Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 07:59:35.505 00:00:11.805 TCP 12.102.0.1:46822 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:00:37.352 00:00:11.797 TCP 12.102.0.1:54680 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:01:39.187 00:00:11.810 TCP 12.102.0.1:57340 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:57:12.070 00:06:00.168 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:02:37.747 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:02:37.723 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:02:37.756 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:02:37.560 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:02:37.908 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:02:37.637 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:02:37.614 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:02:41.034 00:00:11.864 TCP 12.102.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:03:42.935 00:00:11.813 TCP 12.102.0.1:57996 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:59:12.074 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 08:04:44.786 00:00:11.806 TCP 12.102.0.1:51986 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:05:46.629 00:00:11.758 TCP 12.102.0.1:57804 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:06:48.425 00:00:11.800 TCP 12.102.0.1:52466 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:07:38.001 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:07:37.905 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:07:38.217 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:07:38.231 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:07:38.023 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:07:38.035 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:07:38.091 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:07:50.271 00:00:11.763 TCP 12.102.0.1:50450 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:08:52.083 00:00:11.803 TCP 12.102.0.1:44164 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:04:12.073 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:09:53.928 00:00:11.811 TCP 12.102.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:10:55.790 00:00:12.237 TCP 12.102.0.1:49936 -> 1.101.0.1:3000 15 1926 1 2025-11-25 08:06:12.075 00:06:00.171 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 08:11:58.077 00:00:11.759 TCP 12.102.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:12:37.885 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:12:38.083 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:12:38.099 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:12:37.916 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:12:37.907 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:12:38.180 00:00:00.018 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:12:38.000 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:12:59.878 00:00:11.759 TCP 12.102.0.1:35934 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:14:01.673 00:00:11.807 TCP 12.102.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:15:03.517 00:00:11.853 TCP 12.102.0.1:44726 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:11:12.074 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:16:05.409 00:00:11.811 TCP 12.102.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:17:07.260 00:00:20.240 TCP 12.102.0.1:38894 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:17:38.121 00:00:00.027 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:17:37.836 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:17:38.168 00:00:00.048 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:17:37.912 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:17:38.215 00:00:00.041 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:17:37.893 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:17:37.890 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:13:12.078 00:06:00.170 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 08:18:17.540 00:00:11.804 TCP 12.102.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:19:19.380 00:00:11.800 TCP 12.102.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:20:21.222 00:00:11.815 TCP 12.102.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:21:23.086 00:00:11.803 TCP 12.102.0.1:40378 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:22:37.871 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:22:24.931 00:00:11.810 TCP 12.102.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:22:38.366 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:22:37.893 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:22:38.014 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:22:38.171 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:22:38.204 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:22:38.214 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:18:12.079 00:06:00.176 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:23:26.791 00:00:11.808 TCP 12.102.0.1:43616 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:24:28.640 00:00:11.803 TCP 12.102.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:20:12.080 00:06:00.169 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 08:25:30.482 00:00:11.806 TCP 12.102.0.1:39554 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:26:32.329 00:00:11.762 TCP 12.102.0.1:51958 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:27:38.787 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:27:38.617 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:27:38.836 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:27:38.809 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:27:38.820 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:27:38.543 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:27:38.997 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:27:34.131 00:00:11.802 TCP 12.102.0.1:49016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:28:35.976 00:00:11.758 TCP 12.102.0.1:50642 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:29:37.768 00:00:11.801 TCP 12.102.0.1:50688 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:25:12.079 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:30:39.611 00:00:11.765 TCP 12.102.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:31:41.411 00:00:11.785 TCP 12.102.0.1:49020 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:27:12.081 00:06:00.168 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 08:32:38.240 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:32:38.418 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:32:38.579 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:32:38.514 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:32:38.262 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:32:38.240 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:32:38.099 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:32:43.244 00:00:11.801 TCP 12.102.0.1:51060 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:33:45.084 00:00:11.810 TCP 12.102.0.1:55338 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:34:46.931 00:00:11.819 TCP 12.102.0.1:39788 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:35:48.801 00:00:11.800 TCP 12.102.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:36:50.644 00:00:11.799 TCP 12.102.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:32:12.082 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:37:38.457 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:37:38.481 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:37:38.334 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:37:38.288 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:37:38.422 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:37:38.291 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:37:38.266 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:37:52.490 00:00:11.807 TCP 12.102.0.1:59638 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:38:54.339 00:00:11.809 TCP 12.102.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:34:12.086 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 08:39:56.185 00:00:11.820 TCP 12.102.0.1:42386 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:40:58.064 00:00:11.805 TCP 12.102.0.1:39504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:41:59.902 00:00:11.879 TCP 12.102.0.1:56966 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:42:38.451 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:42:38.642 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:42:38.352 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:42:38.585 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:42:38.473 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:42:38.352 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:42:38.615 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:43:01.821 00:00:11.817 TCP 12.102.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:39:12.085 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:44:03.675 00:00:11.806 TCP 12.102.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:45:05.522 00:00:11.768 TCP 12.102.0.1:32934 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:41:12.087 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 08:46:07.328 00:00:11.836 TCP 12.102.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:47:09.210 00:00:11.809 TCP 12.102.0.1:56864 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:47:38.528 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:47:38.459 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:47:38.932 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:47:38.862 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:47:38.550 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:47:38.556 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:47:38.434 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:48:11.082 00:00:11.825 TCP 12.102.0.1:58428 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:49:12.947 00:00:11.804 TCP 12.102.0.1:36596 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:50:14.791 00:00:11.806 TCP 12.102.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:46:12.087 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:51:16.638 00:00:11.802 TCP 12.102.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:52:18.477 00:00:11.798 TCP 12.102.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:52:38.691 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:52:38.686 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:52:38.622 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:52:38.597 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:52:38.718 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:52:38.800 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:52:38.575 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:48:12.091 00:06:00.164 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-25 08:53:20.317 00:00:11.854 TCP 12.102.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:54:22.211 00:00:11.764 TCP 12.102.0.1:59756 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:55:24.021 00:00:11.758 TCP 12.102.0.1:49994 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:56:25.820 00:00:11.758 TCP 12.102.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:57:38.717 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 08:57:38.888 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-25 08:57:38.582 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-25 08:57:38.801 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-25 08:57:38.832 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-25 08:57:38.692 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-25 08:57:38.559 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-25 08:57:27.612 00:00:11.799 TCP 12.102.0.1:38444 -> 1.101.0.1:3000 11 1507 1 2025-11-25 08:53:12.090 00:06:00.175 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-25 08:58:29.449 00:00:11.814 TCP 12.102.0.1:33830 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123630, total packets: 1132, avg bps: 265, avg pps: 0, avg bpp: 109 Time window: 2025-11-25 07:57:12 - 2025-11-25 08:59:12 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0042s User: 0.0025s Wall: 0.0022s flows/second: 71302.7 Runtime: 0.0022s