Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 02:59:16.570 00:00:11.827 TCP 12.102.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:00:18.429 00:00:11.761 TCP 12.102.0.1:47256 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:00:53.878 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.931 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:00:53.702 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:00:53.877 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:00:53.900 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:00:53.763 00:00:00.038 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:00:54.036 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:01:20.226 00:00:11.811 TCP 12.102.0.1:54820 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:02:22.082 00:00:11.812 TCP 12.102.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:03:23.929 00:00:11.816 TCP 12.102.0.1:58332 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:59:15.261 00:06:00.186 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 03:04:25.783 00:00:11.811 TCP 12.102.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:00:15.264 00:06:00.181 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 03:05:27.626 00:00:11.797 TCP 12.102.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:05:53.915 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:05:53.885 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:05:53.963 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:05:53.863 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:05:54.188 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:05:54.183 00:00:00.041 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:05:54.108 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:06:29.464 00:00:11.808 TCP 12.102.0.1:59922 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:07:31.317 00:00:12.100 TCP 12.102.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:08:33.455 00:00:11.804 TCP 12.102.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:09:35.304 00:00:11.760 TCP 12.102.0.1:41062 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:10:37.100 00:00:11.763 TCP 12.102.0.1:38282 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:10:53.957 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:10:54.457 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:10:54.296 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:10:54.150 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:10:54.448 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:10:54.171 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:10:54.149 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:06:15.263 00:06:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 03:11:38.903 00:00:11.802 TCP 12.102.0.1:53670 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:07:15.265 00:06:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 03:12:40.743 00:00:11.806 TCP 12.102.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:13:42.582 00:00:11.756 TCP 12.102.0.1:36386 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:14:44.378 00:00:11.831 TCP 12.102.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:15:54.457 00:00:00.030 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:15:54.099 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:15:54.159 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:15:46.230 00:00:11.808 TCP 12.102.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:15:54.641 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:15:54.480 00:00:00.030 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:15:54.207 00:00:00.048 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:15:54.150 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:16:48.082 00:00:11.802 TCP 12.102.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:17:49.922 00:00:11.832 TCP 12.102.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:13:15.264 00:06:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 03:18:51.792 00:00:11.841 TCP 12.102.0.1:42874 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:14:15.266 00:06:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 03:19:53.667 00:00:11.861 TCP 12.102.0.1:34642 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:20:54.323 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.206 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:20:54.390 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:20:54.426 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:20:54.345 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:20:54.301 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:20:54.315 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:20:55.572 00:00:12.844 TCP 12.102.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:21:58.457 00:00:11.761 TCP 12.102.0.1:57794 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:23:00.257 00:00:11.804 TCP 12.102.0.1:36524 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:24:02.101 00:00:11.803 TCP 12.102.0.1:37250 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:20:15.265 00:06:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 03:25:03.946 00:00:11.763 TCP 12.102.0.1:50172 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:25:54.427 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.297 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:25:54.480 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:25:54.596 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:25:54.451 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:25:54.396 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:25:54.422 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:26:05.754 00:00:11.802 TCP 12.102.0.1:38140 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:21:15.267 00:06:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 03:27:07.595 00:00:11.803 TCP 12.102.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:28:09.440 00:00:11.815 TCP 12.102.0.1:37996 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:29:11.293 00:00:11.761 TCP 12.102.0.1:49414 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:30:13.094 00:00:11.813 TCP 12.102.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:30:54.580 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.682 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.746 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.554 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.588 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.664 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.533 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:31:14.942 00:00:11.808 TCP 12.102.0.1:58044 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:27:15.272 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 03:32:16.785 00:00:11.802 TCP 12.102.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:28:15.275 00:06:00.175 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 03:33:18.629 00:00:11.802 TCP 12.102.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:34:20.471 00:00:11.809 TCP 12.102.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:35:22.318 00:00:11.812 TCP 12.102.0.1:35776 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:35:54.736 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.810 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:35:54.821 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:35:54.758 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:35:54.693 00:00:00.026 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:35:54.701 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:35:54.730 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:36:24.165 00:00:11.803 TCP 12.102.0.1:40908 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:37:26.007 00:00:12.307 TCP 12.102.0.1:53170 -> 1.101.0.1:3000 15 1926 1 2025-12-02 03:38:28.357 00:00:11.785 TCP 12.102.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:34:15.274 00:06:00.177 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 03:39:30.186 00:00:11.803 TCP 12.102.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:35:15.277 00:06:00.172 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 03:40:32.034 00:00:11.815 TCP 12.102.0.1:51140 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:40:54.822 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:40:54.584 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:40:54.745 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:40:54.672 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:40:54.649 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:40:54.592 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:40:54.649 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:41:33.891 00:00:11.769 TCP 12.102.0.1:50214 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:42:35.698 00:00:11.797 TCP 12.102.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:43:37.533 00:00:11.757 TCP 12.102.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:44:39.338 00:00:11.758 TCP 12.102.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:45:41.136 00:00:11.769 TCP 12.102.0.1:41558 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:45:54.642 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.867 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:45:54.724 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:45:54.666 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:45:54.902 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:45:54.810 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:45:54.772 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:41:15.276 00:06:00.179 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 03:46:42.958 00:00:11.808 TCP 12.102.0.1:51392 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:42:15.279 00:06:00.177 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 03:47:44.813 00:00:11.802 TCP 12.102.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:48:46.655 00:00:11.767 TCP 12.102.0.1:49982 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:49:48.460 00:00:11.841 TCP 12.102.0.1:59664 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:50:54.866 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.804 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:50:54.993 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:50:55.032 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:50:54.890 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:50:54.725 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:50:54.769 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:50:50.339 00:00:11.760 TCP 12.102.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:51:52.141 00:00:11.830 TCP 12.102.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:52:54.007 00:00:12.239 TCP 12.102.0.1:40674 -> 1.101.0.1:3000 15 1926 1 2025-12-02 03:48:15.281 00:06:00.178 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 03:53:56.277 00:00:11.806 TCP 12.102.0.1:50846 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:49:15.279 00:06:00.177 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 03:54:58.120 00:00:11.803 TCP 12.102.0.1:47244 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:55:54.849 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 03:55:55.182 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 03:55:55.044 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 03:55:54.925 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 03:55:54.872 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 03:55:55.137 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 03:55:54.975 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 03:55:59.963 00:00:11.762 TCP 12.102.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:57:01.763 00:00:11.813 TCP 12.102.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:58:03.617 00:00:11.800 TCP 12.102.0.1:60186 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 278, avg pps: 0, avg bpp: 109 Time window: 2025-12-02 02:59:15 - 2025-12-02 03:58:15 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0062s User: 0.0000s Wall: 0.0032s flows/second: 49407.3 Runtime: 0.0032s