Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 12:54:15.001 00:06:00.158 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 12:55:14.995 00:05:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 12:59:38.470 00:00:11.799 TCP 12.102.0.1:50132 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:00:37.026 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:00:36.991 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:00:37.183 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:00:37.165 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:00:37.049 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:00:37.016 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:00:36.974 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:00:40.308 00:00:11.806 TCP 12.102.0.1:50100 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:01:42.151 00:00:11.767 TCP 12.102.0.1:45318 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:02:43.959 00:00:11.796 TCP 12.102.0.1:46678 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:03:45.798 00:00:11.798 TCP 12.102.0.1:57204 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:04:47.634 00:00:11.829 TCP 12.102.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:01:14.998 00:05:00.162 TCP 179.10.12.10:179 -> 179.10.12.12:58070 12 738 1 2025-12-01 13:01:14.996 00:05:00.167 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 13:05:37.220 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:05:37.202 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:05:37.250 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:05:37.103 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:05:37.198 00:00:00.055 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:05:36.974 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:05:37.082 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:05:49.505 00:00:11.805 TCP 12.102.0.1:41318 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:06:51.347 00:00:11.804 TCP 12.102.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:07:53.197 00:00:11.804 TCP 12.102.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:08:55.068 00:00:11.805 TCP 12.102.0.1:43128 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:09:56.922 00:00:11.840 TCP 12.102.0.1:35926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:10:37.088 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:10:37.260 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:10:37.251 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:10:37.207 00:00:00.039 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:10:37.184 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:10:37.222 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:10:37.228 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:10:58.801 00:00:11.768 TCP 12.102.0.1:45674 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:07:15.000 00:05:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 12 738 1 2025-12-01 13:12:00.614 00:00:11.805 TCP 12.102.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:07:15.002 00:06:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 13:13:02.456 00:00:11.819 TCP 12.102.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:14:04.312 00:00:11.756 TCP 12.102.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:15:06.107 00:00:12.840 TCP 12.102.0.1:35488 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:15:37.406 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:15:37.332 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:15:37.539 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:15:37.554 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:15:37.429 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:15:37.563 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:15:37.332 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:16:08.988 00:00:11.805 TCP 12.102.0.1:50156 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:17:10.829 00:00:11.799 TCP 12.102.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:13:15.003 00:06:00.163 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 13:18:12.680 00:00:11.763 TCP 12.102.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:14:15.021 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 13:19:14.478 00:00:11.801 TCP 12.102.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:20:16.316 00:00:11.809 TCP 12.102.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:20:37.407 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:20:37.586 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:20:37.365 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:20:37.520 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:20:37.420 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:20:37.416 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:20:37.497 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:21:18.156 00:00:11.800 TCP 12.102.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:22:19.999 00:00:11.857 TCP 12.102.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:23:21.895 00:00:11.801 TCP 12.102.0.1:55572 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:24:23.735 00:00:11.776 TCP 12.102.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:20:15.038 00:06:00.129 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 13:25:37.690 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:25:37.983 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:25:37.940 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:25:25.542 00:00:11.757 TCP 12.102.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:25:37.947 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:25:37.713 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:25:37.932 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:25:37.810 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:21:15.042 00:06:00.124 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 13:26:27.341 00:00:11.801 TCP 12.102.0.1:39632 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:27:29.182 00:00:12.191 TCP 12.102.0.1:41580 -> 1.101.0.1:3000 15 1926 1 2025-12-01 13:28:31.415 00:00:11.800 TCP 12.102.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:29:33.258 00:00:11.804 TCP 12.102.0.1:45454 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:30:37.544 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:30:37.616 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:30:37.663 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:30:37.533 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:30:37.715 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:30:37.650 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:30:37.509 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:30:35.094 00:00:11.759 TCP 12.102.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:31:36.891 00:00:11.802 TCP 12.102.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:27:15.041 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 13:32:38.731 00:00:11.804 TCP 12.102.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:28:15.044 00:06:00.123 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 13:33:40.571 00:00:11.801 TCP 12.102.0.1:55632 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:34:42.412 00:00:11.771 TCP 12.102.0.1:51058 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:35:37.659 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:35:37.895 00:00:00.007 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:35:37.792 00:00:00.035 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:35:37.847 00:00:00.009 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:35:37.682 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:35:37.717 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:35:37.847 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:35:44.227 00:00:11.800 TCP 12.102.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:36:46.074 00:00:11.798 TCP 12.102.0.1:57584 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:37:47.913 00:00:11.826 TCP 12.102.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:38:49.778 00:00:11.759 TCP 12.102.0.1:57562 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:34:15.045 00:06:00.128 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 13:39:51.576 00:00:12.279 TCP 12.102.0.1:37692 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:35:15.046 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 13:40:37.590 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:40:37.928 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:40:37.713 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:40:37.937 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:40:37.729 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:40:37.847 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:40:37.615 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:40:53.888 00:00:11.810 TCP 12.102.0.1:39938 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:41:55.740 00:00:11.804 TCP 12.102.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:42:57.585 00:00:11.808 TCP 12.102.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:43:59.440 00:00:11.813 TCP 12.102.0.1:44804 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:45:01.301 00:00:11.807 TCP 12.102.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:45:38.004 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:45:37.743 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:45:38.130 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:45:38.044 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:45:37.971 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:45:37.896 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:45:38.021 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:41:15.045 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 13:46:03.146 00:00:11.819 TCP 12.102.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:42:15.047 00:06:00.122 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 13:47:05.012 00:00:12.337 TCP 12.102.0.1:34608 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:48:07.391 00:00:12.238 TCP 12.102.0.1:45172 -> 1.101.0.1:3000 15 1926 1 2025-12-01 13:49:09.674 00:00:11.804 TCP 12.102.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:50:11.514 00:00:11.772 TCP 12.102.0.1:49690 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:50:38.256 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:50:38.243 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:50:38.033 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:50:37.753 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:50:38.279 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:50:38.344 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:50:37.910 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:51:13.327 00:00:11.826 TCP 12.102.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:52:15.196 00:00:11.811 TCP 12.102.0.1:42712 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:48:15.046 00:06:00.127 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 13:53:17.073 00:00:11.801 TCP 12.102.0.1:35906 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:49:15.052 00:06:00.120 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 13:54:18.914 00:00:11.826 TCP 12.102.0.1:46510 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:55:20.777 00:00:11.802 TCP 12.102.0.1:41382 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:55:38.143 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 13:55:38.096 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 13:55:38.106 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:55:38.414 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 13:55:38.165 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 13:55:38.015 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 13:55:38.173 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 13:56:22.619 00:00:11.793 TCP 12.102.0.1:52274 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:57:24.455 00:00:11.771 TCP 12.102.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:58:26.264 00:00:11.799 TCP 12.102.0.1:56206 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 124418, total packets: 1142, avg bps: 257, avg pps: 0, avg bpp: 108 Time window: 2025-12-01 12:54:15 - 2025-12-01 13:58:38 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0048s User: 0.0016s Wall: 0.0021s flows/second: 74764.8 Runtime: 0.0022s