Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 14:59:02.607 00:00:11.762 TCP 12.102.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:00:04.406 00:00:11.801 TCP 12.102.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:00:21.705 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.814 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.856 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.581 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.605 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.802 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:00:21.557 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 14:56:09.451 00:06:00.541 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 15:01:06.247 00:00:11.805 TCP 12.102.0.1:52248 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:02:08.089 00:00:11.803 TCP 12.102.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2025-11-20 14:58:09.448 00:06:00.546 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 15:03:09.929 00:00:11.777 TCP 12.102.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:04:11.745 00:00:11.805 TCP 12.102.0.1:40710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:05:22.045 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:05:22.148 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:05:22.085 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:05:21.861 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:05:21.994 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:05:22.025 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:05:21.838 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:05:13.612 00:00:11.794 TCP 12.102.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:06:15.447 00:00:11.761 TCP 12.102.0.1:34364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:07:17.247 00:00:11.804 TCP 12.102.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:03:09.451 00:06:00.541 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 15:08:19.087 00:00:11.802 TCP 12.102.0.1:34194 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:09:20.928 00:00:11.822 TCP 12.102.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:05:09.449 00:06:00.546 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 15:10:21.740 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:10:21.785 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:10:21.986 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:10:22.053 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:10:21.762 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:10:21.923 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:10:21.930 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:10:22.795 00:00:11.796 TCP 12.102.0.1:35558 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:11:24.632 00:00:11.796 TCP 12.102.0.1:35582 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:12:26.466 00:00:11.797 TCP 12.102.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:13:28.303 00:00:11.803 TCP 12.102.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:14:30.142 00:00:12.239 TCP 12.102.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:10:09.453 00:06:00.540 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 15:15:22.078 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:15:22.195 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:15:22.029 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:15:21.971 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:15:22.181 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:15:21.961 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:15:21.948 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:15:32.411 00:00:11.801 TCP 12.102.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:16:34.251 00:00:11.799 TCP 12.102.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:12:09.452 00:06:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 15:17:36.090 00:00:11.771 TCP 12.102.0.1:47748 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:18:37.899 00:00:11.796 TCP 12.102.0.1:50296 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:19:39.736 00:00:11.804 TCP 12.102.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:20:21.842 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:20:22.249 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:20:22.081 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:20:22.012 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:20:21.864 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:20:22.162 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:20:21.946 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:20:41.578 00:00:11.804 TCP 12.102.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:21:43.424 00:00:11.797 TCP 12.102.0.1:46762 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:17:09.454 00:06:00.541 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 15:22:45.270 00:00:11.798 TCP 12.102.0.1:41818 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:19:09.452 00:05:00.550 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:23:47.105 00:00:11.817 TCP 12.102.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:24:48.960 00:00:11.800 TCP 12.102.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:25:22.140 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:25:22.098 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.353 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.164 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.292 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.177 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:25:22.215 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:25:50.800 00:00:11.803 TCP 12.102.0.1:54180 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:26:52.639 00:00:11.764 TCP 12.102.0.1:51512 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:27:54.452 00:00:11.813 TCP 12.102.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:24:09.456 00:05:00.543 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:28:56.306 00:00:11.798 TCP 12.102.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:25:09.454 00:05:00.549 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:29:58.138 00:00:11.775 TCP 12.102.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:30:22.181 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:30:22.411 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.210 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.444 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.203 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.054 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:30:22.489 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:30:59.951 00:00:11.795 TCP 12.102.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:32:01.788 00:00:11.761 TCP 12.102.0.1:39144 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:33:03.588 00:00:11.776 TCP 12.102.0.1:41200 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:30:09.460 00:05:00.543 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:34:05.400 00:00:11.806 TCP 12.102.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:31:09.456 00:05:00.569 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:35:22.237 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.307 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.418 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.311 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:35:07.244 00:00:11.756 TCP 12.102.0.1:50718 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:35:22.609 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.441 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:35:22.288 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:36:09.066 00:00:11.755 TCP 12.102.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:37:10.859 00:00:12.496 TCP 12.102.0.1:54832 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:38:13.394 00:00:11.800 TCP 12.102.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:39:15.237 00:00:11.814 TCP 12.102.0.1:46562 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:36:09.465 00:05:00.565 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:40:22.568 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:40:22.670 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.390 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.319 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.591 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.599 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:40:22.422 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:40:17.086 00:00:11.857 TCP 12.102.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:37:09.463 00:05:00.569 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:41:18.984 00:00:11.798 TCP 12.102.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:42:20.818 00:00:11.796 TCP 12.102.0.1:37074 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:43:22.667 00:00:11.814 TCP 12.102.0.1:58094 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:44:24.514 00:00:11.804 TCP 12.102.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:45:22.472 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:45:22.720 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.721 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.513 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.495 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.417 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:45:22.490 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:45:26.356 00:00:11.796 TCP 12.102.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:42:09.468 00:05:00.564 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:46:28.198 00:00:11.795 TCP 12.102.0.1:56230 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:43:09.466 00:05:00.570 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:47:30.053 00:00:11.801 TCP 12.102.0.1:42478 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:48:31.887 00:00:11.803 TCP 12.102.0.1:43320 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:49:33.730 00:00:11.760 TCP 12.102.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:50:23.325 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:50:22.698 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:50:23.027 00:00:00.026 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:50:23.214 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:50:22.933 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:50:22.701 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:50:23.193 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:50:35.526 00:00:11.875 TCP 12.102.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:51:37.439 00:00:11.804 TCP 12.102.0.1:42232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:48:09.470 00:05:00.566 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 15:52:39.284 00:00:11.800 TCP 12.102.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:49:09.467 00:05:00.572 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:53:41.125 00:00:11.799 TCP 12.102.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:54:42.964 00:00:11.809 TCP 12.102.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:55:22.650 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.863 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.781 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.762 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.942 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.850 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 15:55:22.740 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 15:55:44.811 00:00:11.819 TCP 12.102.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:56:46.668 00:00:11.807 TCP 12.102.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:57:48.516 00:00:11.802 TCP 12.102.0.1:56944 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:54:09.472 00:05:00.565 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 Summary: total flows: 161, total bytes: 123457, total packets: 1132, avg bps: 261, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 14:56:09 - 2025-11-20 15:59:10 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0041s User: 0.0014s Wall: 0.0020s flows/second: 78952.8 Runtime: 0.0021s