['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 62486, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 110, flow_bytes_toclient: 164, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 141, flow_bytes_toclient: 223, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 111, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 84, flow_bytes_toclient: 180, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 154, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 196, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 97, flow_bytes_toclient: 113, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 83, flow_bytes_toclient: 118, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 108, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 208, flow_bytes_toclient: 464, flow_age: 187, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 150, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 118, flow_bytes_toclient: 246, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 164, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 108, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 149, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 175, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 100, flow_bytes_toclient: 185, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 114, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 99, flow_bytes_toclient: 186, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 84, flow_bytes_toclient: 275, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 83, flow_bytes_toclient: 185, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 108, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 106, flow_bytes_toclient: 159, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 217, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 84, flow_bytes_toclient: 100, flow_age: 1, flow_state: established, flow_reason: shutdown ; pcap_cnt: 2678136, event_type: dns, proto: UDP, dns_type: query, dns_id: 60815, dns_rrname: galleryuseastprod.blob.core.windows.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 2678611, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 60815, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: galleryuseastprod.blob.core.windows.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: galleryuseastprod.blob.core.windows.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 26, dns_answers_0_rdata: blob.bl2prdstr04a.store.core.windows.net, dns_answers_1_rrname: blob.bl2prdstr04a.store.core.windows.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 249, dns_answers_1_rdata: 23.96.64.78, dns_grouped_A_0: 23.96.64.78, dns_grouped_CNAME_0: blob.bl2prdstr04a.store.core.windows.net ; pcap_cnt: 3517605, event_type: dns, proto: UDP, dns_type: query, dns_id: 57734, dns_rrname: elb-vpc-pixel-tracker-front-prod-765259041.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 3517670, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 57734, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: elb-vpc-pixel-tracker-front-prod-765259041.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 16, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 3711787, event_type: dns, proto: UDP, dns_type: query, dns_id: 63441, dns_rrname: install.mysmartprice.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 3711832, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 63441, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: install.mysmartprice.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: install.mysmartprice.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 119.81.220.47, dns_grouped_A_0: 119.81.220.47 ; pcap_cnt: 3976886, event_type: dns, proto: UDP, dns_type: query, dns_id: 527, dns_rrname: a.wishabi.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 3976938, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 527, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a.wishabi.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: a.wishabi.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 44, dns_answers_0_rdata: 34.226.98.144, dns_answers_1_rrname: a.wishabi.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 44, dns_answers_1_rdata: 52.54.240.207, dns_answers_2_rrname: a.wishabi.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 44, dns_answers_2_rdata: 54.175.196.166, dns_answers_3_rrname: a.wishabi.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 44, dns_answers_3_rdata: 34.193.10.66, dns_answers_4_rrname: a.wishabi.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 44, dns_answers_4_rdata: 34.203.49.32, dns_answers_5_rrname: a.wishabi.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 44, dns_answers_5_rdata: 52.7.211.31, dns_grouped_A_0: 34.226.98.144, dns_grouped_A_1: 52.54.240.207, dns_grouped_A_2: 54.175.196.166, dns_grouped_A_3: 34.193.10.66, dns_grouped_A_4: 34.203.49.32, dns_grouped_A_5: 52.7.211.31 ; pcap_cnt: 4305859, event_type: dns, proto: UDP, dns_type: query, dns_id: 51641, dns_rrname: cdn-view.c3tag.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4305897, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 51641, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cdn-view.c3tag.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: cdn-view.c3tag.