 12.102.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:36:07.563 00:05:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:40:36.233 00:00:11.760 TCP 12.102.0.1:37250 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:41:38.045 00:00:11.799 TCP 12.102.0.1:57056 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:42:39.882 00:00:11.806 TCP 12.102.0.1:53010 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:39:07.566 00:05:00.540 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:43:26.639 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:43:26.511 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:43:26.208 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:43:26.374 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:43:26.509 00:00:00.016 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:43:26.373 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:43:26.352 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:43:41.729 00:00:11.804 TCP 12.102.0.1:56990 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:44:43.572 00:00:11.758 TCP 12.102.0.1:48768 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:45:45.369 00:00:11.782 TCP 12.102.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:42:07.563 00:05:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:46:47.189 00:00:11.758 TCP 12.102.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:47:48.981 00:00:11.761 TCP 12.102.0.1:43860 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:48:26.534 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:48:26.762 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:48:26.787 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:48:26.553 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:48:26.556 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:48:26.602 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:48:26.508 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:48:50.778 00:00:11.808 TCP 12.102.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:45:07.568 00:05:00.538 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:49:52.626 00:00:11.802 TCP 12.102.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:50:54.468 00:00:11.798 TCP 12.102.0.1:51574 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:51:56.305 00:00:11.762 TCP 12.102.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:48:07.566 00:05:00.544 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:52:58.104 00:00:11.803 TCP 12.102.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:53:26.714 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:53:26.654 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:53:26.855 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:53:26.570 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:53:26.586 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:53:26.745 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:53:26.632 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-16 16:53:59.944 00:00:11.812 TCP 12.102.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:55:01.804 00:00:11.799 TCP 12.102.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:51:07.568 00:05:00.539 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-16 16:56:03.639 00:00:11.762 TCP 12.102.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:57:05.434 00:00:11.811 TCP 12.102.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:54:07.566 00:05:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-16 16:58:07.286 00:00:11.895 TCP 12.102.0.1:57354 -> 1.101.0.1:3000 11 1507 1 2025-11-16 16:58:26.972 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-16 16:58:27.207 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 16:58:27.287 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-16 16:58:27.268 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-16 16:58:27.083 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-16 16:58:26.938 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-16 16:58:27.246 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 123753, total packets: 1134, avg bps: 266, avg pps: 0, avg bpp: 109 Time window: 2025-11-16 15:57:07 - 2025-11-16 16:59:08 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0053s User: 0.0008s Wall: 0.0019s flows/second: 84291.9 Runtime: 0.0019s