Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 11:58:59.593 00:00:11.823 TCP 12.102.0.1:33870 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:54:09.401 00:06:00.538 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:00:01.452 00:00:11.810 TCP 12.102.0.1:56630 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:00:18.141 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:00:17.952 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.109 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:00:17.861 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.177 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.053 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:00:17.838 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:56:09.398 00:06:00.544 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:01:03.300 00:00:11.802 TCP 12.102.0.1:35814 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:02:05.139 00:00:11.774 TCP 12.102.0.1:35698 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:03:06.955 00:00:11.799 TCP 12.102.0.1:33892 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:04:08.797 00:00:11.756 TCP 12.102.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:05:18.127 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:05:17.979 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.170 00:00:00.037 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.257 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.163 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.208 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.235 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:05:10.590 00:00:11.806 TCP 12.102.0.1:59634 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:01:09.404 00:06:00.537 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:06:12.437 00:00:11.807 TCP 12.102.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:07:14.280 00:00:11.871 TCP 12.102.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:03:09.402 00:06:00.542 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:08:16.191 00:00:11.801 TCP 12.102.0.1:40146 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:09:18.042 00:00:11.797 TCP 12.102.0.1:42470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:10:18.137 00:00:00.043 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.340 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.269 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.022 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.256 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.225 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:10:17.998 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:10:19.876 00:00:11.763 TCP 12.102.0.1:40456 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:11:21.685 00:00:12.431 TCP 12.102.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:12:24.151 00:00:12.291 TCP 12.102.0.1:34520 -> 1.101.0.1:3000 15 1926 1 2025-11-20 12:08:09.405 00:06:00.537 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:13:26.482 00:00:11.801 TCP 12.102.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:14:28.324 00:00:11.815 TCP 12.102.0.1:44226 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:10:09.404 00:06:00.541 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:15:18.427 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:15:18.450 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.308 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.365 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.554 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.660 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.520 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:15:30.175 00:00:11.799 TCP 12.102.0.1:39326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:16:32.023 00:00:11.759 TCP 12.102.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:17:33.818 00:00:11.805 TCP 12.102.0.1:36514 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:18:35.663 00:00:11.806 TCP 12.102.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:19:37.514 00:00:11.797 TCP 12.102.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:15:09.407 00:06:00.538 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:20:18.304 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.447 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.461 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.625 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.201 00:00:00.043 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.401 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.602 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:20:39.353 00:00:11.815 TCP 12.102.0.1:54850 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:21:41.205 00:00:11.803 TCP 12.102.0.1:55762 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:17:09.406 00:06:00.542 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:22:43.074 00:00:11.854 TCP 12.102.0.1:45884 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:23:44.968 00:00:11.756 TCP 12.102.0.1:41964 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:24:46.761 00:00:11.802 TCP 12.102.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:25:18.526 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.618 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.736 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.513 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.720 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.500 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.491 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:25:48.599 00:00:11.805 TCP 12.102.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:26:50.444 00:00:11.809 TCP 12.102.0.1:49152 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:22:09.409 00:06:00.538 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:27:52.291 00:00:11.803 TCP 12.102.0.1:38246 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:28:54.129 00:00:11.871 TCP 12.102.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:24:09.406 00:06:00.543 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:29:56.066 00:00:11.799 TCP 12.102.0.1:54694 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:30:18.655 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.941 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.635 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.543 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.532 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.743 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.612 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:30:57.909 00:00:11.825 TCP 12.102.0.1:41392 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:31:59.773 00:00:11.807 TCP 12.102.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:33:01.618 00:00:11.801 TCP 12.102.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:29:09.409 00:06:00.538 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:34:03.462 00:00:11.805 TCP 12.102.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:35:18.777 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:35:05.307 00:00:11.810 TCP 12.102.0.1:50788 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:35:18.971 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.845 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.787 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.904 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.823 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:35:19.017 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:31:09.408 00:06:00.543 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:36:07.157 00:00:11.766 TCP 12.102.0.1:40786 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:37:08.965 00:00:12.512 TCP 12.102.0.1:34378 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:38:11.515 00:00:11.802 TCP 12.102.0.1:49530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:39:13.357 00:00:11.822 TCP 12.102.0.1:55752 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:40:18.810 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:40:18.993 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:40:19.025 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.018 00:00:00.027 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.017 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.425 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.338 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:40:15.219 00:00:11.807 TCP 12.102.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:36:09.411 00:06:00.538 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:41:17.079 00:00:11.804 TCP 12.102.0.1:55660 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:42:18.921 00:00:11.820 TCP 12.102.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:38:09.409 00:06:00.542 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:43:20.777 00:00:11.809 TCP 12.102.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:44:22.629 00:00:11.800 TCP 12.102.0.1:45720 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:45:19.299 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.296 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.220 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.354 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.369 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.282 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.332 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:45:24.470 00:00:11.805 TCP 12.102.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:46:26.313 00:00:11.807 TCP 12.102.0.1:57368 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:47:28.161 00:00:11.771 TCP 12.102.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:43:09.412 00:06:00.541 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:48:29.968 00:00:11.802 TCP 12.102.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:49:31.804 00:00:11.803 TCP 12.102.0.1:60226 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:45:09.410 00:06:00.546 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:50:18.858 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:50:18.881 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:50:18.866 00:00:00.033 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.293 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.085 00:00:00.040 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.298 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.180 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:50:33.649 00:00:11.773 TCP 12.102.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:51:35.458 00:00:11.767 TCP 12.102.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:52:37.263 00:00:12.233 TCP 12.102.0.1:52960 -> 1.101.0.1:3000 15 1926 1 2025-11-20 12:53:39.542 00:00:11.807 TCP 12.102.0.1:50290 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:54:41.390 00:00:11.767 TCP 12.102.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:50:09.416 00:06:00.539 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 12:55:18.923 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 12:55:18.946 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 12:55:18.857 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.261 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.157 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.372 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.393 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 12:55:43.200 00:00:11.797 TCP 12.102.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:56:45.040 00:00:11.799 TCP 12.102.0.1:36704 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:52:09.414 00:06:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 12:57:46.879 00:00:11.799 TCP 12.102.0.1:36524 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124910, total packets: 1150, avg bps: 260, avg pps: 0, avg bpp: 108 Time window: 2025-11-20 11:54:09 - 2025-11-20 12:58:09 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0050s User: 0.0010s Wall: 0.0020s flows/second: 80766.5 Runtime: 0.0020s