Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 23:54:16.142 00:06:00.156 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-03 23:59:05.998 00:00:11.756 TCP 12.102.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:00:07.792 00:00:11.798 TCP 12.102.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:01:09.633 00:00:11.794 TCP 12.102.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:01:48.441 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:01:48.604 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:01:48.727 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:01:48.464 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:01:48.348 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:01:48.831 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:01:48.988 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:02:11.465 00:00:11.804 TCP 12.102.0.1:57856 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:03:13.308 00:00:11.812 TCP 12.102.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-12-03 23:59:16.145 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 00:04:15.161 00:00:11.996 TCP 12.102.0.1:45458 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:05:17.195 00:00:11.816 TCP 12.102.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:01:16.149 00:06:00.151 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 00:06:19.085 00:00:11.814 TCP 12.102.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:06:48.213 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:06:48.249 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:06:48.344 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:06:48.352 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:06:48.237 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:06:48.134 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:06:48.149 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:07:20.932 00:00:11.816 TCP 12.102.0.1:52770 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:08:22.790 00:00:11.810 TCP 12.102.0.1:58940 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:09:24.640 00:00:11.765 TCP 12.102.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:10:26.442 00:00:11.815 TCP 12.102.0.1:32856 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:06:16.151 00:06:00.149 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 00:11:28.296 00:00:11.802 TCP 12.102.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:11:48.179 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:11:48.408 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:11:48.206 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:11:48.318 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:11:48.335 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:11:48.277 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:11:48.203 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:12:30.147 00:00:11.778 TCP 12.102.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:08:16.149 00:06:00.155 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 00:13:31.962 00:00:12.265 TCP 12.102.0.1:39784 -> 1.101.0.1:3000 15 1926 1 2025-12-04 00:14:34.273 00:00:11.811 TCP 12.102.0.1:45264 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:15:36.125 00:00:11.806 TCP 12.102.0.1:49224 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:16:48.348 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:16:48.600 00:00:00.020 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:16:48.419 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:16:48.371 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:16:48.303 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:16:48.287 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:16:48.407 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:16:37.972 00:00:11.865 TCP 12.102.0.1:44660 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:17:39.882 00:00:11.763 TCP 12.102.0.1:43816 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:13:16.155 00:06:00.147 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 00:18:41.688 00:00:11.803 TCP 12.102.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:19:43.526 00:00:11.808 TCP 12.102.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:15:16.153 00:06:00.154 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 00:20:45.375 00:00:11.862 TCP 12.102.0.1:39340 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:21:48.756 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:21:48.530 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:21:48.657 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:21:48.681 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:21:48.769 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:21:48.586 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:21:48.659 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:21:47.272 00:00:11.798 TCP 12.102.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:22:49.110 00:00:11.817 TCP 12.102.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:23:50.962 00:00:11.804 TCP 12.102.0.1:39308 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:24:52.801 00:00:11.802 TCP 12.102.0.1:36434 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:20:16.156 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 00:25:54.644 00:00:11.760 TCP 12.102.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:26:48.547 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:26:48.517 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:26:48.694 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:26:48.348 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:26:48.570 00:00:00.025 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:26:48.623 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:26:48.481 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:26:56.446 00:00:11.762 TCP 12.102.0.1:44042 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:22:16.154 00:06:00.158 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 00:27:58.249 00:00:11.797 TCP 12.102.0.1:56242 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:29:00.085 00:00:11.806 TCP 12.102.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:30:01.928 00:00:11.812 TCP 12.102.0.1:41822 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:31:03.781 00:00:11.774 TCP 12.102.0.1:54654 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:31:48.365 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:31:48.705 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:31:48.565 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:31:48.658 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:31:48.640 00:00:00.014 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:31:48.579 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:31:48.636 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:32:05.594 00:00:11.809 TCP 12.102.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:27:16.157 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 00:33:07.445 00:00:11.862 TCP 12.102.0.1:39010 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:29:16.156 00:06:00.157 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 00:34:09.342 00:00:11.811 TCP 12.102.0.1:40330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:35:11.189 00:00:11.763 TCP 12.102.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:36:12.995 00:00:11.798 TCP 12.102.0.1:56560 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:36:48.567 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:36:48.805 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:36:48.869 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:36:48.744 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:36:48.783 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:36:49.370 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:36:49.127 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:37:14.839 00:00:11.800 TCP 12.102.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:38:16.679 00:00:11.760 TCP 12.102.0.1:51986 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:34:16.158 00:06:00.154 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 00:39:18.480 00:00:11.822 TCP 12.102.0.1:36638 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:40:20.341 00:00:11.823 TCP 12.102.0.1:40874 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:36:16.156 00:06:00.159 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 00:41:22.199 00:00:11.806 TCP 12.102.0.1:36726 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:41:48.912 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:41:48.817 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:41:48.647 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:41:48.827 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:41:48.997 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:41:49.021 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:41:48.998 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:42:24.069 00:00:11.808 TCP 12.102.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:43:25.914 00:00:12.256 TCP 12.102.0.1:41394 -> 1.101.0.1:3000 15 1926 1 2025-12-04 00:44:28.212 00:00:11.804 TCP 12.102.0.1:57308 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:45:30.078 00:00:12.027 TCP 12.102.0.1:37526 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:41:16.161 00:06:00.155 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 00:46:48.848 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:46:32.141 00:00:11.776 TCP 12.102.0.1:33424 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:46:48.825 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:46:48.828 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:46:48.951 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:46:48.871 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:46:48.850 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:46:48.809 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:47:33.957 00:00:11.772 TCP 12.102.0.1:51216 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:43:16.159 00:06:00.160 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 00:48:35.770 00:00:11.801 TCP 12.102.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:49:37.611 00:00:11.803 TCP 12.102.0.1:50880 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:50:39.454 00:00:11.761 TCP 12.102.0.1:47212 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:51:48.953 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:51:48.975 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:51:49.113 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:51:49.105 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:51:49.026 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:51:41.251 00:00:11.808 TCP 12.102.0.1:37558 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:51:49.159 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:51:48.981 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:52:43.095 00:00:11.808 TCP 12.102.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:48:16.163 00:06:00.153 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 00:53:44.939 00:00:11.773 TCP 12.102.0.1:47330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:54:46.747 00:00:11.834 TCP 12.102.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:50:16.161 00:06:00.158 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 00:55:48.620 00:00:11.760 TCP 12.102.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:56:48.911 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 00:56:49.217 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 00:56:49.208 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:56:49.249 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 00:56:49.174 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 00:56:49.121 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 00:56:49.152 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 00:56:50.417 00:00:11.806 TCP 12.102.0.1:34196 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:57:52.259 00:00:11.809 TCP 12.102.0.1:50804 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 124049, total packets: 1136, avg bps: 259, avg pps: 0, avg bpp: 109 Time window: 2025-12-03 23:54:16 - 2025-12-04 00:58:04 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0048s User: 0.0019s Wall: 0.0036s flows/second: 43705.0 Runtime: 0.0037s