Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 08:54:09.338 00:06:00.562 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 08:59:25.913 00:00:12.076 TCP 12.102.0.1:50564 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:00:12.601 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:00:12.636 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:00:12.757 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:00:12.678 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:00:12.624 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:00:12.770 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:00:12.714 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:00:28.035 00:00:11.810 TCP 12.102.0.1:39142 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:01:29.891 00:00:11.802 TCP 12.102.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:02:31.730 00:00:12.264 TCP 12.102.0.1:46710 -> 1.101.0.1:3000 15 1926 1 2025-11-20 09:03:34.059 00:00:11.797 TCP 12.102.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:59:09.343 00:06:00.556 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 09:04:35.904 00:00:11.801 TCP 12.102.0.1:42766 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:05:13.030 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:05:12.969 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:05:12.980 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:05:12.881 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:05:13.052 00:00:00.031 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:05:12.680 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:05:12.876 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:05:37.745 00:00:11.763 TCP 12.102.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:01:09.340 00:06:00.559 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 09:06:39.550 00:00:11.803 TCP 12.102.0.1:43000 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:07:41.420 00:00:11.843 TCP 12.102.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:08:43.303 00:00:11.819 TCP 12.102.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:09:45.161 00:00:11.830 TCP 12.102.0.1:44370 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:10:13.060 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:10:13.010 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:10:13.076 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:10:12.826 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:10:12.858 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:10:12.973 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:10:12.803 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:10:47.038 00:00:11.810 TCP 12.102.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:06:09.345 00:06:00.553 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 09:11:48.889 00:00:11.799 TCP 12.102.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:12:50.730 00:00:11.798 TCP 12.102.0.1:57932 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:08:09.343 00:06:00.560 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 09:13:52.567 00:00:12.091 TCP 12.102.0.1:56666 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:15:12.917 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:14:54.693 00:00:11.806 TCP 12.102.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:15:12.943 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:15:13.141 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:15:13.068 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:15:12.940 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:15:13.162 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:15:13.162 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:15:56.538 00:00:11.799 TCP 12.102.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:16:58.376 00:00:11.816 TCP 12.102.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:18:00.229 00:00:12.227 TCP 12.102.0.1:38746 -> 1.101.0.1:3000 15 1926 1 2025-11-20 09:13:09.346 00:06:00.556 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 09:19:02.492 00:00:11.805 TCP 12.102.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:20:13.169 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:15:09.343 00:06:00.561 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 09:20:13.234 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:20:13.027 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:20:13.136 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:20:13.192 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:20:13.199 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:20:13.295 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:20:04.338 00:00:11.806 TCP 12.102.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:21:06.182 00:00:11.807 TCP 12.102.0.1:50620 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:22:08.034 00:00:11.809 TCP 12.102.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:23:09.885 00:00:11.800 TCP 12.102.0.1:47364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:24:11.721 00:00:11.814 TCP 12.102.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:25:13.190 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:20:09.348 00:06:00.556 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 09:25:13.304 00:00:00.012 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:25:13.348 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:25:13.133 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:25:13.214 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:25:13.404 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:25:13.219 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:25:13.575 00:00:11.800 TCP 12.102.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:26:15.412 00:00:11.800 TCP 12.102.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:22:09.346 00:06:00.561 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 09:27:17.256 00:00:13.525 TCP 12.102.0.1:42310 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:28:20.843 00:00:11.768 TCP 12.102.0.1:43052 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:29:22.659 00:00:11.815 TCP 12.102.0.1:36390 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:30:13.391 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:30:13.418 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:30:13.334 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:30:13.183 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:30:13.354 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:30:13.369 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:30:13.161 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:30:24.516 00:00:11.802 TCP 12.102.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:31:26.362 00:00:11.811 TCP 12.102.0.1:40414 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:27:09.348 00:06:00.556 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 09:32:28.212 00:00:11.801 TCP 12.102.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:33:30.080 00:00:11.803 TCP 12.102.0.1:42054 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:29:09.346 00:06:00.562 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 09:34:31.927 00:00:11.816 TCP 12.102.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:35:13.453 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:35:13.332 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:35:13.429 00:00:00.034 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:35:13.470 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:35:13.472 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:35:13.347 00:00:00.016 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:35:13.324 00:00:00.016 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:35:33.793 00:00:11.770 TCP 12.102.0.1:56466 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:36:35.606 00:00:11.819 TCP 12.102.0.1:55666 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:37:37.464 00:00:11.817 TCP 12.102.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:38:39.325 00:00:11.799 TCP 12.102.0.1:42828 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:34:09.349 00:06:00.557 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 09:39:41.162 00:00:11.803 TCP 12.102.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:40:13.585 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:40:13.703 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:40:13.685 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:40:13.552 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:40:13.684 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:40:13.479 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:40:13.529 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:40:43.004 00:00:11.807 TCP 12.102.0.1:36304 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:36:09.347 00:06:00.562 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 09:41:44.850 00:00:11.801 TCP 12.102.0.1:43854 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:42:46.684 00:00:11.814 TCP 12.102.0.1:41834 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:43:48.539 00:00:11.802 TCP 12.102.0.1:56738 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:44:50.381 00:00:11.807 TCP 12.102.0.1:38124 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:45:13.791 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:45:13.930 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:45:13.642 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:45:13.630 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:45:13.768 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:45:13.603 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:45:13.608 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:45:52.226 00:00:11.804 TCP 12.102.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:41:09.351 00:06:00.556 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 09:46:54.079 00:00:11.797 TCP 12.102.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:47:55.917 00:00:11.779 TCP 12.102.0.1:52778 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:43:09.348 00:06:00.562 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 09:48:57.736 00:00:11.798 TCP 12.102.0.1:56628 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:49:59.570 00:00:11.802 TCP 12.102.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:50:13.845 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:50:13.892 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:50:13.876 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:50:13.808 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:50:13.942 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:50:13.694 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:50:13.786 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:51:01.415 00:00:11.802 TCP 12.102.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:52:03.252 00:00:11.801 TCP 12.102.0.1:51768 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:48:09.352 00:06:00.556 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 09:53:05.089 00:00:11.852 TCP 12.102.0.1:39722 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:54:06.980 00:00:11.804 TCP 12.102.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:50:09.350 00:06:00.561 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 09:55:13.895 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 09:55:13.695 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 09:55:13.941 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 09:55:13.860 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 09:55:13.915 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 09:55:13.781 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 09:55:13.838 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:55:08.822 00:00:11.758 TCP 12.102.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:56:10.620 00:00:11.764 TCP 12.102.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:57:12.423 00:00:12.388 TCP 12.102.0.1:46606 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:58:14.848 00:00:11.767 TCP 12.102.0.1:50554 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 257, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 08:54:09 - 2025-11-20 09:58:26 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0056s User: 0.0008s Wall: 0.0037s flows/second: 42490.9 Runtime: 0.0038s