['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 62484, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 101, flow_bytes_toclient: 359, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 135, flow_bytes_toclient: 217, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 112, flow_bytes_toclient: 180, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 202, flow_bytes_toclient: 300, flow_age: 38, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 178, flow_bytes_toclient: 317, flow_age: 26, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 111, flow_age: 1, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 121, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 192, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 105, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 239, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 126, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 100, flow_bytes_toclient: 185, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 97, flow_bytes_toclient: 161, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 120, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 174, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 185, flow_bytes_toclient: 471, flow_age: 58, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 170, flow_bytes_toclient: 332, flow_age: 83, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 116, flow_bytes_toclient: 244, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 81, flow_bytes_toclient: 337, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 128, flow_bytes_toclient: 352, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 114, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 114, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 217, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 573738, event_type: dns, proto: UDP, dns_type: query, dns_id: 40965, dns_rrname: incoming.telemetry.mozilla.org, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 574155, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 40965, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: incoming.telemetry.mozilla.org, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: incoming.telemetry.mozilla.org, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 40, dns_answers_0_rdata: telemetry-incoming.r53-2.services.mozilla.com, dns_answers_1_rrname: telemetry-incoming.r53-2.services.mozilla.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 50, dns_answers_1_rdata: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_2_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 40, dns_answers_2_rdata: 50.112.45.104, dns_answers_3_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 40, dns_answers_3_rdata: 52.11.31.31, dns_answers_4_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 40, dns_answers_4_rdata: 52.40.81.184, dns_answers_5_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 40, dns_answers_5_rdata: 52.26.121.92, dns_answers_6_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 40, dns_answers_6_rdata: 52.26.221.216, dns_answers_7_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 40, dns_answers_7_rdata: 35.167.220.41, dns_answers_8_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 40, dns_answers_8_rdata: 54.148.190.222, dns_answers_9_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 40, dns_answers_9_rdata: 52.41.230.224, dns_grouped_A_0: 50.112.45.104, dns_grouped_A_1: 52.11.31.31, dns_grouped_A_2: 52.40.81.184, dns_grouped_A_3: 52.26.121.92, dns_grouped_A_4: 52.26.221.216, dns_grouped_A_5: 35.167.220.41, dns_grouped_A_6: 54.148.190.222, dns_grouped_A_7: 52.41.230.224, dns_grouped_CNAME_0: telemetry-incoming.r53-2.services.mozilla.com, dns_grouped_CNAME_1: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com ; pcap_cnt: 4422587, event_type: dns, proto: UDP, dns_type: query, dns_id: 63483, dns_rrname: adserver-useast-haproxy02-2085308329.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 4422590, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 63483, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: adserver-useast-haproxy02-2085308329.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 32, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 5670343, event_type: dns, proto: UDP, dns_type: query, dns_id: 52305, dns_rrname: ec2-107-22-140-69.compute-1.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 5670371, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 52305, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ec2-107-22-140-69.compute-1.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: compute-1.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1466, dns_authorities_0_soa_mname: dns-external-master.amazon.com, dns_authorities_0_soa_rname: root.amazon.com, dns_authorities_0_soa_serial: 2013158666, dns_authorities_0_soa_refresh: 28800, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 2592000, dns_authorities_0_soa_minimum: 7211 ; pcap_cnt: 5743734, event_type: dns, proto: UDP, dns_type: query, dns_id: 16535, dns_rrname: telegram.me, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5743748, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16535, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: telegram.me, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: telegram.me, dns_answers_0_rrtype: A, dns_answers_0_ttl: 217, dns_answers_0_rdata: 149.154.167.118, dns_grouped_A_0: 149.154.167.118 ; pcap_cnt: 5765849, event_type: dns, proto: UDP, dns_type: query, dns_id: 35175, dns_rrname: beacon-a-v2-214652506.