Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 23:59:06.834 00:00:11.800 TCP 12.102.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:00:08.677 00:00:11.798 TCP 12.102.0.1:35704 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:56:11.273 00:06:00.301 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-23 23:56:11.276 00:06:00.296 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:01:10.511 00:00:11.759 TCP 12.102.0.1:48240 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:01:59.131 00:00:00.041 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:01:59.133 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:01:59.155 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:01:59.105 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:01:59.164 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:01:59.124 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:01:59.083 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:02:12.316 00:00:11.821 TCP 12.102.0.1:34306 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:03:14.181 00:00:11.998 TCP 12.102.0.1:41032 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:04:16.216 00:00:11.802 TCP 12.102.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:05:18.084 00:00:11.803 TCP 12.102.0.1:37284 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:06:19.937 00:00:11.774 TCP 12.102.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:06:58.974 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:06:58.971 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:06:59.336 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:06:59.340 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:06:59.269 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:06:58.992 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:06:59.442 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:07:21.745 00:00:11.802 TCP 12.102.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:03:11.277 00:06:00.296 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:03:11.276 00:06:00.301 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 00:08:23.581 00:00:11.820 TCP 12.102.0.1:37628 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:09:25.440 00:00:11.815 TCP 12.102.0.1:40074 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:10:27.289 00:00:11.802 TCP 12.102.0.1:38516 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:11:29.128 00:00:11.768 TCP 12.102.0.1:42440 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:11:59.552 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:11:59.666 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:11:59.692 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:11:59.655 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:11:59.576 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:11:59.619 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:11:59.524 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:12:30.931 00:00:11.804 TCP 12.102.0.1:52294 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:13:32.774 00:00:11.800 TCP 12.102.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:14:34.613 00:00:11.805 TCP 12.102.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:10:11.279 00:06:00.295 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:10:11.277 00:06:00.300 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 00:15:36.453 00:00:11.805 TCP 12.102.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:16:38.328 00:00:11.802 TCP 12.102.0.1:38184 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:16:59.886 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:16:59.944 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:16:59.705 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:16:59.891 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:16:59.908 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:16:59.781 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:16:59.748 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:17:40.167 00:00:11.803 TCP 12.102.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:18:42.008 00:00:11.801 TCP 12.102.0.1:56298 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:19:43.845 00:00:11.798 TCP 12.102.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:20:45.680 00:00:12.240 TCP 12.102.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:21:59.516 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:21:59.647 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:21:59.609 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:21:59.687 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:21:59.538 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:21:47.956 00:00:11.804 TCP 12.102.0.1:35344 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:21:59.792 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:21:59.323 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:17:11.280 00:06:00.298 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:17:11.278 00:06:00.303 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 00:22:49.797 00:00:11.806 TCP 12.102.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:23:51.642 00:00:11.849 TCP 12.102.0.1:49914 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:24:53.529 00:00:11.798 TCP 12.102.0.1:46454 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:25:55.367 00:00:11.778 TCP 12.102.0.1:48538 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:26:59.807 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:26:59.728 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:26:59.766 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:26:59.895 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:26:59.929 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:26:59.689 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:26:59.744 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:26:57.181 00:00:11.759 TCP 12.102.0.1:54162 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:27:58.977 00:00:11.802 TCP 12.102.0.1:35240 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:24:11.278 00:06:00.303 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 00:29:00.818 00:00:11.795 TCP 12.102.0.1:46638 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:24:11.282 00:06:00.298 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:30:02.672 00:00:11.805 TCP 12.102.0.1:46798 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:31:04.523 00:00:11.759 TCP 12.102.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:31:59.690 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:31:59.794 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:31:59.715 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:31:59.862 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:31:59.921 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:31:59.877 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:31:59.840 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:32:06.319 00:00:11.811 TCP 12.102.0.1:54700 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:33:08.177 00:00:11.825 TCP 12.102.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:34:10.065 00:00:11.754 TCP 12.102.0.1:39202 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:35:11.860 00:00:11.799 TCP 12.102.0.1:54142 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:31:11.280 00:06:00.303 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 00:31:11.284 00:06:00.298 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:36:13.697 00:00:11.792 TCP 12.102.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:36:59.705 00:00:00.025 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:37:00.120 00:00:00.049 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:37:00.287 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:37:00.412 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:36:59.728 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:37:00.288 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:37:00.343 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:37:15.529 00:00:11.805 TCP 12.102.0.1:55300 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:38:17.373 00:00:11.814 TCP 12.102.0.1:50190 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:39:19.229 00:00:11.760 TCP 12.102.0.1:40342 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:40:21.025 00:00:11.794 TCP 12.102.0.1:52734 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:41:22.860 00:00:11.800 TCP 12.102.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:42:00.286 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:42:00.075 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:42:00.243 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:41:59.957 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:42:00.155 00:00:00.020 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:41:59.957 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:41:59.932 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:42:24.696 00:00:11.802 TCP 12.102.0.1:43116 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:38:11.281 00:06:00.304 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 00:38:11.284 00:06:00.299 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:43:26.534 00:00:11.827 TCP 12.102.0.1:60134 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:44:28.400 00:00:11.814 TCP 12.102.0.1:37390 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:45:30.249 00:00:11.761 TCP 12.102.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:46:32.075 00:00:11.799 TCP 12.102.0.1:34042 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:47:00.130 00:00:00.034 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:47:00.043 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:47:00.169 00:00:00.037 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:47:00.163 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:47:00.168 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:47:00.039 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:47:00.141 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:47:33.910 00:00:11.797 TCP 12.102.0.1:42434 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:48:35.749 00:00:11.806 TCP 12.102.0.1:51620 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:49:37.590 00:00:11.775 TCP 12.102.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:45:11.286 00:06:00.298 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:45:11.283 00:06:00.303 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 00:50:39.406 00:00:11.764 TCP 12.102.0.1:57392 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:51:41.205 00:00:11.757 TCP 12.102.0.1:37564 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:52:00.153 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:52:00.319 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:52:00.303 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:52:00.176 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:52:00.310 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:52:00.187 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:52:00.371 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:52:43.000 00:00:11.799 TCP 12.102.0.1:33636 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:53:44.838 00:00:11.800 TCP 12.102.0.1:45870 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:54:46.677 00:00:11.804 TCP 12.102.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:55:48.518 00:00:11.762 TCP 12.102.0.1:57676 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:57:00.368 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 00:57:00.392 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 00:56:50.317 00:00:11.807 TCP 12.102.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:57:00.529 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 00:57:00.352 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 00:57:00.377 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 00:57:00.489 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:57:00.474 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 00:52:11.288 00:06:00.298 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 00:52:11.284 00:06:00.303 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 00:57:52.166 00:00:11.806 TCP 12.102.0.1:59194 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 266, avg pps: 0, avg bpp: 108 Time window: 2025-11-23 23:56:11 - 2025-11-24 00:58:11 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0031s User: 0.0021s Wall: 0.0024s flows/second: 66006.6 Runtime: 0.0024s