Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 22:59:33.901 00:00:11.804 TCP 12.102.0.1:45334 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:00:35.743 00:00:11.805 TCP 12.102.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-11-22 22:57:10.558 00:05:00.537 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 22:57:10.556 00:05:00.542 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:01:29.571 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:01:29.709 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:01:29.630 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:01:29.593 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:01:29.709 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:01:29.492 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:01:29.608 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:01:37.588 00:00:11.816 TCP 12.102.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:02:39.444 00:00:11.820 TCP 12.102.0.1:37218 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:03:41.294 00:00:11.971 TCP 12.102.0.1:40500 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:04:43.301 00:00:11.798 TCP 12.102.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:05:45.140 00:00:11.830 TCP 12.102.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:06:29.426 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:06:29.531 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:06:29.606 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:06:29.417 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:06:29.534 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:06:29.414 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:06:29.393 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:06:47.010 00:00:11.799 TCP 12.102.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:03:10.558 00:05:00.540 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:03:10.556 00:05:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:07:48.850 00:00:11.799 TCP 12.102.0.1:43580 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:08:50.683 00:00:11.800 TCP 12.102.0.1:46402 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:09:52.522 00:00:11.798 TCP 12.102.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:10:54.359 00:00:11.771 TCP 12.102.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:11:29.294 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:11:29.152 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:11:29.223 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:11:29.267 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:11:29.309 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:11:29.280 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:11:29.244 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:11:56.171 00:00:11.802 TCP 12.102.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:09:10.559 00:05:00.540 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:09:10.557 00:05:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:12:58.011 00:00:11.806 TCP 12.102.0.1:56594 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:13:59.853 00:00:11.806 TCP 12.102.0.1:40326 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:15:01.701 00:00:11.774 TCP 12.102.0.1:43456 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:16:03.510 00:00:11.772 TCP 12.102.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:16:29.508 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:16:29.607 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:16:29.533 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:16:29.414 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:16:29.407 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:16:29.300 00:00:00.031 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:16:29.391 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:17:05.323 00:00:11.768 TCP 12.102.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:18:07.132 00:00:11.815 TCP 12.102.0.1:37770 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:15:10.573 00:05:00.527 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:15:10.570 00:05:00.532 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:19:08.986 00:00:11.808 TCP 12.102.0.1:41714 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:20:10.829 00:00:11.801 TCP 12.102.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:21:12.667 00:00:11.758 TCP 12.102.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:21:29.451 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:21:29.409 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:21:29.416 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:21:29.526 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:21:29.473 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:21:29.420 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:21:29.549 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:22:14.468 00:00:11.802 TCP 12.102.0.1:39328 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:23:16.307 00:00:11.799 TCP 12.102.0.1:51294 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:24:18.146 00:00:11.881 TCP 12.102.0.1:40266 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:21:10.573 00:05:00.531 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:21:10.576 00:05:00.525 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:25:20.080 00:00:11.808 TCP 12.102.0.1:52686 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:26:29.455 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:26:29.581 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:26:29.601 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:26:29.478 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:26:21.928 00:00:11.805 TCP 12.102.0.1:39542 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:26:29.475 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:26:29.697 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:26:29.508 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:27:23.774 00:00:11.802 TCP 12.102.0.1:34172 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:28:25.625 00:00:11.800 TCP 12.102.0.1:56858 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:29:27.463 00:00:11.797 TCP 12.102.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:30:29.301 00:00:11.802 TCP 12.102.0.1:44966 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:27:10.574 00:05:00.529 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:27:10.578 00:05:00.524 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:31:29.641 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:31:29.816 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:31:29.752 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:31:29.674 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:31:29.743 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:31:29.761 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:31:29.651 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:31:31.143 00:00:11.806 TCP 12.102.0.1:49432 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:32:32.989 00:00:11.797 TCP 12.102.0.1:46626 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:33:34.827 00:00:11.803 TCP 12.102.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:34:36.668 00:00:11.761 TCP 12.102.0.1:53962 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:35:38.467 00:00:11.803 TCP 12.102.0.1:35358 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:36:29.979 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:36:29.856 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:36:29.760 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:36:29.815 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:36:30.002 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:36:29.949 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:36:29.531 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:36:40.310 00:00:11.805 TCP 12.102.0.1:40370 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:33:10.585 00:05:00.519 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:33:10.587 00:05:00.514 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:37:42.151 00:00:11.805 TCP 12.102.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:38:43.994 00:00:11.800 TCP 12.102.0.1:44098 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:39:45.833 00:00:11.809 TCP 12.102.0.1:38570 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:40:47.678 00:00:11.803 TCP 12.102.0.1:42414 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:41:29.957 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:41:29.896 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:41:29.969 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:41:29.979 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:41:29.766 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:41:29.768 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:41:29.890 00:00:00.019 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:41:49.522 00:00:11.793 TCP 12.102.0.1:50350 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:42:51.354 00:00:11.802 TCP 12.102.0.1:34632 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:39:10.599 00:05:00.506 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:39:10.602 00:05:00.501 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:43:53.191 00:00:11.757 TCP 12.102.0.1:39512 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:44:54.989 00:00:11.802 TCP 12.102.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:45:56.831 00:00:11.802 TCP 12.102.0.1:46002 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:46:29.875 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:46:29.922 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:46:29.967 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:46:30.239 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:46:29.904 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:46:30.037 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:46:29.904 00:00:00.018 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:46:58.670 00:00:11.803 TCP 12.102.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:48:00.513 00:00:11.758 TCP 12.102.0.1:49930 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:45:10.600 00:05:00.507 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:45:10.604 00:05:00.501 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:49:02.308 00:00:11.800 TCP 12.102.0.1:33228 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:50:04.148 00:00:11.809 TCP 12.102.0.1:52218 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:51:05.996 00:00:11.798 TCP 12.102.0.1:59742 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:51:30.009 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:51:29.954 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:51:30.144 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:51:30.031 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:51:29.968 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:51:30.033 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:51:30.044 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:52:07.835 00:00:11.798 TCP 12.102.0.1:48012 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:53:09.673 00:00:11.811 TCP 12.102.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:54:11.517 00:00:11.797 TCP 12.102.0.1:39092 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:51:10.602 00:05:00.507 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-22 23:51:10.604 00:05:00.502 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-22 23:55:13.351 00:00:11.763 TCP 12.102.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:56:15.148 00:00:11.813 TCP 12.102.0.1:38552 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:56:29.869 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-22 23:56:30.110 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:56:30.333 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-22 23:56:29.893 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-22 23:56:30.001 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-22 23:56:29.988 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-22 23:56:30.306 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-22 23:57:17.000 00:00:11.769 TCP 12.102.0.1:56100 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:58:18.805 00:00:11.815 TCP 12.102.0.1:51382 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 123334, total packets: 1130, avg bps: 268, avg pps: 0, avg bpp: 109 Time window: 2025-11-22 22:57:10 - 2025-11-22 23:58:30 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0061s User: 0.0000s Wall: 0.0021s flows/second: 78488.8 Runtime: 0.0021s