Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 15:58:50.353 00:00:11.805 TCP 12.102.0.1:33394 -> 1.101.0.1:3000 11 1507 1 2025-11-20 15:55:09.469 00:05:00.571 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 15:59:52.195 00:00:11.767 TCP 12.102.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:00:23.032 00:00:00.046 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:00:23.103 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:00:22.931 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:00:22.985 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:00:23.055 00:00:00.045 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:00:23.131 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:00:23.067 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:00:53.996 00:00:11.809 TCP 12.102.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:01:55.844 00:00:11.804 TCP 12.102.0.1:37674 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:02:57.683 00:00:11.799 TCP 12.102.0.1:48234 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:00:09.474 00:05:00.568 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:03:59.525 00:00:11.813 TCP 12.102.0.1:41854 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:01:09.472 00:05:00.574 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:05:01.379 00:00:11.818 TCP 12.102.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:05:23.062 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.722 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.892 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.921 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:05:23.060 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.986 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.899 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:06:03.236 00:00:11.807 TCP 12.102.0.1:47796 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:07:05.088 00:00:11.802 TCP 12.102.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:08:06.926 00:00:11.816 TCP 12.102.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:09:08.792 00:00:11.836 TCP 12.102.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:06:09.478 00:05:00.567 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:10:23.296 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:10:23.265 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:10:23.298 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:10:23.511 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:10:10.644 00:00:11.804 TCP 12.102.0.1:35822 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:10:23.319 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:10:23.415 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:10:23.633 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:07:09.474 00:05:00.572 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:11:12.483 00:00:11.799 TCP 12.102.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:12:14.323 00:00:11.803 TCP 12.102.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:13:16.170 00:00:11.801 TCP 12.102.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:14:18.016 00:00:11.762 TCP 12.102.0.1:41000 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:15:23.082 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:15:23.264 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.409 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.283 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.105 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.350 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.062 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:15:19.817 00:00:11.810 TCP 12.102.0.1:33884 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:12:09.478 00:05:00.567 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:16:21.666 00:00:11.804 TCP 12.102.0.1:43266 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:13:09.476 00:05:00.573 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:17:23.508 00:00:11.764 TCP 12.102.0.1:49838 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:18:25.307 00:00:11.804 TCP 12.102.0.1:35152 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:19:27.147 00:00:11.770 TCP 12.102.0.1:54100 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:20:23.433 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:20:23.402 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:20:23.412 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:20:22.960 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:20:23.063 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:20:23.291 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:20:22.938 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:20:28.956 00:00:11.797 TCP 12.102.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:21:30.802 00:00:11.802 TCP 12.102.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:18:09.479 00:05:00.568 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:22:32.643 00:00:11.799 TCP 12.102.0.1:37352 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:19:09.477 00:05:00.573 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:23:34.484 00:00:11.796 TCP 12.102.0.1:45406 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:24:36.323 00:00:11.814 TCP 12.102.0.1:34052 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:25:23.158 00:00:00.029 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.475 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.388 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.357 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.476 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.425 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.335 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:25:38.182 00:00:11.760 TCP 12.102.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:26:39.987 00:00:11.824 TCP 12.102.0.1:48098 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:27:41.840 00:00:11.815 TCP 12.102.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:24:09.480 00:05:00.568 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:28:43.694 00:00:11.803 TCP 12.102.0.1:38910 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:25:09.478 00:05:00.572 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:29:45.542 00:00:11.812 TCP 12.102.0.1:55702 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:30:23.579 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:30:23.415 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:30:23.470 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:30:23.602 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:30:23.423 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:30:23.410 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:30:23.433 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:30:47.393 00:00:11.806 TCP 12.102.0.1:38190 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:31:49.240 00:00:11.802 TCP 12.102.0.1:40390 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:32:51.089 00:00:11.810 TCP 12.102.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:33:52.939 00:00:11.804 TCP 12.102.0.1:35556 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:30:09.481 00:05:00.568 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:34:54.788 00:00:11.801 TCP 12.102.0.1:34632 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:31:09.481 00:05:00.572 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:35:23.471 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:35:23.531 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:35:23.700 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:35:23.568 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:35:23.494 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:35:23.623 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:35:23.486 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:35:56.629 00:00:11.764 TCP 12.102.0.1:35040 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:36:58.433 00:00:11.807 TCP 12.102.0.1:54524 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:38:00.279 00:00:11.762 TCP 12.102.0.1:34754 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:39:02.081 00:00:11.796 TCP 12.102.0.1:53684 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:36:09.483 00:05:00.569 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:40:03.922 00:00:11.819 TCP 12.102.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:40:23.825 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:40:23.829 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.670 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.848 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.833 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.764 00:00:00.017 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.896 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:37:09.481 00:05:00.574 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:41:05.786 00:00:11.804 TCP 12.102.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:42:07.642 00:00:11.803 TCP 12.102.0.1:36252 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:43:09.485 00:00:11.797 TCP 12.102.0.1:60202 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:44:11.322 00:00:11.806 TCP 12.102.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:45:23.572 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.963 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.723 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.649 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.794 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.800 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.626 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:45:13.197 00:00:11.801 TCP 12.102.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:42:09.486 00:05:00.568 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:46:15.075 00:00:11.800 TCP 12.102.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:43:09.482 00:05:00.574 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:47:16.930 00:00:11.827 TCP 12.102.0.1:49886 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:48:18.823 00:00:11.802 TCP 12.102.0.1:59754 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:49:20.665 00:00:11.812 TCP 12.102.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:50:24.265 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.225 00:00:00.044 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.368 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.035 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.368 00:00:00.019 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.028 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.014 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:50:22.517 00:00:11.802 TCP 12.102.0.1:46308 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:51:24.364 00:00:11.819 TCP 12.102.0.1:49886 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:48:09.486 00:05:00.569 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:52:26.222 00:00:11.796 TCP 12.102.0.1:49836 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:49:09.485 00:05:00.578 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-20 16:53:28.077 00:00:11.795 TCP 12.102.0.1:40932 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:54:29.912 00:00:11.828 TCP 12.102.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:55:23.937 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 16:55:23.940 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 16:55:23.918 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 16:55:24.042 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 16:55:24.130 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 16:55:23.992 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 16:55:23.995 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 16:55:31.776 00:00:11.805 TCP 12.102.0.1:33578 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:56:33.623 00:00:11.802 TCP 12.102.0.1:52158 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:57:35.459 00:00:11.816 TCP 12.102.0.1:49000 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:54:09.488 00:05:00.569 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-20 16:58:37.313 00:00:11.798 TCP 12.102.0.1:57234 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 124841, total packets: 1141, avg bps: 260, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 15:55:09 - 2025-11-20 16:59:10 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0065s User: 0.0000s Wall: 0.0023s flows/second: 70503.4 Runtime: 0.0023s