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: c3view.blueshiftinforma.netdna-cdn.com, dns_answers_1_rrname: c3view.blueshiftinforma.netdna-cdn.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 26, dns_answers_1_rdata: 146.88.138.76, dns_grouped_CNAME_0: c3view.blueshiftinforma.netdna-cdn.com, dns_grouped_A_0: 146.88.138.76 ; pcap_cnt: 4426892, event_type: dns, proto: UDP, dns_type: query, dns_id: 33499, dns_rrname: libs.de.coremetrics.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4426958, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 33499, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: libs.de.coremetrics.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: libs.de.coremetrics.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 2186, dns_answers_0_rdata: wildcard.de.coremetrics.com.edgekey.net, dns_answers_1_rrname: wildcard.de.coremetrics.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 19058, dns_answers_1_rdata: e6725.g.akamaiedge.net, dns_answers_2_rrname: e6725.g.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 19, dns_answers_2_rdata: 23.50.124.200, dns_grouped_CNAME_0: wildcard.de.coremetrics.com.edgekey.net, dns_grouped_CNAME_1: e6725.g.akamaiedge.net, dns_grouped_A_0: 23.50.124.200 ; pcap_cnt: 5144782, event_type: dns, proto: UDP, dns_type: query, dns_id: 2126, dns_rrname: ox-d.ksl.servedbyopenx.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5145276, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 2126, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ox-d.ksl.servedbyopenx.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ox-d.ksl.servedbyopenx.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 599, dns_answers_0_rdata: 173.241.242.220, dns_grouped_A_0: 173.241.242.220 ; pcap_cnt: 5557770, event_type: dns, proto: UDP, dns_type: query, dns_id: 55702, dns_rrname: a.rfihub.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5557948, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 55702, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a.rfihub.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: a.rfihub.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 3, dns_answers_0_rdata: a-tm.rfihub.com, dns_answers_1_rrname: a-tm.rfihub.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 24, dns_answers_1_rdata: 199.38.164.54, dns_grouped_A_0: 199.38.164.54, dns_grouped_CNAME_0: a-tm.rfihub.com ; pcap_cnt: 5709701, event_type: dns, proto: UDP, dns_type: query, dns_id: 22145, dns_rrname: s.amazon-adsystem.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5709813, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 22145, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s.amazon-adsystem.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s.amazon-adsystem.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 52.94.232.32, dns_grouped_A_0: 52.94.232.32 ; pcap_cnt: 6144549, event_type: dns, proto: UDP, dns_type: query, dns_id: 14292, dns_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6144623, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 14292, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 98.139.225.43, dns_answers_1_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 72.30.3.43, dns_grouped_A_0: 98.139.225.43, dns_grouped_A_1: 72.30.3.43 ; pcap_cnt: 6199990, event_type: dns, proto: UDP, dns_type: query, dns_id: 126, dns_rrname: d2fashanjl7d9f.cloudfront.net, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 6200003, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 126, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: d2fashanjl7d9f.cloudfront.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: d2fashanjl7d9f.cloudfront.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 59, dns_answers_0_rdata: 2600:9000:2038:5000:0006:44e3:f8c0:93a1, dns_answers_1_rrname: d2fashanjl7d9f.cloudfront.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 59, dns_answers_1_rdata: 2600:9000:2038:e000:0006:44e3:f8c0:93a1, dns_answers_2_rrname: d2fashanjl7d9f.cloudfront.net, dns_answers_2_rrtype: AAAA, dns_answers_2_ttl: 59, dns_answers_2_rdata: 2600:9000:2038:f600:0006:44e3:f8c0:93a1, dns_answers_3_rrname: d2fashanjl7d9f.cloudfront.net, dns_answers_3_rrtype: AAAA, dns_answers_3_ttl: 59, dns_answers_3_rdata: 2600:9000:2038:f400:0006:44e3:f8c0:93a1, dns_answers_4_rrname: d2fashanjl7d9f.cloudfront.net, dns_answers_4_rrtype: AAAA, dns_answers_4_ttl: 59, dns_answers_4_rdata: 2600:9000:2038:a600:0006:44e3:f8c0:93a1, dns_answers_5_rrname: d2fashanjl7d9f.cloudfront.net, dns_answers_5_rrtype: AAAA, dns_answers_5_ttl: 59, dns_answers_5_rdata: 2600:9000:2038:b600:0006:44e3:f8c0:93a1, dns_answers_6_rrname: d2fashanjl7d9f.cloudfront.net, dns_answers_6_rrtype: AAAA, dns_answers_6_ttl: 59, dns_answers_6_rdata: 2600:9000:2038:2800:0006:44e3:f8c0:93a1, dns_answers_7_rrname: d2fashanjl7d9f.cloudfront.net, dns_answers_7_rrtype: AAAA, dns_answers_7_ttl: 59, dns_answers_7_rdata: 2600:9000:2038:da00:0006:44e3:f8c0:93a1, dns_grouped_AAAA_0: 2600:9000:2038:5000:0006:44e3:f8c0:93a1, dns_grouped_AAAA_1: 2600:9000:2038:e000:0006:44e3:f8c0:93a1, dns_grouped_AAAA_2: 2600:9000:2038:f600:0006:44e3:f8c0:93a1, dns_grouped_AAAA_3: 2600:9000:2038:f400:0006:44e3:f8c0:93a1, dns_grouped_AAAA_4: 2600:9000:2038:a600:0006:44e3:f8c0:93a1, dns_grouped_AAAA_5: 2600:9000:2038:b600:0006:44e3:f8c0:93a1, dns_grouped_AAAA_6: 2600:9000:2038:2800:0006:44e3:f8c0:93a1, dns_grouped_AAAA_7: 2600:9000:2038:da00:0006:44e3:f8c0:93a1 ; pcap_cnt: 6556950, event_type: dns, proto: UDP, dns_type: query, dns_id: 38412, dns_rrname: a1089.d.akamai.