['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 60914, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 109, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 90, flow_bytes_toclient: 168, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 300, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 174, flow_bytes_toclient: 315, flow_age: 37, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 125, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 176, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 84, flow_bytes_toclient: 172, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 137, flow_bytes_toclient: 219, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 180, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 117, flow_bytes_toclient: 149, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 193, flow_bytes_toclient: 287, flow_age: 21, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 175, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 239, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 154, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 176, flow_bytes_toclient: 224, flow_age: 107, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 225, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 102, flow_bytes_toclient: 242, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 150, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 154, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 155, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 319, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 171, flow_bytes_toclient: 268, flow_age: 52, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 102, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 99, flow_bytes_toclient: 195, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 2823177, event_type: dns, proto: UDP, dns_type: query, dns_id: 56089, dns_rrname: e6170.b.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 2823182, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 56089, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e6170.b.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e6170.b.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 23.203.85.184, dns_grouped_A_0: 23.203.85.184 ; pcap_cnt: 3564194, event_type: dns, proto: UDP, dns_type: query, dns_id: 61550, dns_rrname: x.skimresources.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 3564218, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 61550, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: x.skimresources.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: skimresources.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 50, dns_authorities_0_soa_mname: ns-386.awsdns-48.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 3805645, event_type: dns, proto: UDP, dns_type: query, dns_id: 11853, dns_rrname: set.tidaltv.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 3805809, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 11853, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: set.tidaltv.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: set.tidaltv.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 82, dns_answers_0_rdata: sync.tidaltv.com, dns_answers_1_rrname: sync.tidaltv.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 61, dns_answers_1_rdata: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_2_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 44, dns_answers_2_rdata: 52.45.240.184, dns_answers_3_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 44, dns_answers_3_rdata: 52.2.0.226, dns_answers_4_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 44, dns_answers_4_rdata: 34.197.163.181, dns_answers_5_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 44, dns_answers_5_rdata: 34.201.192.41, dns_answers_6_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 44, dns_answers_6_rdata: 34.197.172.177, dns_answers_7_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 44, dns_answers_7_rdata: 34.195.155.162, dns_answers_8_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 44, dns_answers_8_rdata: 52.203.166.101, dns_answers_9_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 44, dns_answers_9_rdata: 34.192.94.222, dns_grouped_A_0: 52.45.240.184, dns_grouped_A_1: 52.2.0.226, dns_grouped_A_2: 34.197.163.181, dns_grouped_A_3: 34.201.192.41, dns_grouped_A_4: 34.197.172.177, dns_grouped_A_5: 34.195.155.162, dns_grouped_A_6: 52.203.166.101, dns_grouped_A_7: 34.192.94.222, dns_grouped_CNAME_0: sync.tidaltv.com, dns_grouped_CNAME_1: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com ; pcap_cnt: 4233753, event_type: dns, proto: UDP, dns_type: query, dns_id: 46189, dns_rrname: ocsp.comodoca.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4233795, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 46189, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.comodoca.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.comodoca.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 238, dns_answers_0_rdata: 178.255.83.1, dns_grouped_A_0: 178.255.83.1 ; pcap_cnt: 4252795, event_type: dns, proto: UDP, dns_type: query, dns_id: 14208, dns_rrname: c.go-mpulse.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 4252804, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 14208, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: c.go-mpulse.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: c.go-mpulse.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 355, dns_answers_0_rdata: c.go-mpulse.net.cdn.cloudflare.net, dns_answers_1_rrname: c.go-mpulse.net.cdn.cloudflare.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 168, dns_answers_1_rdata: 104.16.32.229, dns_answers_2_rrname: c.go-mpulse.net.cdn.cloudflare.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 168, dns_answers_2_rdata: 104.16.126.228, dns_answers_3_rrname: c.go-mpulse.net.cdn.cloudflare.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 168, dns_answers_3_rdata: 104.16.127.228, dns_answers_4_rrname: c.go-mpulse.net.cdn.cloudflare.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 168, dns_answers_4_rdata: 104.16.124.228, dns_answers_5_rrname: c.go-mpulse.net.cdn.cloudflare.