Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 09:59:16.652 00:00:11.828 TCP 12.102.0.1:36056 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:00:13.804 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 09:55:09.357 00:06:00.554 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:00:13.828 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:00:13.744 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:00:13.827 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:00:13.826 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:00:13.856 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:00:13.909 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:00:18.518 00:00:12.008 TCP 12.102.0.1:33858 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:01:20.564 00:00:11.800 TCP 12.102.0.1:35060 -> 1.101.0.1:3000 11 1507 1 2025-11-20 09:57:09.355 00:06:00.558 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:02:22.405 00:00:11.808 TCP 12.102.0.1:42820 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:03:24.251 00:00:11.782 TCP 12.102.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:04:26.082 00:00:11.799 TCP 12.102.0.1:40808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:05:13.885 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:05:14.030 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:05:14.173 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:05:14.075 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:05:14.052 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:05:14.085 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:05:14.049 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:05:27.916 00:00:11.823 TCP 12.102.0.1:32892 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:06:29.776 00:00:11.765 TCP 12.102.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:02:09.360 00:06:00.553 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:07:31.583 00:00:11.801 TCP 12.102.0.1:34990 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:08:33.422 00:00:11.806 TCP 12.102.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:04:09.361 00:06:00.558 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:09:35.271 00:00:11.809 TCP 12.102.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:10:13.962 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:10:14.201 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:10:14.084 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:10:14.083 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:10:14.201 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:10:14.049 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:10:14.179 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:10:37.117 00:00:11.802 TCP 12.102.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:11:38.954 00:00:11.763 TCP 12.102.0.1:36782 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:12:40.754 00:00:11.856 TCP 12.102.0.1:58388 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:13:42.648 00:00:11.770 TCP 12.102.0.1:36784 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:09:09.365 00:06:00.550 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:14:44.456 00:00:11.805 TCP 12.102.0.1:54520 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:15:14.323 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:15:14.202 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:15:14.409 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:15:14.238 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:15:14.036 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:15:14.022 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:15:14.216 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:15:46.312 00:00:11.804 TCP 12.102.0.1:49818 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:11:09.362 00:06:00.557 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:16:48.158 00:00:11.820 TCP 12.102.0.1:53588 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:17:50.009 00:00:12.042 TCP 12.102.0.1:46126 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:18:52.087 00:00:11.806 TCP 12.102.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:19:53.931 00:00:11.815 TCP 12.102.0.1:45762 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:20:14.473 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:20:14.680 00:00:00.015 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:20:14.680 00:00:00.018 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:20:14.649 00:00:00.031 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:20:14.565 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:20:14.622 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:20:14.541 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:20:55.787 00:00:11.800 TCP 12.102.0.1:52334 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:16:09.366 00:06:00.551 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:21:57.629 00:00:11.802 TCP 12.102.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:18:09.363 00:06:00.557 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:22:59.467 00:00:11.801 TCP 12.102.0.1:53810 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:24:01.303 00:00:11.802 TCP 12.102.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:25:14.583 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:25:14.517 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:25:14.601 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:25:14.778 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:25:14.550 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:25:03.145 00:00:11.805 TCP 12.102.0.1:47364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:25:14.568 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:25:14.578 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:26:04.992 00:00:12.959 TCP 12.102.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:27:07.987 00:00:11.797 TCP 12.102.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:23:09.367 00:06:00.552 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:28:09.823 00:00:11.795 TCP 12.102.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:29:11.656 00:00:11.805 TCP 12.102.0.1:46240 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:25:09.365 00:06:00.556 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:30:14.343 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:30:14.436 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:30:14.637 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:30:14.367 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:30:14.415 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:30:14.693 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:30:14.668 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:30:13.502 00:00:11.769 TCP 12.102.0.1:40426 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:31:15.312 00:00:11.797 TCP 12.102.0.1:56836 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:32:17.148 00:00:11.777 TCP 12.102.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:33:18.960 00:00:11.819 TCP 12.102.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:34:20.812 00:00:11.796 TCP 12.102.0.1:33932 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:30:09.367 00:06:00.552 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:35:14.456 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:35:14.722 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:35:14.478 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:35:14.784 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:35:14.661 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:35:14.778 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:35:14.676 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:35:22.647 00:00:11.822 TCP 12.102.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:36:24.511 00:00:11.818 TCP 12.102.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:32:09.364 00:06:00.557 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:37:26.368 00:00:11.809 TCP 12.102.0.1:60626 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:38:28.215 00:00:11.806 TCP 12.102.0.1:44244 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:39:30.076 00:00:11.811 TCP 12.102.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:40:14.762 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:40:14.744 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:40:14.804 00:00:00.028 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:40:14.738 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:40:14.925 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:40:14.672 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:40:14.716 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:40:31.921 00:00:11.824 TCP 12.102.0.1:57090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:41:33.787 00:00:11.806 TCP 12.102.0.1:60530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:37:09.369 00:06:00.552 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:42:35.631 00:00:11.803 TCP 12.102.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:43:37.468 00:00:11.801 TCP 12.102.0.1:38844 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:39:09.368 00:06:00.556 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:44:39.303 00:00:11.900 TCP 12.102.0.1:47306 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:45:14.786 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:45:14.835 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:45:14.595 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:45:14.931 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:45:14.809 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:45:14.774 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:45:14.741 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:45:41.242 00:00:11.801 TCP 12.102.0.1:60758 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:46:43.081 00:00:11.759 TCP 12.102.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:47:44.882 00:00:11.804 TCP 12.102.0.1:59340 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:48:46.722 00:00:11.802 TCP 12.102.0.1:56106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:44:09.373 00:06:00.549 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:49:48.558 00:00:11.760 TCP 12.102.0.1:53748 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:50:14.851 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:50:14.920 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:50:15.038 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:50:14.957 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:50:15.058 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:50:15.047 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:50:14.934 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:50:50.359 00:00:11.776 TCP 12.102.0.1:48876 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:46:09.371 00:06:00.554 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:51:52.173 00:00:11.805 TCP 12.102.0.1:55208 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:52:54.012 00:00:11.810 TCP 12.102.0.1:40340 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:53:55.851 00:00:11.761 TCP 12.102.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:54:57.655 00:00:11.814 TCP 12.102.0.1:49206 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:55:15.060 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 10:55:15.119 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 10:55:15.230 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 10:55:15.031 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 10:55:14.988 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 10:55:15.128 00:00:00.045 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 10:55:15.207 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 10:55:59.507 00:00:11.811 TCP 12.102.0.1:56794 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:51:09.375 00:06:00.549 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 10:57:01.361 00:00:11.783 TCP 12.102.0.1:55222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:53:09.372 00:06:00.555 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 10:58:03.181 00:00:12.198 TCP 12.102.0.1:44452 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 160, total bytes: 124491, total packets: 1146, avg bps: 259, avg pps: 0, avg bpp: 108 Time window: 2025-11-20 09:55:09 - 2025-11-20 10:59:09 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0043s User: 0.0021s Wall: 0.0020s flows/second: 79682.8 Runtime: 0.0020s