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 6556957, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 38412, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a1089.d.akamai.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: d.akamai.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 705, dns_authorities_0_soa_mname: n0d.akamai.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499360719, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 6785891, event_type: dns, proto: UDP, dns_type: query, dns_id: 16172, dns_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6785934, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16172, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 4, dns_answers_0_rdata: 54.85.200.243, dns_answers_1_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 4, dns_answers_1_rdata: 52.20.228.74, dns_answers_2_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 4, dns_answers_2_rdata: 52.7.37.173, dns_answers_3_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 4, dns_answers_3_rdata: 52.71.161.112, dns_answers_4_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 4, dns_answers_4_rdata: 54.210.232.196, dns_answers_5_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 4, dns_answers_5_rdata: 54.85.32.27, dns_answers_6_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 4, dns_answers_6_rdata: 34.194.80.56, dns_answers_7_rrname: idaas-production.us-east-1.elasticbeanstalk.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 4, dns_answers_7_rdata: 54.210.75.202, dns_grouped_A_0: 54.85.200.243, dns_grouped_A_1: 52.20.228.74, dns_grouped_A_2: 52.7.37.173, dns_grouped_A_3: 52.71.161.112, dns_grouped_A_4: 54.210.232.196, dns_grouped_A_5: 54.85.32.27, dns_grouped_A_6: 34.194.80.56, dns_grouped_A_7: 54.210.75.202 ; pcap_cnt: 7276112, event_type: dns, proto: UDP, dns_type: query, dns_id: 17347, dns_rrname: api.exponea.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7276129, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 17347, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: api.exponea.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: exponea.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 801, dns_authorities_0_soa_mname: ns-131.awsdns-16.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 7728810, event_type: dns, proto: UDP, dns_type: query, dns_id: 9829, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7728900, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 9829, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: scontent.xx.fbcdn.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 16, dns_answers_0_rdata: 157.240.18.19, dns_grouped_A_0: 157.240.18.19 ; pcap_cnt: 7805455, event_type: dns, proto: UDP, dns_type: query, dns_id: 22989, dns_rrname: a883.g.akamai.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7805518, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 22989, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a883.g.akamai.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: g.akamai.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 998, dns_authorities_0_soa_mname: n0g.akamai.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499364921, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 7902754, event_type: dns, proto: UDP, dns_type: query, dns_id: 62794, dns_rrname: static.ads-twitter.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7903295, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 62794, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: static.ads-twitter.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: static.ads-twitter.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: p.static.ads-twitter.com, dns_grouped_CNAME_0: p.static.ads-twitter.com, dns_authorities_0_rrname: ads-twitter.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1, dns_authorities_0_soa_mname: ns1.p34.dynect.net, dns_authorities_0_soa_rname: ops.twitter.com, dns_authorities_0_soa_serial: 303, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 8007519, event_type: dns, proto: UDP, dns_type: query, dns_id: 2960, dns_rrname: d18t8smu5ooexd.cloudfront.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8007702, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 2960, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: d18t8smu5ooexd.cloudfront.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: d18t8smu5ooexd.cloudfront.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 85, dns_authorities_0_soa_mname: ns-1361.awsdns-42.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 8105400, event_type: dns, proto: UDP, dns_type: query, dns_id: 26248, dns_rrname: aa.agkn.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8105459, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 26248, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: aa.agkn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: aa.agkn.