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 168, dns_answers_5_rdata: 104.16.125.228, dns_grouped_A_0: 104.16.32.229, dns_grouped_A_1: 104.16.126.228, dns_grouped_A_2: 104.16.127.228, dns_grouped_A_3: 104.16.124.228, dns_grouped_A_4: 104.16.125.228, dns_grouped_CNAME_0: c.go-mpulse.net.cdn.cloudflare.net ; pcap_cnt: 4365128, event_type: dns, proto: UDP, dns_type: query, dns_id: 6676, dns_rrname: rum-static.pingdom.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4365145, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 6676, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: rum-static.pingdom.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: rum-static.pingdom.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 104.20.21.239, dns_answers_1_rrname: rum-static.pingdom.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 299, dns_answers_1_rdata: 104.20.20.239, dns_grouped_A_0: 104.20.21.239, dns_grouped_A_1: 104.20.20.239 ; pcap_cnt: 4651437, event_type: dns, proto: UDP, dns_type: query, dns_id: 41104, dns_rrname: match.prod.bidr.io, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 4651485, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 41104, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: match.prod.bidr.io, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: bidr.io, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 237, dns_authorities_0_soa_mname: ns-1597.awsdns-07.co.uk, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 5099329, event_type: dns, proto: UDP, dns_type: query, dns_id: 16138, dns_rrname: p.nfltags.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5099550, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16138, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: p.nfltags.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: p.nfltags.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 157, dns_answers_0_rdata: clubs.nfl.com.edgekey.net, dns_answers_1_rrname: clubs.nfl.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 21222, dns_answers_1_rdata: e6170.b.akamaiedge.net, dns_answers_2_rrname: e6170.b.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 19, dns_answers_2_rdata: 23.192.74.53, dns_grouped_CNAME_0: clubs.nfl.com.edgekey.net, dns_grouped_CNAME_1: e6170.b.akamaiedge.net, dns_grouped_A_0: 23.192.74.53 ; pcap_cnt: 5299587, event_type: dns, proto: UDP, dns_type: query, dns_id: 61321, dns_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 5299610, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 61321, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 2, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 5661731, event_type: dns, proto: UDP, dns_type: query, dns_id: 39458, dns_rrname: pixel.mathtag.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5661780, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 39458, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pixel.mathtag.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: pixel.mathtag.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 117, dns_answers_0_rdata: pixel.mathtag.com.edgekey.net, dns_answers_1_rrname: pixel.mathtag.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 20823, dns_answers_1_rdata: e6791.b.akamaiedge.net, dns_answers_2_rrname: e6791.b.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 5, dns_answers_2_rdata: 184.31.204.220, dns_grouped_CNAME_0: pixel.mathtag.com.edgekey.net, dns_grouped_CNAME_1: e6791.b.akamaiedge.net, dns_grouped_A_0: 184.31.204.220 ; pcap_cnt: 5773772, event_type: dns, proto: UDP, dns_type: query, dns_id: 59508, dns_rrname: data-live.flightradar24.com.cdn.cloudflare.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5773778, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 59508, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: data-live.flightradar24.com.cdn.cloudflare.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: data-live.flightradar24.com.cdn.cloudflare.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 104.20.1.101, dns_answers_1_rrname: data-live.flightradar24.com.cdn.cloudflare.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 104.20.0.101, dns_grouped_A_0: 104.20.1.101, dns_grouped_A_1: 104.20.0.101 ; pcap_cnt: 5838134, event_type: dns, proto: UDP, dns_type: query, dns_id: 11621, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5838172, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 11621, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e8218.dscb1.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 16, dns_answers_0_rdata: 23.60.139.27, dns_grouped_A_0: 23.60.139.27 ; pcap_cnt: 5849850, event_type: dns, proto: UDP, dns_type: query, dns_id: 18524, dns_rrname: tps10210.doubleverify.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 5849858, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 18524, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: tps10210.doubleverify.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: tps10210.doubleverify.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 30, dns_answers_0_rdata: nycp-hlb.doubleverify.com, dns_answers_1_rrname: nycp-hlb.doubleverify.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 363, dns_answers_1_rdata: nycp-hlb.dvgtm.akadns.net, dns_answers_2_rrname: nycp-hlb.dvgtm.akadns.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 31, dns_answers_2_rdata: 204.154.111.112, dns_grouped_CNAME_0: nycp-hlb.doubleverify.com, dns_grouped_CNAME_1: nycp-hlb.dvgtm.akadns.net, dns_grouped_A_0: 204.154.111.112 ; pcap_cnt: 5944543, event_type: dns, proto: UDP, dns_type: query, dns_id: 30432, dns_rrname: static.ads-twitter.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 5944674, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 30432, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: static.ads-twitter.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: static.ads-twitter.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 10, dns_answers_0_rdata: p.static.ads-twitter.com, dns_grouped_CNAME_0: p.static.ads-twitter.com, dns_authorities_0_rrname: ads-twitter.