Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 17:58:43.202 00:00:11.809 TCP 12.102.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:54:15.104 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 17:59:45.080 00:00:11.807 TCP 12.102.0.1:36770 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:00:43.112 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:00:43.132 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:00:43.156 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:00:43.064 00:00:00.042 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:00:43.124 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:00:42.918 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:00:43.041 00:00:00.043 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:00:46.928 00:00:11.818 TCP 12.102.0.1:58486 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:01:48.786 00:00:11.804 TCP 12.102.0.1:51112 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:02:50.641 00:00:11.804 TCP 12.102.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:03:52.487 00:00:11.812 TCP 12.102.0.1:43346 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:04:54.337 00:00:11.859 TCP 12.102.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:00:15.103 00:06:00.165 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 18:05:43.130 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:05:43.109 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:05:43.140 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:05:43.245 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:05:43.154 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:05:43.208 00:00:00.041 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:05:43.086 00:00:00.045 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:05:56.233 00:00:11.776 TCP 12.102.0.1:46598 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:01:15.106 00:06:00.159 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 18:06:58.075 00:00:11.802 TCP 12.102.0.1:48064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:07:59.915 00:00:12.264 TCP 12.102.0.1:52110 -> 1.101.0.1:3000 15 1926 1 2025-12-01 18:09:02.213 00:00:11.823 TCP 12.102.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:10:04.080 00:00:11.804 TCP 12.102.0.1:33248 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:10:43.200 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:10:43.316 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:10:43.043 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:10:43.465 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:10:43.223 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:10:43.266 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:10:43.154 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:11:05.923 00:00:11.834 TCP 12.102.0.1:38312 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:07:15.104 00:06:00.166 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 18:12:07.782 00:00:11.801 TCP 12.102.0.1:37826 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:08:15.108 00:06:00.160 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 18:13:09.624 00:00:11.802 TCP 12.102.0.1:49590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:14:11.465 00:00:12.170 TCP 12.102.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:15:13.684 00:00:11.813 TCP 12.102.0.1:53288 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:15:43.407 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:15:43.423 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:15:43.443 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:15:43.365 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:15:43.321 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:15:43.371 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:15:43.343 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:16:15.531 00:00:11.853 TCP 12.102.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:17:17.426 00:00:11.840 TCP 12.102.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:18:19.310 00:00:11.799 TCP 12.102.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:14:15.104 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 18:19:21.147 00:00:11.811 TCP 12.102.0.1:43222 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:15:15.107 00:06:00.166 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 18:20:43.322 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:20:22.996 00:00:11.801 TCP 12.102.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:20:43.426 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:20:43.643 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:20:43.465 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:20:43.345 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:20:43.531 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:20:43.513 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:21:24.834 00:00:11.800 TCP 12.102.0.1:54948 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:22:26.670 00:00:11.805 TCP 12.102.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:23:28.515 00:00:11.997 TCP 12.102.0.1:48604 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:24:30.548 00:00:11.811 TCP 12.102.0.1:44098 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:25:43.554 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:25:43.580 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:25:43.876 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:25:43.663 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:25:43.576 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:25:43.384 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:25:43.474 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:25:32.400 00:00:11.760 TCP 12.102.0.1:45612 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:21:15.105 00:06:00.170 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 18:26:34.198 00:00:11.765 TCP 12.102.0.1:48870 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:22:15.108 00:06:00.166 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 18:27:36.007 00:00:11.753 TCP 12.102.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:28:37.799 00:00:11.761 TCP 12.102.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:29:39.602 00:00:13.134 TCP 12.102.0.1:52914 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:30:43.488 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:30:43.618 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:30:43.618 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:30:43.636 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:30:43.511 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:30:43.734 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:30:43.417 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:30:42.763 00:00:11.852 TCP 12.102.0.1:39086 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:31:44.654 00:00:11.827 TCP 12.102.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:32:46.517 00:00:11.802 TCP 12.102.0.1:38030 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:28:15.107 00:06:00.171 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 18:33:48.356 00:00:11.782 TCP 12.102.0.1:54128 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:29:15.110 00:06:00.166 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 18:34:50.180 00:00:11.764 TCP 12.102.0.1:54212 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:35:43.900 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:35:43.963 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:35:44.219 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:35:44.148 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:35:44.229 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:35:44.219 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:35:44.206 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:35:51.982 00:00:11.801 TCP 12.102.0.1:42174 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:36:53.825 00:00:11.799 TCP 12.102.0.1:53766 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:37:55.663 00:00:11.807 TCP 12.102.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:38:57.511 00:00:11.800 TCP 12.102.0.1:40126 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:39:59.346 00:00:11.760 TCP 12.102.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:35:15.107 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 18:40:43.602 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:40:43.898 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:40:43.865 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:40:43.625 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:40:43.867 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:40:43.695 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:40:44.010 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:41:01.147 00:00:11.818 TCP 12.102.0.1:44414 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:36:15.111 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 18:42:03.007 00:00:11.801 TCP 12.102.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:43:04.847 00:00:12.426 TCP 12.102.0.1:41924 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:44:07.319 00:00:11.805 TCP 12.102.0.1:36938 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:45:09.163 00:00:11.766 TCP 12.102.0.1:46528 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:45:43.818 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:45:43.833 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:45:43.802 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:45:43.878 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:45:43.840 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:45:44.111 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:45:44.060 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:46:10.961 00:00:11.762 TCP 12.102.0.1:35424 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:42:15.110 00:06:00.172 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 18:47:12.760 00:00:11.763 TCP 12.102.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:43:15.112 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 18:48:14.557 00:00:11.838 TCP 12.102.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:49:16.433 00:00:11.762 TCP 12.102.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:50:18.234 00:00:11.770 TCP 12.102.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:50:43.950 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:50:43.931 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:50:43.760 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:50:43.974 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:50:44.164 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:50:44.032 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:50:44.040 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:51:20.068 00:00:11.760 TCP 12.102.0.1:53974 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:52:21.868 00:00:11.810 TCP 12.102.0.1:50492 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:53:23.716 00:00:11.767 TCP 12.102.0.1:47700 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:49:15.112 00:06:00.173 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-01 18:54:25.524 00:00:11.799 TCP 12.102.0.1:59604 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:50:15.114 00:06:00.167 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-01 18:55:27.362 00:00:11.820 TCP 12.102.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:55:44.152 00:00:00.025 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-01 18:55:44.165 00:00:00.031 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 18:55:44.337 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-01 18:55:44.041 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-01 18:55:44.073 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-01 18:55:44.258 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-01 18:55:44.019 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-01 18:56:29.223 00:00:11.758 TCP 12.102.0.1:44402 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:57:31.024 00:00:11.953 TCP 12.102.0.1:50604 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:58:33.012 00:00:11.797 TCP 12.102.0.1:51944 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 125137, total packets: 1143, avg bps: 258, avg pps: 0, avg bpp: 109 Time window: 2025-12-01 17:54:15 - 2025-12-01 18:58:44 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0029s User: 0.0029s Wall: 0.0024s flows/second: 66695.4 Runtime: 0.0024s