['flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.25, src_port: 49279, dest_ip: 192.168.10.3, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 150, flow_bytes_toclient: 618, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 172, flow_bytes_toclient: 748, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 6317599, event_type: dns, proto: UDP, dns_type: query, dns_id: 30135, dns_rrname: nbcu.demdex.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6317600, event_type: dns, proto: UDP, dns_type: query, dns_id: 30135, dns_rrname: nbcu.demdex.net, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 6317632, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 30135, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: nbcu.demdex.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: nbcu.demdex.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 93, dns_answers_0_rdata: gslb.demdex.net, dns_answers_1_rrname: gslb.demdex.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 449, dns_answers_1_rdata: edge-va6.demdex.net, dns_answers_2_rrname: edge-va6.demdex.net, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 601, dns_answers_2_rdata: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_3_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 52.203.68.158, dns_answers_4_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 34.224.252.61, dns_answers_5_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 52.0.195.74, dns_answers_6_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 52.204.19.250, dns_answers_7_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 34.199.168.201, dns_answers_8_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 34.198.87.245, dns_answers_9_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 1, dns_answers_9_rdata: 34.198.80.176, dns_answers_10_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 1, dns_answers_10_rdata: 52.203.36.253, dns_grouped_A_0: 52.203.68.158, dns_grouped_A_1: 34.224.252.61, dns_grouped_A_2: 52.0.195.74, dns_grouped_A_3: 52.204.19.250, dns_grouped_A_4: 34.199.168.201, dns_grouped_A_5: 34.198.87.245, dns_grouped_A_6: 34.198.80.176, dns_grouped_A_7: 52.203.36.253, dns_grouped_CNAME_0: gslb.demdex.net, dns_grouped_CNAME_1: edge-va6.demdex.net, dns_grouped_CNAME_2: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com ; pcap_cnt: 6317633, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 30135, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: nbcu.demdex.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: nbcu.demdex.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 93, dns_answers_0_rdata: gslb.demdex.net, dns_answers_1_rrname: gslb.demdex.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 449, dns_answers_1_rdata: edge-va6.demdex.net, dns_answers_2_rrname: edge-va6.demdex.net, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 601, dns_answers_2_rdata: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_3_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 52.203.68.158, dns_answers_4_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 34.224.252.61, dns_answers_5_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 52.0.195.74, dns_answers_6_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 52.204.19.250, dns_answers_7_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 34.199.168.201, dns_answers_8_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 34.198.87.245, dns_answers_9_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 1, dns_answers_9_rdata: 34.198.80.176, dns_answers_10_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 1, dns_answers_10_rdata: 52.203.36.253, dns_grouped_A_0: 52.203.68.158, dns_grouped_A_1: 34.224.252.61, dns_grouped_A_2: 52.0.195.74, dns_grouped_A_3: 52.204.19.250, dns_grouped_A_4: 34.199.168.201, dns_grouped_A_5: 34.198.87.245, dns_grouped_A_6: 34.198.80.176, dns_grouped_A_7: 52.203.36.253, dns_grouped_CNAME_0: gslb.demdex.net, dns_grouped_CNAME_1: edge-va6.demdex.net, dns_grouped_CNAME_2: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com ; pcap_cnt: 7130823, event_type: dns, proto: UDP, dns_type: query, dns_id: 12582, dns_rrname: ads.adaptv.advertising.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7130824, event_type: dns, proto: UDP, dns_type: query, dns_id: 12582, dns_rrname: ads.adaptv.advertising.com, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 7130850, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 12582, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ads.adaptv.advertising.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ads.adaptv.advertising.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 17, dns_answers_0_rdata: control.adap.tv, dns_answers_1_rrname: control.adap.tv, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 5, dns_answers_1_rdata: control.adap.tv.akadns.net, dns_answers_2_rrname: control.adap.tv.akadns.net, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 234, dns_answers_2_rdata: control-wc-local.adap.tv.akadns.net, dns_answers_3_rrname: control-wc-local.adap.tv.akadns.net, dns_answers_3_rrtype: CNAME, dns_answers_3_ttl: 21, dns_answers_3_rdata: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_4_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 51, dns_answers_4_rdata: 54.183.241.190, dns_answers_5_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 51, dns_answers_5_rdata: 54.183.162.192, dns_answers_6_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 51, dns_answers_6_rdata: 54.183.211.226, dns_answers_7_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 51, dns_answers_7_rdata: 54.183.168.58, dns_answers_8_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 51, dns_answers_8_rdata: 54.183.179.108, dns_answers_9_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 51, dns_answers_9_rdata: 54.183.206.147, dns_answers_10_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 51, dns_answers_10_rdata: 54.183.242.216, dns_answers_11_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_11_rrtype: A, dns_answers_11_ttl: 51, dns_answers_11_rdata: 54.183.252.153, dns_grouped_CNAME_0: control.adap.tv, dns_grouped_CNAME_1: control.adap.tv.akadns.net, dns_grouped_CNAME_2: control-wc-local.adap.tv.akadns.net, dns_grouped_CNAME_3: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_grouped_A_0: 54.183.241.190, dns_grouped_A_1: 54.183.162.192, dns_grouped_A_2: 54.183.211.226, dns_grouped_A_3: 54.183.168.58, dns_grouped_A_4: 54.183.179.108, dns_grouped_A_5: 54.183.206.147, dns_grouped_A_6: 54.183.242.216, dns_grouped_A_7: 54.183.252.153 ; pcap_cnt: 7130851, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 12582, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ads.adaptv.advertising.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ads.adaptv.advertising.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 17, dns_answers_0_rdata: control.adap.tv, dns_answers_1_rrname: control.adap.tv, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 5, dns_answers_1_rdata: control.adap.tv.akadns.net, dns_answers_2_rrname: control.adap.tv.akadns.net, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 234, dns_answers_2_rdata: control-wc-local.adap.tv.akadns.net, dns_answers_3_rrname: control-wc-local.adap.tv.akadns.net, dns_answers_3_rrtype: CNAME, dns_answers_3_ttl: 21, dns_answers_3_rdata: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_4_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 51, dns_answers_4_rdata: 54.183.241.190, dns_answers_5_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 51, dns_answers_5_rdata: 54.183.162.192, dns_answers_6_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 51, dns_answers_6_rdata: 54.183.211.226, dns_answers_7_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 51, dns_answers_7_rdata: 54.183.168.58, dns_answers_8_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 51, dns_answers_8_rdata: 54.183.179.108, dns_answers_9_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 51, dns_answers_9_rdata: 54.183.206.147, dns_answers_10_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 51, dns_answers_10_rdata: 54.183.242.216, dns_answers_11_rrname: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_answers_11_rrtype: A, dns_answers_11_ttl: 51, dns_answers_11_rdata: 54.183.252.153, dns_grouped_A_0: 54.183.241.190, dns_grouped_A_1: 54.183.162.192, dns_grouped_A_2: 54.183.211.226, dns_grouped_A_3: 54.183.168.58, dns_grouped_A_4: 54.183.179.108, dns_grouped_A_5: 54.183.206.147, dns_grouped_A_6: 54.183.242.216, dns_grouped_A_7: 54.183.252.153, dns_grouped_CNAME_0: control.adap.tv, dns_grouped_CNAME_1: control.adap.tv.akadns.net, dns_grouped_CNAME_2: control-wc-local.adap.tv.akadns.net, dns_grouped_CNAME_3: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.