Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 08:59:11.623 00:00:11.855 TCP 12.102.0.1:49878 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:00:13.517 00:00:11.827 TCP 12.102.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:01:01.882 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.971 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.854 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.717 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.741 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.712 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.695 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 08:56:15.368 00:06:00.184 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:01:15.383 00:00:12.770 TCP 12.102.0.1:59838 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:57:15.370 00:06:00.179 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 09:02:18.212 00:00:11.806 TCP 12.102.0.1:53798 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:03:20.080 00:00:12.619 TCP 12.102.0.1:33914 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:04:22.736 00:00:12.406 TCP 12.102.0.1:44676 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:05:25.184 00:00:11.768 TCP 12.102.0.1:43982 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:06:01.201 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.488 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.301 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.026 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.300 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.255 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.003 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:06:26.991 00:00:11.800 TCP 12.102.0.1:38516 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:07:28.833 00:00:11.805 TCP 12.102.0.1:47172 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:03:15.369 00:06:00.184 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:08:30.675 00:00:11.808 TCP 12.102.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:04:15.372 00:06:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 09:09:32.519 00:00:11.802 TCP 12.102.0.1:53400 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:10:34.356 00:00:11.769 TCP 12.102.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:11:01.212 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.302 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.413 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.071 00:00:00.034 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.081 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.341 00:00:00.020 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.048 00:00:00.034 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:11:36.164 00:00:11.845 TCP 12.102.0.1:48422 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:12:38.041 00:00:11.765 TCP 12.102.0.1:59832 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:13:39.839 00:00:11.776 TCP 12.102.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:14:41.665 00:00:11.860 TCP 12.102.0.1:40000 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:10:15.370 00:06:00.184 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:16:01.531 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:15:43.570 00:00:11.801 TCP 12.102.0.1:41560 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:16:01.186 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.509 00:00:00.026 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.675 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.553 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.430 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.384 00:00:00.028 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:11:15.371 00:06:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 09:16:45.409 00:00:11.757 TCP 12.102.0.1:40932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:17:47.204 00:00:11.873 TCP 12.102.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:18:49.119 00:00:11.760 TCP 12.102.0.1:45268 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:19:50.923 00:00:11.818 TCP 12.102.0.1:47586 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:21:01.397 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:21:01.669 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.544 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.458 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.420 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.802 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.558 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:20:52.777 00:00:11.764 TCP 12.102.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:21:54.580 00:00:11.799 TCP 12.102.0.1:42854 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:17:15.370 00:06:00.187 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:22:56.419 00:00:11.767 TCP 12.102.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:18:15.373 00:06:00.181 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 09:23:58.225 00:00:11.800 TCP 12.102.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:25:00.075 00:00:11.799 TCP 12.102.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:26:01.548 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.462 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.468 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.518 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.781 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.666 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.495 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:26:01.913 00:00:11.776 TCP 12.102.0.1:60552 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:27:03.726 00:00:11.806 TCP 12.102.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:28:05.565 00:00:11.804 TCP 12.102.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:24:15.378 00:06:00.182 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:29:07.407 00:00:11.798 TCP 12.102.0.1:59456 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:25:15.373 00:06:00.184 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 09:30:09.247 00:00:11.799 TCP 12.102.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:31:01.835 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.916 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.878 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.728 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.918 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.740 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.707 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:31:11.086 00:00:11.814 TCP 12.102.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:32:12.936 00:00:11.811 TCP 12.102.0.1:48150 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:33:14.788 00:00:11.795 TCP 12.102.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:34:16.620 00:00:11.837 TCP 12.102.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:35:18.495 00:00:11.766 TCP 12.102.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:36:01.646 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:36:01.785 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.840 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.862 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.894 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.902 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.668 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:31:15.376 00:06:00.186 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:36:20.304 00:00:11.802 TCP 12.102.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:32:15.378 00:06:00.181 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 09:37:22.145 00:00:11.783 TCP 12.102.0.1:37532 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:38:23.972 00:00:11.818 TCP 12.102.0.1:59166 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:39:25.825 00:00:11.815 TCP 12.102.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:40:27.678 00:00:11.815 TCP 12.102.0.1:44880 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:41:01.876 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.057 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.126 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.039 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.140 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.020 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.017 00:00:00.020 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:41:29.533 00:00:11.799 TCP 12.102.0.1:43352 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:42:31.369 00:00:11.818 TCP 12.102.0.1:52434 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:38:15.378 00:06:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:43:33.227 00:00:11.803 TCP 12.102.0.1:46314 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:39:15.382 00:06:00.180 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 09:44:35.080 00:00:11.800 TCP 12.102.0.1:45392 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:45:36.923 00:00:11.818 TCP 12.102.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:46:01.964 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:46:01.745 00:00:00.031 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:46:01.890 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:46:01.981 00:00:00.025 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:46:01.986 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:46:02.064 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:46:01.743 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:46:38.782 00:00:12.259 TCP 12.102.0.1:36262 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:47:41.085 00:00:11.810 TCP 12.102.0.1:46524 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:48:42.927 00:00:11.814 TCP 12.102.0.1:59292 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:49:44.781 00:00:11.760 TCP 12.102.0.1:54474 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:45:15.380 00:06:00.185 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:50:46.582 00:00:11.805 TCP 12.102.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:51:02.110 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:51:02.212 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.188 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.177 00:00:00.045 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.132 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.088 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.137 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:46:15.382 00:06:00.181 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-02 09:51:48.436 00:00:11.810 TCP 12.102.0.1:49480 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:52:50.282 00:00:11.802 TCP 12.102.0.1:35550 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:53:52.128 00:00:11.800 TCP 12.102.0.1:38620 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:54:53.974 00:00:11.763 TCP 12.102.0.1:52944 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:56:02.522 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-02 09:56:02.369 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.569 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.583 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.544 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.446 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.451 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-02 09:55:55.775 00:00:11.806 TCP 12.102.0.1:53686 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:56:57.622 00:00:11.806 TCP 12.102.0.1:57702 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:52:15.380 00:06:00.187 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-02 09:57:59.475 00:00:12.540 TCP 12.102.0.1:60560 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:53:15.382 00:06:00.182 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 Summary: total flows: 160, total bytes: 124072, total packets: 1142, avg bps: 262, avg pps: 0, avg bpp: 108 Time window: 2025-12-02 08:56:15 - 2025-12-02 09:59:15 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0067s User: 0.0000s Wall: 0.0020s flows/second: 79882.0 Runtime: 0.0020s