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 63.251.88.56, dns_answers_1_rrname: aa.agkn.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 156.154.200.36, dns_grouped_A_0: 63.251.88.56, dns_grouped_A_1: 156.154.200.36 ; pcap_cnt: 8272900, event_type: dns, proto: UDP, dns_type: query, dns_id: 8362, dns_rrname: dnkzzz1hlto79.cloudfront.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8272920, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 8362, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dnkzzz1hlto79.cloudfront.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: dnkzzz1hlto79.cloudfront.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 786, dns_authorities_0_soa_mname: ns-1788.awsdns-31.co.uk, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 8392214, event_type: dns, proto: UDP, dns_type: query, dns_id: 28742, dns_rrname: data.agkn.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8392336, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28742, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: data.agkn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: data.agkn.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 52.204.76.90, dns_answers_2_rrname: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 52.201.35.194, dns_answers_3_rrname: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 50.17.177.105, dns_answers_4_rrname: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 52.206.66.6, dns_answers_5_rrname: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 52.21.27.87, dns_answers_6_rrname: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 34.225.147.89, dns_answers_7_rrname: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 52.0.93.246, dns_answers_8_rrname: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 52.1.14.213, dns_grouped_CNAME_0: data-agkn-com-1198526359.us-east-1.elb.amazonaws.com, dns_grouped_A_0: 52.204.76.90, dns_grouped_A_1: 52.201.35.194, dns_grouped_A_2: 50.17.177.105, dns_grouped_A_3: 52.206.66.6, dns_grouped_A_4: 52.21.27.87, dns_grouped_A_5: 34.225.147.89, dns_grouped_A_6: 52.0.93.246, dns_grouped_A_7: 52.1.14.213 ; pcap_cnt: 8501189, event_type: dns, proto: UDP, dns_type: query, dns_id: 16663, dns_rrname: gz.symcd.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8501250, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16663, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: gz.symcd.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: gz.symcd.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1473, dns_answers_0_rdata: ocsp-ds.ws.symantec.com.edgekey.net, dns_answers_1_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 0, dns_answers_1_rdata: e8218.dscb1.akamaiedge.net, dns_answers_2_rrname: e8218.dscb1.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 0, dns_answers_2_rdata: 23.54.187.27, dns_grouped_A_0: 23.54.187.27, dns_grouped_CNAME_0: ocsp-ds.ws.symantec.com.edgekey.net, dns_grouped_CNAME_1: e8218.dscb1.akamaiedge.net ; pcap_cnt: 8640688, event_type: dns, proto: UDP, dns_type: query, dns_id: 27466, dns_rrname: adserver.adtechus.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8640735, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 27466, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: adserver.adtechus.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: adserver.adtechus.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 204, dns_answers_0_rdata: 152.163.66.131, dns_grouped_A_0: 152.163.66.131 ; pcap_cnt: 8757066, event_type: dns, proto: UDP, dns_type: query, dns_id: 6727, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8757067, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 6727, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 3, dns_answers_0_rdata: e8218.dscb1.akamaiedge.net, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 9, dns_answers_1_rdata: 23.61.187.27, dns_grouped_CNAME_0: e8218.dscb1.akamaiedge.net, dns_grouped_A_0: 23.61.187.27 ; pcap_cnt: 8969042, event_type: dns, proto: UDP, dns_type: query, dns_id: 28539, dns_rrname: a.optnmnstr.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8969134, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28539, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a.optnmnstr.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: a.optnmnstr.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 15, dns_answers_0_rdata: adblockstopper.awesomemotive.netdna-cdn.com, dns_grouped_CNAME_0: adblockstopper.awesomemotive.netdna-cdn.com, dns_authorities_0_rrname: netdna-cdn.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 389, dns_authorities_0_soa_mname: ns-97.awsdns-12.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 9280005, event_type: dns, proto: UDP, dns_type: query, dns_id: 54577, dns_rrname: www.nifty.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9280464, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 54577, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.nifty.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.nifty.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 100, dns_answers_0_rdata: 121.94.174.14, dns_grouped_A_0: 121.94.174.14
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.