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 5765853, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 35175, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: beacon-a-v2-214652506.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 19, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 5807530, event_type: dns, proto: UDP, dns_type: query, dns_id: 3068, dns_rrname: ocsp.trustwave.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5807725, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 3068, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.trustwave.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.trustwave.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 581, dns_answers_0_rdata: ocsp.trustwave.com.edgesuite.net, dns_answers_1_rrname: ocsp.trustwave.com.edgesuite.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 18664, dns_answers_1_rdata: a1213.g.akamai.net, dns_answers_2_rrname: a1213.g.akamai.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 209.48.71.168, dns_answers_3_rrname: a1213.g.akamai.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 209.48.71.242, dns_grouped_A_0: 209.48.71.168, dns_grouped_A_1: 209.48.71.242, dns_grouped_CNAME_0: ocsp.trustwave.com.edgesuite.net, dns_grouped_CNAME_1: a1213.g.akamai.net ; pcap_cnt: 5818140, event_type: dns, proto: UDP, dns_type: query, dns_id: 1229, dns_rrname: adserve.adpulse.ir, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 5818152, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 1229, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: adserve.adpulse.ir, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: adserve.adpulse.ir, dns_answers_0_rrtype: A, dns_answers_0_ttl: 300, dns_answers_0_rdata: 104.20.66.99, dns_answers_1_rrname: adserve.adpulse.ir, dns_answers_1_rrtype: A, dns_answers_1_ttl: 300, dns_answers_1_rdata: 104.20.67.99, dns_grouped_A_0: 104.20.66.99, dns_grouped_A_1: 104.20.67.99 ; pcap_cnt: 6140288, event_type: dns, proto: UDP, dns_type: query, dns_id: 22013, dns_rrname: api.coupon.rakuten.co.jp, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6140519, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 22013, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: api.coupon.rakuten.co.jp, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: api.coupon.rakuten.co.jp, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 133.237.16.193, dns_grouped_A_0: 133.237.16.193 ; pcap_cnt: 6278921, event_type: dns, proto: UDP, dns_type: query, dns_id: 3574, dns_rrname: a968.g1.akamai.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6278923, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 3574, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a968.g1.akamai.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: a968.g1.akamai.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 19, dns_answers_0_rdata: 23.15.4.9, dns_answers_1_rrname: a968.g1.akamai.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 19, dns_answers_1_rdata: 23.15.4.18, dns_grouped_A_0: 23.15.4.9, dns_grouped_A_1: 23.15.4.18 ; pcap_cnt: 6472977, event_type: dns, proto: UDP, dns_type: query, dns_id: 46594, dns_rrname: static.tacdn.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6473033, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 46594, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: static.tacdn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: static.tacdn.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 79, dns_answers_0_rdata: static.tacdn.com.edge.tacdn.com, dns_answers_1_rrname: static.tacdn.com.edge.tacdn.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 204, dns_answers_1_rdata: static-tacdn.tripadvisor.map.fastly.net, dns_answers_2_rrname: static-tacdn.tripadvisor.map.fastly.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 22, dns_answers_2_rdata: 151.101.46.83, dns_grouped_CNAME_0: static.tacdn.com.edge.tacdn.com, dns_grouped_CNAME_1: static-tacdn.tripadvisor.map.fastly.net, dns_grouped_A_0: 151.101.46.83 ; pcap_cnt: 6580705, event_type: dns, proto: UDP, dns_type: query, dns_id: 2016, dns_rrname: geo-rtas.btrll.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6580711, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 2016, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: geo-rtas.btrll.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: geo-rtas.btrll.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 11, dns_answers_0_rdata: 162.208.20.178, dns_grouped_A_0: 162.208.20.178 ; pcap_cnt: 6809427, event_type: dns, proto: UDP, dns_type: query, dns_id: 32088, dns_rrname: radio.disney.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 6809442, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32088, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: radio.disney.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: radio.disney.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 51956, dns_answers_0_rdata: matterhorn.disney.com, dns_answers_1_rrname: matterhorn.disney.