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 37, dns_authorities_0_soa_mname: ns1.p34.dynect.net, dns_authorities_0_soa_rname: ops.twitter.com, dns_authorities_0_soa_serial: 303, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 6228682, event_type: dns, proto: UDP, dns_type: query, dns_id: 54387, dns_rrname: www.pinterest.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6228761, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 54387, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.pinterest.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.pinterest.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 412, dns_answers_0_rdata: www.pinterest.com.gslb.pinterest.com, dns_answers_1_rrname: www.pinterest.com.gslb.pinterest.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 43, dns_answers_1_rdata: prod.pinterest.global.map.fastly.net, dns_answers_2_rrname: prod.pinterest.global.map.fastly.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 11, dns_answers_2_rdata: 151.101.0.84, dns_answers_3_rrname: prod.pinterest.global.map.fastly.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 11, dns_answers_3_rdata: 151.101.64.84, dns_answers_4_rrname: prod.pinterest.global.map.fastly.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 11, dns_answers_4_rdata: 151.101.128.84, dns_answers_5_rrname: prod.pinterest.global.map.fastly.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 11, dns_answers_5_rdata: 151.101.192.84, dns_grouped_CNAME_0: www.pinterest.com.gslb.pinterest.com, dns_grouped_CNAME_1: prod.pinterest.global.map.fastly.net, dns_grouped_A_0: 151.101.0.84, dns_grouped_A_1: 151.101.64.84, dns_grouped_A_2: 151.101.128.84, dns_grouped_A_3: 151.101.192.84 ; pcap_cnt: 6325305, event_type: dns, proto: UDP, dns_type: query, dns_id: 61847, dns_rrname: e6603.g.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 6325306, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 61847, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e6603.g.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 546, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499359605, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 6417533, event_type: dns, proto: UDP, dns_type: query, dns_id: 28860, dns_rrname: www.avito.ma, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6417616, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28860, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.avito.ma, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.avito.ma, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 104.20.2.12, dns_answers_1_rrname: www.avito.ma, dns_answers_1_rrtype: A, dns_answers_1_ttl: 299, dns_answers_1_rdata: 104.20.3.12, dns_grouped_A_0: 104.20.2.12, dns_grouped_A_1: 104.20.3.12 ; pcap_cnt: 6447884, event_type: dns, proto: UDP, dns_type: query, dns_id: 5877, dns_rrname: x4i6u4n6.ssl.hwcdn.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 6447947, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 5877, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: x4i6u4n6.ssl.hwcdn.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: x4i6u4n6.ssl.hwcdn.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 281, dns_answers_0_rdata: 205.185.208.154, dns_grouped_A_0: 205.185.208.154 ; pcap_cnt: 6654083, event_type: dns, proto: UDP, dns_type: query, dns_id: 34869, dns_rrname: www.vistaprint.es, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 6654323, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 34869, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.vistaprint.es, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: www.vistaprint.es, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 0, dns_answers_0_rdata: www.vistaprint.at.edgekey.net, dns_answers_1_rrname: www.vistaprint.at.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 298, dns_answers_1_rdata: e4794.a.akamaiedge.net, dns_grouped_CNAME_0: www.vistaprint.at.edgekey.net, dns_grouped_CNAME_1: e4794.a.akamaiedge.net, dns_authorities_0_rrname: a.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 748, dns_authorities_0_soa_mname: n0a.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499361308, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 6815723, event_type: dns, proto: UDP, dns_type: query, dns_id: 27113, dns_rrname: cdn4.thr.com.cdn.cloudflare.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 6816415, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 27113, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cdn4.thr.com.cdn.cloudflare.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: cdn4.thr.com.cdn.cloudflare.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 299, dns_answers_0_rdata: 2400:cb00:2048:0001:0000:0000:6811:3479, dns_answers_1_rrname: cdn4.thr.com.cdn.cloudflare.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 299, dns_answers_1_rdata: 2400:cb00:2048:0001:0000:0000:6811:3579, dns_answers_2_rrname: cdn4.thr.com.cdn.cloudflare.net, dns_answers_2_rrtype: AAAA, dns_answers_2_ttl: 299, dns_answers_2_rdata: 2400:cb00:2048:0001:0000:0000:6811:3679, dns_answers_3_rrname: cdn4.thr.com.cdn.cloudflare.net, dns_answers_3_rrtype: AAAA, dns_answers_3_ttl: 299, dns_answers_3_rdata: 2400:cb00:2048:0001:0000:0000:6811:3879, dns_answers_4_rrname: cdn4.thr.com.cdn.cloudflare.net, dns_answers_4_rrtype: AAAA, dns_answers_4_ttl: 299, dns_answers_4_rdata: 2400:cb00:2048:0001:0000:0000:6811:3779, dns_grouped_AAAA_0: 2400:cb00:2048:0001:0000:0000:6811:3479, dns_grouped_AAAA_1: 2400:cb00:2048:0001:0000:0000:6811:3579, dns_grouped_AAAA_2: 2400:cb00:2048:0001:0000:0000:6811:3679, dns_grouped_AAAA_3: 2400:cb00:2048:0001:0000:0000:6811:3879, dns_grouped_AAAA_4: 2400:cb00:2048:0001:0000:0000:6811:3779 ; pcap_cnt: 7802744, event_type: dns, proto: UDP, dns_type: query, dns_id: 57297, dns_rrname: a1165.b.akamai.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7802745, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 57297, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a1165.b.akamai.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: b.akamai.