Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 19:58:46.821 00:00:11.762 TCP 12.102.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:59:48.635 00:00:11.865 TCP 12.102.0.1:33174 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:55:12.773 00:06:00.147 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:00:50.543 00:00:11.761 TCP 12.102.0.1:44560 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:01:52.344 00:00:11.804 TCP 12.102.0.1:58338 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:02:54.191 00:00:11.804 TCP 12.102.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:03:21.443 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:03:21.349 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:03:21.079 00:00:00.035 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:03:21.472 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:03:21.465 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:03:21.469 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:03:21.561 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:03:56.040 00:00:11.802 TCP 12.102.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:00:12.773 00:06:00.153 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 20:04:57.884 00:00:11.805 TCP 12.102.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:05:59.722 00:00:11.804 TCP 12.102.0.1:46468 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:07:01.567 00:00:11.794 TCP 12.102.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:02:12.774 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:08:03.406 00:00:11.802 TCP 12.102.0.1:52446 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:08:21.242 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:08:21.324 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:08:21.306 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:08:21.109 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:08:21.444 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:08:21.443 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:08:21.265 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:09:05.244 00:00:11.761 TCP 12.102.0.1:46576 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:10:07.069 00:00:11.799 TCP 12.102.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:11:08.911 00:00:11.795 TCP 12.102.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:07:12.779 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 20:12:10.747 00:00:11.801 TCP 12.102.0.1:52480 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:13:21.330 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:13:21.329 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:13:21.196 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:13:21.370 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:13:21.354 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:13:21.356 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:13:21.371 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:13:12.585 00:00:11.833 TCP 12.102.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:09:12.781 00:06:00.144 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:14:14.453 00:00:11.798 TCP 12.102.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:15:16.293 00:00:11.801 TCP 12.102.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:16:18.132 00:00:11.803 TCP 12.102.0.1:48704 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:17:19.979 00:00:11.802 TCP 12.102.0.1:47470 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:18:21.467 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:18:21.483 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:18:21.250 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:18:21.604 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:18:21.525 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:18:21.462 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:18:21.441 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:18:21.821 00:00:11.800 TCP 12.102.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:14:12.781 00:06:00.149 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 20:19:23.656 00:00:11.801 TCP 12.102.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:20:25.493 00:00:11.802 TCP 12.102.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:16:12.793 00:06:00.135 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:21:27.337 00:00:11.804 TCP 12.102.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:22:29.179 00:00:11.805 TCP 12.102.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:23:21.316 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:23:21.623 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:23:21.720 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:23:21.492 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:23:21.338 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:23:21.674 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:23:21.595 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:23:31.030 00:00:11.796 TCP 12.102.0.1:44004 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:24:32.869 00:00:11.801 TCP 12.102.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:25:34.709 00:00:11.801 TCP 12.102.0.1:36072 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:21:12.791 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 20:26:36.547 00:00:12.006 TCP 12.102.0.1:33134 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:27:38.594 00:00:11.753 TCP 12.102.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:23:12.793 00:06:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:28:21.706 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.562 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.698 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.768 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.680 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.686 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.656 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:28:40.385 00:00:11.802 TCP 12.102.0.1:35500 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:29:42.224 00:00:11.807 TCP 12.102.0.1:34820 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:30:44.080 00:00:11.796 TCP 12.102.0.1:52888 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:31:45.914 00:00:11.817 TCP 12.102.0.1:47866 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:32:47.769 00:00:11.760 TCP 12.102.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:28:12.793 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 20:33:21.932 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:33:21.783 00:00:00.030 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:33:22.046 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:33:22.095 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:33:21.955 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:33:22.152 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:33:21.783 00:00:00.030 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:33:49.566 00:00:11.797 TCP 12.102.0.1:57476 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:34:51.404 00:00:11.804 TCP 12.102.0.1:57998 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:30:12.795 00:06:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:35:53.246 00:00:11.801 TCP 12.102.0.1:37202 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:36:55.091 00:00:11.803 TCP 12.102.0.1:34318 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:37:56.938 00:00:11.974 TCP 12.102.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:38:21.600 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:38:21.841 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:38:21.904 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:38:21.921 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:38:21.624 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:38:21.822 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:38:21.808 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:38:58.949 00:00:11.810 TCP 12.102.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:40:00.802 00:00:11.809 TCP 12.102.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:35:12.794 00:06:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 20:41:02.654 00:00:11.812 TCP 12.102.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:37:12.797 00:06:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:42:04.500 00:00:11.799 TCP 12.102.0.1:52368 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:43:06.340 00:00:11.805 TCP 12.102.0.1:49144 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:43:21.769 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:43:21.706 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:43:21.715 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:43:22.049 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:43:21.793 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:43:22.014 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:43:21.978 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:44:08.182 00:00:11.797 TCP 12.102.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:45:10.010 00:00:12.111 TCP 12.102.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:46:12.155 00:00:11.805 TCP 12.102.0.1:46790 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:42:12.796 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 20:47:14.000 00:00:11.762 TCP 12.102.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:48:22.050 00:00:00.040 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:48:22.119 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:48:21.965 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:48:22.268 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:48:22.073 00:00:00.041 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:48:22.066 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:48:22.088 00:00:00.035 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:48:15.800 00:00:11.796 TCP 12.102.0.1:50076 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:44:12.799 00:06:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:49:17.640 00:00:11.811 TCP 12.102.0.1:57890 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:50:19.488 00:00:11.764 TCP 12.102.0.1:42922 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:51:21.295 00:00:11.850 TCP 12.102.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:52:23.187 00:00:11.763 TCP 12.102.0.1:48512 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:53:22.375 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:53:22.403 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:53:22.397 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:53:22.322 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:53:22.192 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:53:22.276 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:53:22.300 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:53:24.989 00:00:11.798 TCP 12.102.0.1:49170 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:49:12.798 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-26 20:54:26.826 00:00:11.802 TCP 12.102.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:55:28.661 00:00:11.759 TCP 12.102.0.1:59598 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:51:12.801 00:06:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-26 20:56:30.457 00:00:11.760 TCP 12.102.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:57:32.259 00:00:11.796 TCP 12.102.0.1:36076 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:58:21.962 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-26 20:58:22.199 00:00:00.037 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-26 20:58:22.226 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-26 20:58:22.306 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-26 20:58:22.361 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:58:22.267 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-26 20:58:21.985 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-26 20:58:34.095 00:00:11.813 TCP 12.102.0.1:44664 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124718, total packets: 1139, avg bps: 261, avg pps: 0, avg bpp: 109 Time window: 2025-11-26 19:55:12 - 2025-11-26 20:58:45 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0038s User: 0.0028s Wall: 0.0022s flows/second: 74178.0 Runtime: 0.0022s