['flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.8, src_port: 61867, dest_ip: 192.168.10.3, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 166, flow_bytes_toclient: 422, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 232, flow_bytes_toclient: 488, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 166, flow_bytes_toclient: 198, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 9204439, event_type: dns, proto: UDP, dns_type: query, dns_id: 64046, dns_rrname: eum-col.appdynamics.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9204440, event_type: dns, proto: UDP, dns_type: query, dns_id: 64046, dns_rrname: eum-col.appdynamics.com, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 9204441, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 64046, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: eum-col.appdynamics.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: eum-col.appdynamics.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 24, dns_answers_0_rdata: 34.203.126.24, dns_answers_1_rrname: eum-col.appdynamics.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 24, dns_answers_1_rdata: 52.3.127.200, dns_answers_2_rrname: eum-col.appdynamics.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 24, dns_answers_2_rdata: 34.206.74.95, dns_answers_3_rrname: eum-col.appdynamics.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 24, dns_answers_3_rdata: 52.205.99.58, dns_answers_4_rrname: eum-col.appdynamics.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 24, dns_answers_4_rdata: 52.22.205.9, dns_answers_5_rrname: eum-col.appdynamics.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 24, dns_answers_5_rdata: 34.198.210.245, dns_answers_6_rrname: eum-col.appdynamics.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 24, dns_answers_6_rdata: 34.203.123.218, dns_answers_7_rrname: eum-col.appdynamics.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 24, dns_answers_7_rdata: 52.3.205.157, dns_grouped_A_0: 34.203.126.24, dns_grouped_A_1: 52.3.127.200, dns_grouped_A_2: 34.206.74.95, dns_grouped_A_3: 52.205.99.58, dns_grouped_A_4: 52.22.205.9, dns_grouped_A_5: 34.198.210.245, dns_grouped_A_6: 34.203.123.218, dns_grouped_A_7: 52.3.205.157 ; pcap_cnt: 9204442, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 64046, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: eum-col.appdynamics.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: eum-col.appdynamics.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 24, dns_answers_0_rdata: 34.203.126.24, dns_answers_1_rrname: eum-col.appdynamics.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 24, dns_answers_1_rdata: 52.3.127.200, dns_answers_2_rrname: eum-col.appdynamics.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 24, dns_answers_2_rdata: 34.206.74.95, dns_answers_3_rrname: eum-col.appdynamics.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 24, dns_answers_3_rdata: 52.205.99.58, dns_answers_4_rrname: eum-col.appdynamics.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 24, dns_answers_4_rdata: 52.22.205.9, dns_answers_5_rrname: eum-col.appdynamics.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 24, dns_answers_5_rdata: 34.198.210.245, dns_answers_6_rrname: eum-col.appdynamics.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 24, dns_answers_6_rdata: 34.203.123.218, dns_answers_7_rrname: eum-col.appdynamics.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 24, dns_answers_7_rdata: 52.3.205.157, dns_grouped_A_0: 34.203.126.24, dns_grouped_A_1: 52.3.127.200, dns_grouped_A_2: 34.206.74.95, dns_grouped_A_3: 52.205.99.58, dns_grouped_A_4: 52.22.205.9, dns_grouped_A_5: 34.198.210.245, dns_grouped_A_6: 34.203.123.218, dns_grouped_A_7: 52.3.205.157 ; pcap_cnt: 9330177, event_type: dns, proto: UDP, dns_type: query, dns_id: 36043, dns_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9330178, event_type: dns, proto: UDP, dns_type: query, dns_id: 36043, dns_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 9330179, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36043, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 34.192.94.222, dns_answers_1_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 52.203.166.101, dns_answers_2_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 34.197.172.177, dns_answers_3_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 34.201.192.41, dns_answers_4_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 34.195.155.162, dns_answers_5_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 34.197.163.181, dns_answers_6_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 52.45.240.184, dns_answers_7_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 52.2.0.226, dns_grouped_A_0: 34.192.94.222, dns_grouped_A_1: 52.203.166.101, dns_grouped_A_2: 34.197.172.177, dns_grouped_A_3: 34.201.192.41, dns_grouped_A_4: 34.195.155.162, dns_grouped_A_5: 34.197.163.181, dns_grouped_A_6: 52.45.240.184, dns_grouped_A_7: 52.2.0.226 ; pcap_cnt: 9330180, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36043, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 34.192.94.222, dns_answers_1_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 52.203.166.101, dns_answers_2_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 34.197.172.177, dns_answers_3_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 34.201.192.41, dns_answers_4_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 34.195.155.162, dns_answers_5_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 34.197.163.181, dns_answers_6_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 52.45.240.184, dns_answers_7_rrname: usvalzdiprd-external-6361273.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 52.2.0.226, dns_grouped_A_0: 34.192.94.222, dns_grouped_A_1: 52.203.166.101, dns_grouped_A_2: 34.197.172.177, dns_grouped_A_3: 34.201.192.41, dns_grouped_A_4: 34.195.155.162, dns_grouped_A_5: 34.197.163.181, dns_grouped_A_6: 52.45.240.184, dns_grouped_A_7: 52.2.0.226 ; pcap_cnt: 10147826, event_type: dns, proto: UDP, dns_type: query, dns_id: 37809, dns_rrname: y.ssl.global.fastly.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10147827, event_type: dns, proto: UDP, dns_type: query, dns_id: 37809, dns_rrname: y.ssl.global.fastly.net, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 10147833, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37809, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: y.ssl.global.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: y.ssl.global.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 25, dns_answers_0_rdata: 151.101.45.130, dns_grouped_A_0: 151.101.45.130 ; pcap_cnt: 10147834, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37809, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: y.ssl.global.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: y.ssl.global.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 25, dns_answers_0_rdata: 151.101.45.130, dns_grouped_A_0: 151.101.45.130
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.