Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 01:59:42.642 00:00:11.786 TCP 12.102.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:55:12.447 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:00:44.469 00:00:11.807 TCP 12.102.0.1:55770 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:01:46.313 00:00:11.812 TCP 12.102.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:57:12.450 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:02:48.162 00:00:11.807 TCP 12.102.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:02:59.505 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:02:59.623 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:02:59.531 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:02:59.459 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:02:59.631 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:02:59.382 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:02:59.436 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:03:50.010 00:00:11.793 TCP 12.102.0.1:50562 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:04:51.840 00:00:11.801 TCP 12.102.0.1:50276 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:05:53.679 00:00:11.764 TCP 12.102.0.1:56880 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:06:55.486 00:00:11.767 TCP 12.102.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:02:12.448 00:06:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:07:59.270 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:07:59.659 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:07:59.629 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:07:59.292 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:07:59.527 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:07:59.491 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:07:59.285 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:07:57.291 00:00:11.807 TCP 12.102.0.1:59144 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:08:59.140 00:00:11.811 TCP 12.102.0.1:34576 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:04:12.451 00:06:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:10:00.996 00:00:11.807 TCP 12.102.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:11:02.854 00:00:11.760 TCP 12.102.0.1:48634 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:12:04.653 00:00:11.813 TCP 12.102.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:12:59.841 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:12:59.922 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:12:59.849 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:12:59.768 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:12:59.863 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:12:59.930 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:12:59.609 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:13:06.507 00:00:11.810 TCP 12.102.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:09:12.450 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:14:08.356 00:00:11.822 TCP 12.102.0.1:51500 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:15:10.217 00:00:11.801 TCP 12.102.0.1:57026 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:11:12.454 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:16:12.073 00:00:11.793 TCP 12.102.0.1:59336 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:17:13.910 00:00:12.050 TCP 12.102.0.1:58328 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:17:59.695 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:17:59.785 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:17:59.731 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:17:59.665 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:17:59.693 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:17:59.672 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:17:59.642 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:18:16.001 00:00:11.762 TCP 12.102.0.1:32770 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:19:17.821 00:00:11.803 TCP 12.102.0.1:50032 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:20:19.660 00:00:11.767 TCP 12.102.0.1:60612 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:16:12.453 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:21:21.465 00:00:11.801 TCP 12.102.0.1:49206 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:22:23.311 00:00:11.798 TCP 12.102.0.1:52164 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:22:59.978 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:22:59.939 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:22:59.798 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:22:59.614 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:22:59.631 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:22:59.761 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:22:59.777 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:18:12.456 00:06:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:23:25.147 00:00:11.832 TCP 12.102.0.1:53036 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:24:27.027 00:00:12.078 TCP 12.102.0.1:36456 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:25:29.144 00:00:11.813 TCP 12.102.0.1:57242 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:26:30.987 00:00:11.803 TCP 12.102.0.1:33284 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:27:32.822 00:00:11.803 TCP 12.102.0.1:42934 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:27:59.836 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:27:59.791 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:28:00.132 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:27:59.839 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:27:59.961 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:27:59.694 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:27:59.819 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:23:12.455 00:06:00.164 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:28:34.663 00:00:11.804 TCP 12.102.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:29:36.507 00:00:11.806 TCP 12.102.0.1:54892 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:25:12.458 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:30:38.353 00:00:11.813 TCP 12.102.0.1:38986 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:31:40.205 00:00:11.803 TCP 12.102.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:32:42.064 00:00:11.819 TCP 12.102.0.1:39040 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:33:00.177 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:33:00.049 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:33:00.173 00:00:00.040 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:33:00.001 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:33:00.035 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:32:59.996 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:32:59.980 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:33:43.921 00:00:11.823 TCP 12.102.0.1:43826 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:34:45.778 00:00:11.802 TCP 12.102.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:30:12.455 00:06:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:35:47.620 00:00:11.804 TCP 12.102.0.1:49918 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:36:49.464 00:00:11.808 TCP 12.102.0.1:50646 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:32:12.457 00:06:00.161 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:38:00.295 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:38:00.135 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:38:00.288 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:37:59.768 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:37:51.310 00:00:11.812 TCP 12.102.0.1:57724 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:38:00.509 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:37:59.867 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:37:59.745 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:38:53.160 00:00:11.760 TCP 12.102.0.1:56572 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:39:54.960 00:00:11.802 TCP 12.102.0.1:57122 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:40:56.802 00:00:12.236 TCP 12.102.0.1:39276 -> 1.101.0.1:3000 15 1926 1 2025-11-26 02:41:59.080 00:00:11.807 TCP 12.102.0.1:37956 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:37:12.457 00:06:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:43:00.128 00:00:00.045 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:43:00.113 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:43:00.269 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:43:00.001 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:43:00.420 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:43:00.214 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:42:59.977 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:43:00.938 00:00:11.863 TCP 12.102.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:39:12.461 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:44:02.842 00:00:11.805 TCP 12.102.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:45:04.688 00:00:11.762 TCP 12.102.0.1:53400 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:46:06.480 00:00:11.821 TCP 12.102.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:47:08.328 00:00:11.764 TCP 12.102.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:48:00.147 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:48:00.290 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:48:00.147 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:48:00.283 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:48:00.493 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:48:00.065 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:48:00.124 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:48:10.130 00:00:11.796 TCP 12.102.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:44:12.459 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:49:11.963 00:00:11.808 TCP 12.102.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:50:13.811 00:00:11.800 TCP 12.102.0.1:50300 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:46:12.461 00:06:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:51:15.649 00:00:11.814 TCP 12.102.0.1:39356 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:52:17.501 00:00:11.816 TCP 12.102.0.1:49946 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:53:00.186 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:53:00.199 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:53:00.429 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:53:00.391 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:53:00.583 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:53:00.475 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:53:00.452 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:53:19.353 00:00:11.822 TCP 12.102.0.1:59924 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:54:21.212 00:00:11.812 TCP 12.102.0.1:38346 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:55:23.085 00:00:11.807 TCP 12.102.0.1:53632 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:51:12.459 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 02:56:24.931 00:00:11.828 TCP 12.102.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:57:26.787 00:00:11.863 TCP 12.102.0.1:53494 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:58:00.619 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 02:58:00.450 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:58:00.478 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 02:58:00.432 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 02:58:00.639 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 02:58:00.587 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 02:58:00.409 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 02:53:12.465 00:06:00.157 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 02:58:28.693 00:00:11.804 TCP 12.102.0.1:50660 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124491, total packets: 1146, avg bps: 259, avg pps: 0, avg bpp: 108 Time window: 2025-11-26 01:55:12 - 2025-11-26 02:59:12 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0039s User: 0.0019s Wall: 0.0030s flows/second: 53422.1 Runtime: 0.0030s