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 35316, dns_answers_1_rdata: matterhorn.edgesuite.net, dns_answers_2_rrname: matterhorn.edgesuite.net, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 11806, dns_answers_2_rdata: a1639.g1.akamai.net, dns_grouped_CNAME_0: matterhorn.disney.com, dns_grouped_CNAME_1: matterhorn.edgesuite.net, dns_grouped_CNAME_2: a1639.g1.akamai.net, dns_authorities_0_rrname: g1.akamai.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 536, dns_authorities_0_soa_mname: n0g1.akamai.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499261604, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 9930473, event_type: dns, proto: UDP, dns_type: query, dns_id: 47491, dns_rrname: support.google.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9930825, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 47491, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: support.google.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: support.google.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 86399, dns_answers_0_rdata: www3.l.google.com, dns_answers_1_rrname: www3.l.google.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 211, dns_answers_1_rdata: 216.58.219.238, dns_grouped_A_0: 216.58.219.238, dns_grouped_CNAME_0: www3.l.google.com ; pcap_cnt: 10426381, event_type: dns, proto: UDP, dns_type: query, dns_id: 54606, dns_rrname: d1o1v4alhgrqng.cloudfront.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10426390, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 54606, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: d1o1v4alhgrqng.cloudfront.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: d1o1v4alhgrqng.cloudfront.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 60, dns_authorities_0_soa_mname: ns-1509.awsdns-60.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 10576188, event_type: dns, proto: UDP, dns_type: query, dns_id: 63836, dns_rrname: trc.taboola.map.fastly.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10576207, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 63836, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: trc.taboola.map.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: trc.taboola.map.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 18, dns_answers_0_rdata: 151.101.2.49, dns_answers_1_rrname: trc.taboola.map.fastly.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 18, dns_answers_1_rdata: 151.101.66.49, dns_answers_2_rrname: trc.taboola.map.fastly.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 18, dns_answers_2_rdata: 151.101.130.49, dns_answers_3_rrname: trc.taboola.map.fastly.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 18, dns_answers_3_rdata: 151.101.194.49, dns_grouped_A_0: 151.101.2.49, dns_grouped_A_1: 151.101.66.49, dns_grouped_A_2: 151.101.130.49, dns_grouped_A_3: 151.101.194.49 ; pcap_cnt: 10639739, event_type: dns, proto: UDP, dns_type: query, dns_id: 37158, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10639793, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37158, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: scontent.xx.fbcdn.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2a03:2880:f027:0018:face:b00c:0000:0003, dns_grouped_AAAA_0: 2a03:2880:f027:0018:face:b00c:0000:0003 ; pcap_cnt: 10977000, event_type: dns, proto: UDP, dns_type: query, dns_id: 37191, dns_rrname: js.hs-scripts.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10977138, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37191, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: js.hs-scripts.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: js.hs-scripts.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1747, dns_answers_0_rdata: hubspot.net.edgekey.net, dns_answers_1_rrname: hubspot.net.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 2469, dns_answers_1_rdata: e9483.a.akamaiedge.net, dns_answers_2_rrname: e9483.a.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 19, dns_answers_2_rdata: 23.208.103.179, dns_grouped_A_0: 23.208.103.179, dns_grouped_CNAME_0: hubspot.net.edgekey.net, dns_grouped_CNAME_1: e9483.a.akamaiedge.net ; pcap_cnt: 11213574, event_type: dns, proto: UDP, dns_type: query, dns_id: 32894, dns_rrname: www.google.ca, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11213599, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32894, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.google.ca, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: www.google.ca, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 10, dns_answers_0_rdata: 2607:f8b0:4004:0805:0000:0000:0000:2003, dns_grouped_AAAA_0: 2607:f8b0:4004:0805:0000:0000:0000:2003 ; pcap_cnt: 11222179, event_type: dns, proto: UDP, dns_type: query, dns_id: 14228, dns_rrname: incoming.telemetry.mozilla.org, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 11222182, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 14228, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: incoming.telemetry.mozilla.org, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: incoming.telemetry.mozilla.org, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: telemetry-incoming.r53-2.services.mozilla.com, dns_answers_1_rrname: telemetry-incoming.r53-2.services.mozilla.