Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 13:59:11.797 00:00:11.798 TCP 12.102.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:00:13.638 00:00:11.800 TCP 12.102.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-11-23 13:57:10.987 00:05:00.398 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 13:57:10.990 00:05:00.393 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 14:01:15.475 00:00:11.825 TCP 12.102.0.1:33268 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:01:48.130 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:01:47.991 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:01:48.124 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:01:48.007 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:01:48.103 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:01:48.193 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:01:47.969 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:02:17.337 00:00:11.801 TCP 12.102.0.1:45694 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:03:19.178 00:00:11.801 TCP 12.102.0.1:51432 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:04:21.021 00:00:11.802 TCP 12.102.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:05:22.860 00:00:11.803 TCP 12.102.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:06:24.702 00:00:11.817 TCP 12.102.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:06:47.384 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:06:47.424 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:06:47.462 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:06:47.407 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:06:47.473 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:06:47.345 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:06:47.356 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:03:10.989 00:05:00.396 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 14:03:10.993 00:05:00.392 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 14:07:26.556 00:00:11.795 TCP 12.102.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:08:28.392 00:00:11.813 TCP 12.102.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:09:30.244 00:00:11.768 TCP 12.102.0.1:45288 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:10:32.070 00:00:11.803 TCP 12.102.0.1:45066 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:11:47.619 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:11:47.573 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:11:47.532 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:11:47.452 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:11:33.917 00:00:11.842 TCP 12.102.0.1:53188 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:11:47.466 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:11:47.358 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:11:47.429 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:12:35.789 00:00:11.765 TCP 12.102.0.1:47004 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:09:10.990 00:05:00.397 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-23 14:09:10.992 00:05:00.392 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-23 14:13:37.590 00:00:11.807 TCP 12.102.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:14:39.442 00:00:11.804 TCP 12.102.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:15:41.285 00:00:11.800 TCP 12.102.0.1:46964 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:16:47.474 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:16:47.847 00:00:00.026 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:16:47.394 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:16:47.499 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:16:47.497 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:16:48.359 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:16:47.897 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:16:43.127 00:00:15.058 TCP 12.102.0.1:43792 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:17:48.235 00:00:11.771 TCP 12.102.0.1:55600 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:18:50.069 00:00:11.763 TCP 12.102.0.1:32988 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:19:51.869 00:00:11.798 TCP 12.102.0.1:58294 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:15:11.003 00:06:00.384 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-23 14:15:11.000 00:06:00.389 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-23 14:20:53.709 00:00:11.803 TCP 12.102.0.1:59390 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:21:47.537 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:21:47.551 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:21:47.739 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:21:47.517 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:21:47.575 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:21:47.323 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:21:47.494 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:21:55.560 00:00:11.805 TCP 12.102.0.1:54242 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:22:57.405 00:00:11.785 TCP 12.102.0.1:37132 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:23:59.234 00:00:11.773 TCP 12.102.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:25:01.078 00:00:11.798 TCP 12.102.0.1:34270 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:26:02.914 00:00:11.822 TCP 12.102.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:26:48.034 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:26:47.584 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:26:48.134 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:26:47.770 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:26:48.057 00:00:00.028 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:26:47.702 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:26:48.012 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:22:11.003 00:06:00.385 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-23 14:22:11.002 00:06:00.390 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-23 14:27:04.772 00:00:11.800 TCP 12.102.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:28:06.608 00:00:11.764 TCP 12.102.0.1:53428 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:29:08.434 00:00:11.811 TCP 12.102.0.1:49632 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:30:10.286 00:00:12.633 TCP 12.102.0.1:49396 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:31:12.956 00:00:11.811 TCP 12.102.0.1:43710 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:31:47.756 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:31:47.935 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:31:47.776 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:31:47.786 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:31:47.774 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:31:47.640 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:31:47.764 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:32:14.807 00:00:12.012 TCP 12.102.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:33:16.855 00:00:11.804 TCP 12.102.0.1:42632 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:29:11.020 00:06:00.379 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-23 14:29:11.022 00:06:00.374 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-23 14:34:18.696 00:00:11.799 TCP 12.102.0.1:45642 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:35:20.534 00:00:12.242 TCP 12.102.0.1:41296 -> 1.101.0.1:3000 15 1926 1 2025-11-23 14:36:22.816 00:00:15.670 TCP 12.102.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:36:47.791 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:36:48.034 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:36:47.764 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:36:47.811 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:36:47.913 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:36:47.994 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:36:47.740 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:37:28.528 00:00:11.809 TCP 12.102.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:38:30.374 00:00:11.823 TCP 12.102.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:39:32.236 00:00:11.814 TCP 12.102.0.1:52396 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:40:34.090 00:00:11.806 TCP 12.102.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:36:11.037 00:06:00.361 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-23 14:36:11.040 00:06:00.357 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-23 14:41:48.011 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:41:35.934 00:00:11.813 TCP 12.102.0.1:44734 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:41:47.767 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:41:48.049 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:41:47.975 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:41:47.994 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:41:47.717 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:41:47.953 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:42:37.786 00:00:11.850 TCP 12.102.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:43:39.677 00:00:12.290 TCP 12.102.0.1:50834 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:44:42.010 00:00:11.818 TCP 12.102.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:45:43.861 00:00:12.235 TCP 12.102.0.1:54174 -> 1.101.0.1:3000 15 1926 1 2025-11-23 14:46:48.189 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:46:48.172 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:46:48.101 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:46:48.071 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:46:48.205 00:00:00.033 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:46:48.046 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:46:48.049 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:46:46.131 00:00:11.800 TCP 12.102.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:47:47.973 00:00:11.800 TCP 12.102.0.1:40364 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:43:11.043 00:06:00.358 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-23 14:43:11.040 00:06:00.364 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-23 14:48:49.813 00:00:11.829 TCP 12.102.0.1:45038 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:49:51.676 00:00:11.807 TCP 12.102.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:50:53.523 00:00:11.863 TCP 12.102.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:51:48.033 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:51:48.324 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:51:48.262 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:51:48.187 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:51:48.211 00:00:00.047 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:51:48.011 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:51:48.164 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:51:55.427 00:00:11.804 TCP 12.102.0.1:58386 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:52:57.267 00:00:11.798 TCP 12.102.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:53:59.109 00:00:11.809 TCP 12.102.0.1:52272 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:50:11.048 00:06:00.356 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-23 14:50:11.045 00:06:00.361 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-23 14:55:00.957 00:00:11.808 TCP 12.102.0.1:52408 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:56:02.802 00:00:12.241 TCP 12.102.0.1:43850 -> 1.101.0.1:3000 15 1926 1 2025-11-23 14:56:48.232 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-23 14:56:48.335 00:00:00.028 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:56:48.229 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-23 14:56:48.574 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-23 14:56:48.473 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-23 14:56:48.761 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-23 14:56:48.551 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-23 14:57:05.087 00:00:11.812 TCP 12.102.0.1:45422 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:58:06.937 00:00:11.812 TCP 12.102.0.1:34510 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124591, total packets: 1142, avg bps: 271, avg pps: 0, avg bpp: 109 Time window: 2025-11-23 13:57:10 - 2025-11-23 14:58:18 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0050s User: 0.0010s Wall: 0.0027s flows/second: 58183.5 Runtime: 0.0028s