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 995, dns_authorities_0_soa_mname: n0b.akamai.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499364949, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 7916242, event_type: dns, proto: UDP, dns_type: query, dns_id: 13102, dns_rrname: twitter.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7916253, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13102, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: twitter.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: twitter.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 17, dns_authorities_0_soa_mname: ns1.p26.dynect.net, dns_authorities_0_soa_rname: zone-admin.dyndns.com, dns_authorities_0_soa_serial: 2007136031, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 8491901, event_type: dns, proto: UDP, dns_type: query, dns_id: 5882, dns_rrname: pagead.l.doubleclick.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8491904, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 5882, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pagead.l.doubleclick.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: l.doubleclick.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 582, dns_authorities_0_soa_mname: ns3.google.com, dns_authorities_0_soa_rname: dns-admin.google.com, dns_authorities_0_soa_serial: 161069820, dns_authorities_0_soa_refresh: 900, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 8607448, event_type: dns, proto: UDP, dns_type: query, dns_id: 30609, dns_rrname: dpm.demdex.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8607514, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 30609, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dpm.demdex.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dpm.demdex.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: gslb.demdex.net, dns_answers_1_rrname: gslb.demdex.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 881, dns_answers_1_rdata: edge-va6.demdex.net, dns_answers_2_rrname: edge-va6.demdex.net, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 527, dns_answers_2_rdata: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_3_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 52.71.86.199, dns_answers_4_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 54.174.165.213, dns_answers_5_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 54.210.118.128, dns_answers_6_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 107.23.112.131, dns_answers_7_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 54.208.109.68, dns_answers_8_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 54.164.45.172, dns_answers_9_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 1, dns_answers_9_rdata: 52.86.189.192, dns_answers_10_rrname: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 1, dns_answers_10_rdata: 52.72.159.231, dns_grouped_A_0: 52.71.86.199, dns_grouped_A_1: 54.174.165.213, dns_grouped_A_2: 54.210.118.128, dns_grouped_A_3: 107.23.112.131, dns_grouped_A_4: 54.208.109.68, dns_grouped_A_5: 54.164.45.172, dns_grouped_A_6: 52.86.189.192, dns_grouped_A_7: 52.72.159.231, dns_grouped_CNAME_0: gslb.demdex.net, dns_grouped_CNAME_1: edge-va6.demdex.net, dns_grouped_CNAME_2: dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com ; pcap_cnt: 8798293, event_type: dns, proto: UDP, dns_type: query, dns_id: 18471, dns_rrname: yo.xuite.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8798302, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 18471, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: yo.xuite.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: yo.xuite.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 62, dns_answers_0_rdata: 210.61.56.43, dns_grouped_A_0: 210.61.56.43 ; pcap_cnt: 8812025, event_type: dns, proto: UDP, dns_type: query, dns_id: 63507, dns_rrname: pxl.connexity.net, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 8812073, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 63507, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pxl.connexity.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: connexity.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 317, dns_authorities_0_soa_mname: ns-392.awsdns-49.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 8851769, event_type: dns, proto: UDP, dns_type: query, dns_id: 35684, dns_rrname: plus.google.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8851787, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 35684, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: plus.google.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: plus.google.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 172.217.6.206, dns_grouped_A_0: 172.217.6.206 ; pcap_cnt: 9132674, event_type: dns, proto: UDP, dns_type: query, dns_id: 5908, dns_rrname: capture.condenastdigital.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9132681, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 5908, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: capture.condenastdigital.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: capture.condenastdigital.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 15, dns_answers_0_rdata: 34.224.92.80, dns_answers_1_rrname: capture.condenastdigital.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 15, dns_answers_1_rdata: 34.197.164.44, dns_answers_2_rrname: capture.condenastdigital.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 15, dns_answers_2_rdata: 54.209.123.201, dns_answers_3_rrname: capture.condenastdigital.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 15, dns_answers_3_rdata: 52.4.232.179, dns_answers_4_rrname: capture.condenastdigital.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 15, dns_answers_4_rdata: 54.164.83.83, dns_answers_5_rrname: capture.condenastdigital.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 15, dns_answers_5_rdata: 34.226.236.171, dns_grouped_A_0: 34.224.92.80, dns_grouped_A_1: 34.197.164.44, dns_grouped_A_2: 54.209.123.201, dns_grouped_A_3: 52.4.232.179, dns_grouped_A_4: 54.164.83.83, dns_grouped_A_5: 34.226.236.171
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.