Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 04:59:07.001 00:00:11.797 TCP 12.102.0.1:60570 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:55:14.860 00:06:00.118 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:00:08.842 00:00:11.762 TCP 12.102.0.1:43318 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:00:27.084 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.179 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.209 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.352 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.414 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.418 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.331 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:01:10.655 00:00:11.839 TCP 12.102.0.1:44082 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:02:12.544 00:00:12.094 TCP 12.102.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:58:14.857 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 05:03:14.679 00:00:11.797 TCP 12.102.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:04:16.521 00:00:11.800 TCP 12.102.0.1:43076 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:05:27.499 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:05:27.490 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.662 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.423 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.522 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.603 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.465 00:00:00.025 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:05:18.365 00:00:11.829 TCP 12.102.0.1:59410 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:06:20.227 00:00:11.804 TCP 12.102.0.1:42590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:02:14.862 00:06:00.118 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:07:22.075 00:00:11.763 TCP 12.102.0.1:39808 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:08:23.875 00:00:11.804 TCP 12.102.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:09:25.719 00:00:12.130 TCP 12.102.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:05:14.860 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 05:10:27.468 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:10:27.684 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.706 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.727 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.491 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.763 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.492 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.890 00:00:11.927 TCP 12.102.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:11:29.857 00:00:12.664 TCP 12.102.0.1:52678 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:12:32.570 00:00:11.800 TCP 12.102.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:13:34.407 00:00:11.804 TCP 12.102.0.1:50186 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:09:14.865 00:06:00.117 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:14:36.251 00:00:11.758 TCP 12.102.0.1:49642 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:15:27.731 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.653 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.758 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.758 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.825 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.867 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.736 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:15:38.069 00:00:11.801 TCP 12.102.0.1:44964 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:16:39.905 00:00:11.824 TCP 12.102.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:12:14.862 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 05:17:41.760 00:00:11.764 TCP 12.102.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:18:43.561 00:00:11.803 TCP 12.102.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:19:45.404 00:00:11.807 TCP 12.102.0.1:44210 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:20:27.970 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:20:28.025 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:20:28.133 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:20:28.129 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:20:27.993 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:20:28.003 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:20:27.997 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:20:47.250 00:00:11.817 TCP 12.102.0.1:38914 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:16:14.865 00:06:00.118 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:21:49.105 00:00:11.764 TCP 12.102.0.1:38978 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:22:50.907 00:00:11.838 TCP 12.102.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:23:52.779 00:00:11.772 TCP 12.102.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:19:14.864 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 05:24:54.590 00:00:11.809 TCP 12.102.0.1:58502 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:25:28.058 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:25:27.847 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:25:27.963 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:25:27.941 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:25:27.738 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:25:28.052 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:25:27.824 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:25:56.436 00:00:11.823 TCP 12.102.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:26:58.298 00:00:11.798 TCP 12.102.0.1:55434 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:28:00.136 00:00:11.809 TCP 12.102.0.1:44726 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:23:14.867 00:06:00.121 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:29:01.983 00:00:11.800 TCP 12.102.0.1:48960 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:30:03.827 00:00:11.857 TCP 12.102.0.1:54154 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:30:27.984 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:30:28.037 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:30:28.080 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:30:28.125 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:30:28.008 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:30:28.005 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:30:28.021 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:26:14.866 00:06:00.124 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 05:31:05.729 00:00:11.769 TCP 12.102.0.1:50064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:32:07.543 00:00:11.808 TCP 12.102.0.1:59800 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:33:09.390 00:00:11.822 TCP 12.102.0.1:47106 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:34:11.253 00:00:11.769 TCP 12.102.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:30:14.871 00:06:00.117 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:35:28.177 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:35:28.010 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:35:28.224 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:35:28.088 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:35:28.096 00:00:00.039 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:35:27.891 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:35:13.074 00:00:11.801 TCP 12.102.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:35:28.202 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:36:14.917 00:00:11.831 TCP 12.102.0.1:37946 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:37:16.786 00:00:11.799 TCP 12.102.0.1:54834 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:33:14.869 00:06:00.122 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 05:38:18.628 00:00:11.760 TCP 12.102.0.1:58424 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:39:20.425 00:00:11.802 TCP 12.102.0.1:60894 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:40:28.165 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.320 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.144 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.261 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:40:27.940 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.058 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.121 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:40:22.269 00:00:11.771 TCP 12.102.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:41:24.078 00:00:11.803 TCP 12.102.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:37:14.872 00:06:00.116 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:42:25.921 00:00:11.823 TCP 12.102.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:43:27.781 00:00:11.764 TCP 12.102.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:44:29.584 00:00:11.802 TCP 12.102.0.1:37724 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:40:14.870 00:06:00.123 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 05:45:28.369 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:45:28.403 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.493 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.373 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.391 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.492 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.315 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:45:31.424 00:00:11.796 TCP 12.102.0.1:35846 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:46:33.260 00:00:11.763 TCP 12.102.0.1:57138 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:47:35.078 00:00:11.797 TCP 12.102.0.1:52084 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:48:36.915 00:00:11.786 TCP 12.102.0.1:54638 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:44:14.874 00:06:00.117 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:49:38.738 00:00:11.802 TCP 12.102.0.1:44476 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:50:28.625 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:50:28.214 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.593 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.331 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.648 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.785 00:00:00.008 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.066 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:50:40.579 00:00:11.774 TCP 12.102.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:51:42.389 00:00:11.810 TCP 12.102.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:47:14.872 00:06:00.121 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 05:52:44.240 00:00:11.805 TCP 12.102.0.1:33546 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:53:46.083 00:00:11.801 TCP 12.102.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:54:47.925 00:00:11.830 TCP 12.102.0.1:52396 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:55:28.487 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 05:55:28.618 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.616 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.534 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.510 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.502 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.652 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 05:55:49.795 00:00:12.238 TCP 12.102.0.1:48182 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:51:14.875 00:06:00.116 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 05:56:52.079 00:00:11.801 TCP 12.102.0.1:39922 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:57:53.922 00:00:11.783 TCP 12.102.0.1:39432 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 123211, total packets: 1128, avg bps: 261, avg pps: 0, avg bpp: 109 Time window: 2025-12-01 04:55:14 - 2025-12-01 05:58:05 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0032s User: 0.0011s Wall: 0.0015s flows/second: 103106.7 Runtime: 0.0016s