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 1, dns_answers_1_rdata: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_2_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 35.166.101.186, dns_answers_3_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 35.165.181.13, dns_answers_4_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 54.213.76.99, dns_answers_5_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 50.112.45.104, dns_answers_6_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 54.201.188.11, dns_answers_7_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 52.26.121.92, dns_answers_8_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 52.11.31.31, dns_answers_9_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 1, dns_answers_9_rdata: 35.167.220.41, dns_grouped_A_0: 35.166.101.186, dns_grouped_A_1: 35.165.181.13, dns_grouped_A_2: 54.213.76.99, dns_grouped_A_3: 50.112.45.104, dns_grouped_A_4: 54.201.188.11, dns_grouped_A_5: 52.26.121.92, dns_grouped_A_6: 52.11.31.31, dns_grouped_A_7: 35.167.220.41, dns_grouped_CNAME_0: telemetry-incoming.r53-2.services.mozilla.com, dns_grouped_CNAME_1: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com ; pcap_cnt: 11441605, event_type: dns, proto: UDP, dns_type: query, dns_id: 36337, dns_rrname: ca.iherb.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11441623, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36337, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ca.iherb.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: ca.iherb.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 59, dns_answers_0_rdata: www.iherb.com.edgekey.net, dns_answers_1_rrname: www.iherb.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 15229, dns_answers_1_rdata: e3421.b.akamaiedge.net, dns_grouped_CNAME_0: www.iherb.com.edgekey.net, dns_grouped_CNAME_1: e3421.b.akamaiedge.net, dns_authorities_0_rrname: b.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 753, dns_authorities_0_soa_mname: n0b.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499273330, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 11451138, event_type: dns, proto: UDP, dns_type: query, dns_id: 41336, dns_rrname: daisy.ubuntu.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 11451139, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 41336, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: daisy.ubuntu.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: daisy.ubuntu.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 162.213.33.164, dns_answers_1_rrname: daisy.ubuntu.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 162.213.33.133, dns_grouped_A_0: 162.213.33.164, dns_grouped_A_1: 162.213.33.133 ; pcap_cnt: 11515833, event_type: dns, proto: UDP, dns_type: query, dns_id: 32399, dns_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11515840, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32399, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 176.34.108.120, dns_answers_1_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 54.247.94.134, dns_answers_2_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 46.137.115.159, dns_answers_3_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 176.34.231.11, dns_answers_4_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 46.137.93.21, dns_answers_5_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 46.137.164.87, dns_answers_6_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 46.137.179.240, dns_answers_7_rrname: prodlb03-58312814.eu-west-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 176.34.111.21, dns_grouped_A_0: 176.34.108.120, dns_grouped_A_1: 54.247.94.134, dns_grouped_A_2: 46.137.115.159, dns_grouped_A_3: 176.34.231.11, dns_grouped_A_4: 46.137.93.21, dns_grouped_A_5: 46.137.164.87, dns_grouped_A_6: 46.137.179.240, dns_grouped_A_7: 176.34.111.21 ; pcap_cnt: 11912268, event_type: dns, proto: UDP, dns_type: query, dns_id: 46653, dns_rrname: t.lkqd.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11912275, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 46653, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: t.lkqd.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: t.lkqd.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 0, dns_answers_0_rdata: 146.20.132.118, dns_answers_1_rrname: t.lkqd.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 0, dns_answers_1_rdata: 146.20.132.119, dns_answers_2_rrname: t.lkqd.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 0, dns_answers_2_rdata: 146.20.132.128, dns_answers_3_rrname: t.lkqd.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 0, dns_answers_3_rdata: 146.20.132.129, dns_answers_4_rrname: t.lkqd.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 0, dns_answers_4_rdata: 146.20.132.125, dns_answers_5_rrname: t.lkqd.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 0, dns_answers_5_rdata: 146.20.132.122, dns_answers_6_rrname: t.lkqd.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 0, dns_answers_6_rdata: 146.20.132.121, dns_answers_7_rrname: t.lkqd.