Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 08:59:00.340 00:00:11.854 TCP 12.102.0.1:33000 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:00:02.231 00:00:11.804 TCP 12.102.0.1:46254 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:01:04.078 00:00:11.800 TCP 12.102.0.1:36358 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:01:58.753 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:01:58.853 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:01:58.960 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:01:59.071 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:01:59.055 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:01:58.983 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:01:59.058 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:02:05.918 00:00:11.830 TCP 12.102.0.1:34472 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:58:16.318 00:06:00.143 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 09:03:07.788 00:00:11.802 TCP 12.102.0.1:52654 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:04:09.638 00:00:18.526 TCP 12.102.0.1:57612 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:00:16.317 00:06:00.148 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 09:05:18.205 00:00:11.819 TCP 12.102.0.1:60606 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:06:20.075 00:00:11.803 TCP 12.102.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:06:58.835 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:06:58.684 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:06:58.663 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:06:58.833 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:06:58.970 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:06:58.912 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:06:58.810 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:07:21.921 00:00:11.778 TCP 12.102.0.1:54254 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:08:23.744 00:00:12.233 TCP 12.102.0.1:44966 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:09:26.027 00:00:11.804 TCP 12.102.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:05:16.320 00:06:00.142 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 09:10:27.869 00:00:11.801 TCP 12.102.0.1:44330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:11:29.708 00:00:11.811 TCP 12.102.0.1:57786 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:11:59.367 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:11:59.198 00:00:00.010 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:11:59.333 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:11:59.279 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:11:59.178 00:00:00.030 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:11:59.070 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:11:59.258 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:07:16.318 00:06:00.147 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 09:12:31.556 00:00:13.274 TCP 12.102.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:13:34.861 00:00:12.259 TCP 12.102.0.1:41456 -> 1.101.0.1:3000 15 1926 1 2025-12-04 09:14:37.164 00:00:11.800 TCP 12.102.0.1:51862 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:15:39.006 00:00:11.812 TCP 12.102.0.1:51814 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:16:40.856 00:00:11.762 TCP 12.102.0.1:41984 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:16:58.972 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:16:59.107 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:16:59.122 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:16:59.265 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:16:58.995 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:16:59.325 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:16:58.997 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:12:16.322 00:06:00.141 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 09:17:42.657 00:00:11.832 TCP 12.102.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:18:44.527 00:00:11.806 TCP 12.102.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:14:16.320 00:06:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 09:19:46.369 00:00:11.824 TCP 12.102.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:20:48.232 00:00:11.766 TCP 12.102.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:21:58.950 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:21:59.063 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:21:59.191 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:21:50.056 00:00:11.802 TCP 12.102.0.1:41176 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:21:59.152 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:21:59.170 00:00:00.047 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:21:59.130 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:21:59.106 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:22:51.895 00:00:11.802 TCP 12.102.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:23:53.734 00:00:11.802 TCP 12.102.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:19:16.325 00:06:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 09:24:55.578 00:00:11.851 TCP 12.102.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:25:57.468 00:00:11.808 TCP 12.102.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:21:16.321 00:06:00.145 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 09:26:59.178 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:26:59.298 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:26:59.200 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:26:59.456 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:26:59.200 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:26:59.343 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:26:59.395 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:26:59.304 00:00:11.802 TCP 12.102.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:28:01.144 00:00:12.507 TCP 12.102.0.1:39080 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:29:03.683 00:00:11.799 TCP 12.102.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:30:05.530 00:00:11.803 TCP 12.102.0.1:48822 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:26:16.326 00:06:00.139 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 09:31:07.373 00:00:11.842 TCP 12.102.0.1:55478 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:31:59.255 00:00:00.029 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:31:59.601 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:31:59.400 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:31:59.278 00:00:00.029 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:31:59.487 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:31:59.369 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:31:59.365 00:00:00.020 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:32:09.248 00:00:11.781 TCP 12.102.0.1:36660 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:28:16.323 00:06:00.163 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 09:33:11.077 00:00:15.686 TCP 12.102.0.1:42158 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:34:16.803 00:00:11.755 TCP 12.102.0.1:46098 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:35:18.602 00:00:11.807 TCP 12.102.0.1:44508 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:36:20.445 00:00:11.811 TCP 12.102.0.1:40508 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:36:59.590 00:00:00.024 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:36:59.538 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:36:59.711 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:36:59.601 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:36:59.689 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:36:59.767 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:36:59.517 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:37:22.291 00:00:11.798 TCP 12.102.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:33:16.328 00:06:00.146 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 09:38:24.129 00:00:11.802 TCP 12.102.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:39:25.973 00:00:11.766 TCP 12.102.0.1:46308 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:35:16.326 00:06:00.150 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 09:40:27.774 00:00:11.798 TCP 12.102.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:41:29.613 00:00:11.849 TCP 12.102.0.1:42250 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:41:59.465 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:41:59.525 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:41:59.572 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:41:59.661 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:41:59.607 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:41:59.627 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:41:59.490 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:42:31.502 00:00:11.801 TCP 12.102.0.1:44894 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:43:33.342 00:00:11.820 TCP 12.102.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:44:35.202 00:00:11.808 TCP 12.102.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:40:16.335 00:06:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 09:45:37.081 00:00:11.816 TCP 12.102.0.1:39932 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:46:38.937 00:00:11.803 TCP 12.102.0.1:38768 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:46:59.766 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:46:59.910 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:46:59.695 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:46:59.788 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:46:59.575 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:46:59.652 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:46:59.578 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:42:16.333 00:06:00.144 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 09:47:40.778 00:00:11.803 TCP 12.102.0.1:53234 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:48:42.618 00:00:11.760 TCP 12.102.0.1:43888 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:49:44.421 00:00:11.803 TCP 12.102.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:50:46.261 00:00:11.801 TCP 12.102.0.1:53042 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:51:59.990 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:51:59.970 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:51:59.694 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:51:59.908 00:00:00.017 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:51:48.101 00:00:11.807 TCP 12.102.0.1:36800 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:51:59.922 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:51:59.901 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:51:59.671 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:47:16.335 00:06:00.140 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-12-04 09:52:49.947 00:00:12.241 TCP 12.102.0.1:32852 -> 1.101.0.1:3000 15 1926 1 2025-12-04 09:53:52.231 00:00:11.963 TCP 12.102.0.1:43158 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:49:16.333 00:06:00.146 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-12-04 09:54:54.225 00:00:11.761 TCP 12.102.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:55:56.032 00:00:11.804 TCP 12.102.0.1:59460 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:56:59.844 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-12-04 09:57:00.010 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:57:00.037 00:00:00.020 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-12-04 09:56:59.848 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-12-04 09:56:59.942 00:00:00.018 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-12-04 09:56:59.712 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-12-04 09:56:59.826 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-12-04 09:56:57.878 00:00:11.827 TCP 12.102.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:57:59.744 00:00:11.800 TCP 12.102.0.1:53922 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 274, avg pps: 0, avg bpp: 109 Time window: 2025-12-04 08:58:16 - 2025-12-04 09:58:11 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0031s User: 0.0021s Wall: 0.0019s flows/second: 84313.0 Runtime: 0.0019s