Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 04:59:06.137 00:00:11.806 TCP 12.102.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:00:07.983 00:00:11.799 TCP 12.102.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-11-25 04:57:11.966 00:05:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:01:09.820 00:00:11.799 TCP 12.102.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-11-25 04:58:11.970 00:05:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:02:11.659 00:00:11.808 TCP 12.102.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:02:33.835 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:02:33.859 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:02:33.826 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:02:34.193 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:02:34.020 00:00:00.032 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:02:34.378 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:02:34.128 00:00:00.042 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:03:13.504 00:00:11.801 TCP 12.102.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:04:15.346 00:00:11.804 TCP 12.102.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:05:17.186 00:00:11.810 TCP 12.102.0.1:35472 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:06:19.038 00:00:11.802 TCP 12.102.0.1:33698 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:03:11.967 00:05:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:07:20.875 00:00:13.837 TCP 12.102.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:07:34.213 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:07:34.535 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:07:34.381 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:07:34.514 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:07:34.379 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:07:34.105 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:07:34.358 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:04:11.971 00:05:00.204 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:08:24.747 00:00:11.806 TCP 12.102.0.1:53108 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:09:26.591 00:00:11.811 TCP 12.102.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:10:28.445 00:00:11.809 TCP 12.102.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:11:30.291 00:00:11.758 TCP 12.102.0.1:60908 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:12:34.387 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.302 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.349 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.179 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.272 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.295 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.326 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:12:32.090 00:00:11.760 TCP 12.102.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:09:11.968 00:05:00.211 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:13:33.890 00:00:11.799 TCP 12.102.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:10:11.970 00:05:00.206 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:14:35.730 00:00:11.762 TCP 12.102.0.1:52262 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:15:37.529 00:00:11.764 TCP 12.102.0.1:53428 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:16:39.334 00:00:12.143 TCP 12.102.0.1:41096 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:17:34.332 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:17:34.284 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.287 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.310 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.355 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.480 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.417 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:17:41.516 00:00:11.762 TCP 12.102.0.1:35414 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:18:43.315 00:00:11.796 TCP 12.102.0.1:46170 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:15:11.971 00:05:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:19:45.146 00:00:11.807 TCP 12.102.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:16:11.973 00:05:00.204 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:20:46.989 00:00:11.813 TCP 12.102.0.1:35312 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:21:48.841 00:00:11.795 TCP 12.102.0.1:45498 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:22:34.215 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.642 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.639 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.196 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.569 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.521 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.173 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:22:50.676 00:00:11.809 TCP 12.102.0.1:58310 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:23:52.529 00:00:11.806 TCP 12.102.0.1:36682 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:24:54.374 00:00:11.809 TCP 12.102.0.1:39812 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:21:11.971 00:05:00.210 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:25:56.225 00:00:12.239 TCP 12.102.0.1:34098 -> 1.101.0.1:3000 15 1926 1 2025-11-25 05:22:11.974 00:05:00.205 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:26:58.502 00:00:11.759 TCP 12.102.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:27:34.595 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.713 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.767 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.719 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.667 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.688 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.746 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:28:00.299 00:00:11.808 TCP 12.102.0.1:51756 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:29:02.157 00:00:11.806 TCP 12.102.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:30:04.006 00:00:11.767 TCP 12.102.0.1:44456 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:27:11.973 00:05:00.209 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:31:05.810 00:00:12.248 TCP 12.102.0.1:33860 -> 1.101.0.1:3000 15 1926 1 2025-11-25 05:28:11.976 00:05:00.203 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:32:08.098 00:00:11.794 TCP 12.102.0.1:40368 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:32:34.779 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:32:34.687 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.867 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.876 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.801 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.799 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.743 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:33:09.945 00:00:11.761 TCP 12.102.0.1:54856 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:34:11.746 00:00:11.821 TCP 12.102.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:35:13.607 00:00:11.761 TCP 12.102.0.1:33840 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:36:15.407 00:00:11.803 TCP 12.102.0.1:60352 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:33:11.975 00:05:00.212 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:37:17.257 00:00:11.804 TCP 12.102.0.1:52470 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:37:34.719 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:37:34.867 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:37:34.708 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:37:34.741 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:37:34.936 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:37:34.737 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:37:34.767 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:34:11.978 00:05:00.207 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:38:19.097 00:00:11.802 TCP 12.102.0.1:39898 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:39:20.939 00:00:11.819 TCP 12.102.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:40:22.798 00:00:11.801 TCP 12.102.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:41:24.641 00:00:11.791 TCP 12.102.0.1:53436 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:42:34.949 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:42:34.877 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:42:34.783 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:42:34.849 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:42:34.885 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:42:26.473 00:00:11.795 TCP 12.102.0.1:47956 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:42:34.676 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:42:34.827 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:39:11.977 00:05:00.213 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:43:28.291 00:00:12.269 TCP 12.102.0.1:57062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:40:11.979 00:05:00.210 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:44:30.593 00:00:11.809 TCP 12.102.0.1:39500 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:45:32.438 00:00:11.871 TCP 12.102.0.1:39790 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:46:34.347 00:00:11.807 TCP 12.102.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:47:35.036 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:47:35.063 00:00:00.034 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:47:34.723 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:47:35.032 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:47:35.224 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:47:35.003 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:47:35.040 00:00:00.034 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:47:36.192 00:00:11.850 TCP 12.102.0.1:33098 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:48:38.083 00:00:11.796 TCP 12.102.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:45:11.980 00:05:00.212 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:49:39.918 00:00:11.779 TCP 12.102.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:46:11.981 00:05:00.209 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:50:41.742 00:00:11.762 TCP 12.102.0.1:59480 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:51:43.549 00:00:12.237 TCP 12.102.0.1:35182 -> 1.101.0.1:3000 15 1926 1 2025-11-25 05:52:35.040 00:00:00.037 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:52:34.973 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:52:34.937 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:52:35.095 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:52:35.063 00:00:00.037 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:52:35.149 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:52:35.036 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:52:45.824 00:00:11.807 TCP 12.102.0.1:34132 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:53:47.666 00:00:11.779 TCP 12.102.0.1:44334 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:54:49.488 00:00:11.805 TCP 12.102.0.1:58830 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:51:11.980 00:05:00.216 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-11-25 05:55:51.335 00:00:11.808 TCP 12.102.0.1:52338 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:52:11.983 00:05:00.210 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-11-25 05:56:53.179 00:00:11.761 TCP 12.102.0.1:52448 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:57:35.370 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 05:57:35.330 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:57:35.317 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 05:57:35.052 00:00:00.037 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 05:57:35.188 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 05:57:34.961 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 05:57:35.030 00:00:00.037 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 05:57:54.975 00:00:11.799 TCP 12.102.0.1:57010 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 124591, total packets: 1142, avg bps: 272, avg pps: 0, avg bpp: 109 Time window: 2025-11-25 04:57:11 - 2025-11-25 05:58:06 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0064s User: 0.0000s Wall: 0.0057s flows/second: 28450.2 Runtime: 0.0057s