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 0, dns_answers_7_rdata: 146.20.132.117, dns_answers_8_rrname: t.lkqd.net, dns_answers_8_rrtype: A, dns_answers_8_ttl: 0, dns_answers_8_rdata: 146.20.132.126, dns_answers_9_rrname: t.lkqd.net, dns_answers_9_rrtype: A, dns_answers_9_ttl: 0, dns_answers_9_rdata: 146.20.132.127, dns_answers_10_rrname: t.lkqd.net, dns_answers_10_rrtype: A, dns_answers_10_ttl: 0, dns_answers_10_rdata: 146.20.132.120, dns_answers_11_rrname: t.lkqd.net, dns_answers_11_rrtype: A, dns_answers_11_ttl: 0, dns_answers_11_rdata: 146.20.132.116, dns_answers_12_rrname: t.lkqd.net, dns_answers_12_rrtype: A, dns_answers_12_ttl: 0, dns_answers_12_rdata: 146.20.132.115, dns_answers_13_rrname: t.lkqd.net, dns_answers_13_rrtype: A, dns_answers_13_ttl: 0, dns_answers_13_rdata: 146.20.132.123, dns_answers_14_rrname: t.lkqd.net, dns_answers_14_rrtype: A, dns_answers_14_ttl: 0, dns_answers_14_rdata: 146.20.132.124, dns_answers_15_rrname: t.lkqd.net, dns_answers_15_rrtype: A, dns_answers_15_ttl: 0, dns_answers_15_rdata: 146.20.132.114, dns_grouped_A_0: 146.20.132.118, dns_grouped_A_1: 146.20.132.119, dns_grouped_A_2: 146.20.132.128, dns_grouped_A_3: 146.20.132.129, dns_grouped_A_4: 146.20.132.125, dns_grouped_A_5: 146.20.132.122, dns_grouped_A_6: 146.20.132.121, dns_grouped_A_7: 146.20.132.117, dns_grouped_A_8: 146.20.132.126, dns_grouped_A_9: 146.20.132.127, dns_grouped_A_10: 146.20.132.120, dns_grouped_A_11: 146.20.132.116, dns_grouped_A_12: 146.20.132.115, dns_grouped_A_13: 146.20.132.123, dns_grouped_A_14: 146.20.132.124, dns_grouped_A_15: 146.20.132.114 ; pcap_cnt: 12198900, event_type: dns, proto: UDP, dns_type: query, dns_id: 32462, dns_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 12198950, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32462, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 15, dns_answers_0_rdata: 2406:da00:ff00:0000:0000:0000:36ac:07ba, dns_answers_1_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 15, dns_answers_1_rdata: 2406:da00:ff00:0000:0000:0000:3400:f40a, dns_answers_2_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: AAAA, dns_answers_2_ttl: 15, dns_answers_2_rdata: 2406:da00:ff00:0000:0000:0000:3403:094e, dns_answers_3_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: AAAA, dns_answers_3_ttl: 15, dns_answers_3_rdata: 2406:da00:ff00:0000:0000:0000:36a5:4a42, dns_answers_4_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: AAAA, dns_answers_4_ttl: 15, dns_answers_4_rdata: 2406:da00:ff00:0000:0000:0000:3416:11b8, dns_answers_5_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: AAAA, dns_answers_5_ttl: 15, dns_answers_5_rdata: 2406:da00:ff00:0000:0000:0000:3404:ac52, dns_answers_6_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: AAAA, dns_answers_6_ttl: 15, dns_answers_6_rdata: 2406:da00:ff00:0000:0000:0000:3400:b6ae, dns_answers_7_rrname: dualstack.user-sync-949964143.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: AAAA, dns_answers_7_ttl: 15, dns_answers_7_rdata: 2406:da00:ff00:0000:0000:0000:36ad:111f, dns_grouped_AAAA_0: 2406:da00:ff00:0000:0000:0000:36ac:07ba, dns_grouped_AAAA_1: 2406:da00:ff00:0000:0000:0000:3400:f40a, dns_grouped_AAAA_2: 2406:da00:ff00:0000:0000:0000:3403:094e, dns_grouped_AAAA_3: 2406:da00:ff00:0000:0000:0000:36a5:4a42, dns_grouped_AAAA_4: 2406:da00:ff00:0000:0000:0000:3416:11b8, dns_grouped_AAAA_5: 2406:da00:ff00:0000:0000:0000:3404:ac52, dns_grouped_AAAA_6: 2406:da00:ff00:0000:0000:0000:3400:b6ae, dns_grouped_AAAA_7: 2406:da00:ff00:0000:0000:0000:36ad:111f ; pcap_cnt: 12636388, event_type: dns, proto: UDP, dns_type: query, dns_id: 65315, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 12636409, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 65315, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.godaddy.com.akadns.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 72.167.239.239, dns_grouped_A_0: 72.167.239.239 ; pcap_cnt: 12798859, event_type: dns, proto: UDP, dns_type: query, dns_id: 22472, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 12798912, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 22472, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.godaddy.com.akadns.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 72.167.239.239, dns_grouped_A_0: 72.167.239.239 ; pcap_cnt: 13652477, event_type: dns, proto: UDP, dns_type: query, dns_id: 65380, dns_rrname: ping.chartbeat.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 13652481, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 65380, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ping.chartbeat.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ping.chartbeat.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 37, dns_answers_0_rdata: 23.21.78.116, dns_answers_1_rrname: ping.chartbeat.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 37, dns_answers_1_rdata: 23.21.110.210, dns_answers_2_rrname: ping.chartbeat.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 37, dns_answers_2_rdata: 23.21.59.34, dns_answers_3_rrname: ping.chartbeat.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 37, dns_answers_3_rdata: 23.21.240.128, dns_answers_4_rrname: ping.chartbeat.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 37, dns_answers_4_rdata: 23.21.83.14, dns_answers_5_rrname: ping.chartbeat.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 37, dns_answers_5_rdata: 50.19.232.30, dns_answers_6_rrname: ping.chartbeat.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 37, dns_answers_6_rdata: 54.225.100.50, dns_answers_7_rrname: ping.chartbeat.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 37, dns_answers_7_rdata: 54.83.194.68, dns_grouped_A_0: 23.21.78.116, dns_grouped_A_1: 23.21.110.210, dns_grouped_A_2: 23.21.59.34, dns_grouped_A_3: 23.21.240.128, dns_grouped_A_4: 23.21.83.14, dns_grouped_A_5: 50.19.232.30, dns_grouped_A_6: 54.225.100.50, dns_grouped_A_7: 54.83.194.68
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.