Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 10:58:52.839 00:00:11.768 TCP 12.102.0.1:57606 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:54:11.563 00:06:00.188 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 10:54:11.560 00:06:00.193 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 10:59:54.646 00:00:11.877 TCP 12.102.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:00:56.562 00:00:11.767 TCP 12.102.0.1:37412 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:02:12.344 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.495 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.322 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:01:58.366 00:00:11.807 TCP 12.102.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:02:12.437 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.563 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.440 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.418 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:03:00.219 00:00:11.803 TCP 12.102.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:04:02.083 00:00:11.801 TCP 12.102.0.1:56356 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:05:03.919 00:00:11.788 TCP 12.102.0.1:50354 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:01:11.563 00:06:00.189 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 11:01:11.560 00:06:00.194 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 11:06:05.747 00:00:11.802 TCP 12.102.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:07:12.520 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.531 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.613 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.488 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.351 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.493 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.467 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:07:07.586 00:00:11.803 TCP 12.102.0.1:54966 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:08:09.428 00:00:11.832 TCP 12.102.0.1:39678 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:09:11.300 00:00:11.801 TCP 12.102.0.1:35872 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:10:13.131 00:00:11.797 TCP 12.102.0.1:33752 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:11:14.972 00:00:11.812 TCP 12.102.0.1:51078 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:12:12.582 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.495 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.637 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.671 00:00:00.050 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.682 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.567 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.650 00:00:00.050 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:12:16.820 00:00:11.800 TCP 12.102.0.1:46482 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:08:11.565 00:06:00.191 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 11:08:11.568 00:06:00.185 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 11:13:18.661 00:00:12.402 TCP 12.102.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:14:21.099 00:00:11.803 TCP 12.102.0.1:53536 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:15:22.942 00:00:11.810 TCP 12.102.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:16:24.800 00:00:11.803 TCP 12.102.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:17:12.938 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:17:13.054 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:17:12.902 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:17:12.958 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:17:13.194 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:17:13.089 00:00:00.043 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:17:12.934 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:17:26.641 00:00:11.799 TCP 12.102.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:18:28.482 00:00:11.802 TCP 12.102.0.1:56834 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:19:30.324 00:00:11.800 TCP 12.102.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:15:11.579 00:06:00.181 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 11:15:11.582 00:06:00.176 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 11:20:32.163 00:00:11.810 TCP 12.102.0.1:44670 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:21:34.036 00:00:11.766 TCP 12.102.0.1:34668 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:22:12.794 00:00:00.030 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.942 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.681 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.811 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.586 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.778 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.658 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:22:35.839 00:00:11.883 TCP 12.102.0.1:47020 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:23:37.757 00:00:11.814 TCP 12.102.0.1:55988 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:24:39.609 00:00:12.100 TCP 12.102.0.1:51568 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:25:41.750 00:00:11.759 TCP 12.102.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:26:43.547 00:00:11.853 TCP 12.102.0.1:43308 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:27:12.777 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:22:11.584 00:06:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 11:22:11.581 00:06:00.180 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 11:27:12.972 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:27:12.977 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:27:13.064 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:27:12.801 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:27:13.062 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:27:12.983 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:27:45.437 00:00:11.811 TCP 12.102.0.1:56602 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:28:47.295 00:00:11.800 TCP 12.102.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:29:49.134 00:00:11.799 TCP 12.102.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:30:50.974 00:00:11.822 TCP 12.102.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:31:52.829 00:00:11.802 TCP 12.102.0.1:41466 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:32:13.062 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.095 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.021 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.014 00:00:00.020 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.108 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.027 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:32:12.992 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:32:54.666 00:00:11.807 TCP 12.102.0.1:40380 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:29:11.588 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 11:33:56.507 00:00:11.798 TCP 12.102.0.1:36036 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:29:11.586 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 11:34:58.343 00:00:11.758 TCP 12.102.0.1:57884 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:36:00.137 00:00:11.835 TCP 12.102.0.1:57686 -> 1.101.0.1:3000 12 1559 1 2025-11-24 11:37:02.004 00:00:11.756 TCP 12.102.0.1:35026 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:37:13.080 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.109 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:37:12.935 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.042 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.105 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.050 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.019 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:38:03.801 00:00:11.808 TCP 12.102.0.1:51684 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:39:05.642 00:00:11.769 TCP 12.102.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:40:07.442 00:00:11.758 TCP 12.102.0.1:35968 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:36:11.589 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 11:36:11.586 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 11:41:09.246 00:00:11.808 TCP 12.102.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:42:13.116 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.385 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.037 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:42:12.993 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.330 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.297 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:42:12.970 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:42:11.094 00:00:11.784 TCP 12.102.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:43:12.922 00:00:11.783 TCP 12.102.0.1:50792 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:44:14.743 00:00:11.802 TCP 12.102.0.1:44862 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:45:16.585 00:00:11.803 TCP 12.102.0.1:49484 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:46:18.429 00:00:11.808 TCP 12.102.0.1:49066 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:47:13.257 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:47:13.280 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.344 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.292 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.223 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.420 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.274 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:47:20.274 00:00:11.798 TCP 12.102.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:43:11.589 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 11:43:11.591 00:06:00.174 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 11:48:22.112 00:00:11.805 TCP 12.102.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:49:23.954 00:00:11.804 TCP 12.102.0.1:46688 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:50:25.799 00:00:11.808 TCP 12.102.0.1:60922 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:51:27.644 00:00:11.801 TCP 12.102.0.1:52246 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:52:13.397 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:52:13.447 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.548 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.601 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.420 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.543 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.425 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:52:29.481 00:00:11.772 TCP 12.102.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:53:31.291 00:00:11.803 TCP 12.102.0.1:47518 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:54:33.131 00:00:11.805 TCP 12.102.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:50:11.592 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-24 11:50:11.597 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-24 11:55:34.968 00:00:11.806 TCP 12.102.0.1:50126 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:56:36.816 00:00:12.234 TCP 12.102.0.1:60250 -> 1.101.0.1:3000 15 1926 1 2025-11-24 11:57:13.518 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.423 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.538 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.310 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.451 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.477 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.287 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-24 11:57:39.090 00:00:11.811 TCP 12.102.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:58:40.943 00:00:11.810 TCP 12.102.0.1:38390 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 126050, total packets: 1158, avg bps: 259, avg pps: 0, avg bpp: 108 Time window: 2025-11-24 10:54:11 - 2025-11-24 11:58:52 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0041s User: 0.0010s Wall: 0.0018s flows/second: 90959.4 Runtime: 0.0018s