['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 60228, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 139, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 184, flow_bytes_toclient: 346, flow_age: 102, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 3, flow_pkts_toclient: 3, flow_bytes_toserver: 281, flow_bytes_toclient: 451, flow_age: 181, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 204, flow_bytes_toclient: 290, flow_age: 1, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 97, flow_bytes_toclient: 161, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 84, flow_bytes_toclient: 121, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 136, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 217, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 90, flow_bytes_toclient: 199, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 188, flow_bytes_toclient: 317, flow_age: 40, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 170, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 83, flow_bytes_toclient: 177, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 109, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 90, flow_bytes_toclient: 151, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 156, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 99, flow_bytes_toclient: 157, flow_age: 1, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 200, flow_bytes_toclient: 262, flow_age: 140, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 108, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 202, flow_bytes_toclient: 362, flow_age: 88, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 179, flow_bytes_toclient: 247, flow_age: 109, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 4, flow_pkts_toclient: 4, flow_bytes_toserver: 374, flow_bytes_toclient: 617, flow_age: 357, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 144, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 188, flow_bytes_toclient: 220, flow_age: 45, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 3, flow_pkts_toclient: 3, flow_bytes_toserver: 318, flow_bytes_toclient: 481, flow_age: 125, flow_state: established, flow_reason: timeout ; pcap_cnt: 82698, event_type: dns, proto: UDP, dns_type: query, dns_id: 3825, dns_rrname: i.imgur.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 82897, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 3825, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: i.imgur.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: i.imgur.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: prod.imgur.map.fastlylb.net, dns_answers_1_rrname: prod.imgur.map.fastlylb.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 9, dns_answers_1_rdata: 151.101.208.193, dns_grouped_CNAME_0: prod.imgur.map.fastlylb.net, dns_grouped_A_0: 151.101.208.193 ; pcap_cnt: 474463, event_type: dns, proto: UDP, dns_type: query, dns_id: 64608, dns_rrname: tags.bluekai.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 474493, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 64608, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: tags.bluekai.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: tags.bluekai.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 47, dns_answers_0_rdata: tags.phx.bluekai.com, dns_grouped_CNAME_0: tags.phx.bluekai.com, dns_authorities_0_rrname: phx.bluekai.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 35, dns_authorities_0_soa_mname: ns-1632.awsdns-12.co.uk, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 774863, event_type: dns, proto: UDP, dns_type: query, dns_id: 15606, dns_rrname: 181.166.87.54.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 2 ; pcap_cnt: 775068, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 15606, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 181.166.87.54.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 181.166.87.54.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 300, dns_answers_0_rdata: ec2-54-87-166-181.compute-1.amazonaws.com, dns_grouped_PTR_0: ec2-54-87-166-181.compute-1.amazonaws.com ; pcap_cnt: 3767517, event_type: dns, proto: UDP, dns_type: query, dns_id: 8713, dns_rrname: 75.63.46.193.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 3768785, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 8713, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 75.63.46.193.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 75.63.46.193.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 599, dns_answers_0_rdata: irqs.ioam.de, dns_grouped_PTR_0: irqs.ioam.de ; pcap_cnt: 3997962, event_type: dns, proto: UDP, dns_type: query, dns_id: 34763, dns_rrname: idsync-ext-tf.rlcdn.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 3998278, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 34763, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: idsync-ext-tf.rlcdn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: idsync-ext-tf.rlcdn.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 59, dns_answers_0_rdata: 34.204.151.125, dns_answers_1_rrname: idsync-ext-tf.rlcdn.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 59, dns_answers_1_rdata: 34.205.227.217, dns_answers_2_rrname: idsync-ext-tf.rlcdn.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 59, dns_answers_2_rdata: 34.206.129.221, dns_answers_3_rrname: idsync-ext-tf.rlcdn.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 59, dns_answers_3_rdata: 34.226.176.176, dns_answers_4_rrname: idsync-ext-tf.rlcdn.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 59, dns_answers_4_rdata: 34.225.152.209, dns_answers_5_rrname: idsync-ext-tf.rlcdn.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 59, dns_answers_5_rdata: 34.224.245.1, dns_answers_6_rrname: idsync-ext-tf.rlcdn.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 59, dns_answers_6_rdata: 34.224.130.238, dns_answers_7_rrname: idsync-ext-tf.rlcdn.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 59, dns_answers_7_rdata: 34.224.116.141, dns_grouped_A_0: 34.204.151.125, dns_grouped_A_1: 34.205.227.217, dns_grouped_A_2: 34.206.129.221, dns_grouped_A_3: 34.226.176.176, dns_grouped_A_4: 34.225.152.209, dns_grouped_A_5: 34.224.245.1, dns_grouped_A_6: 34.224.130.238, dns_grouped_A_7: 34.224.116.141 ; pcap_cnt: 4397065, event_type: dns, proto: UDP, dns_type: query, dns_id: 37424, dns_rrname: clients.l.google.com, dns_rrtype: A, dns_tx_id: 4 ; pcap_cnt: 4397098, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37424, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: clients.l.google.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: clients.l.google.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 172.217.10.110, dns_grouped_A_0: 172.217.10.110 ; pcap_cnt: 5719579, event_type: dns, proto: UDP, dns_type: query, dns_id: 53953, dns_rrname: 44.138.55.52.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 5719656, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 53953, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 44.138.55.52.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 44.138.55.52.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 300, dns_answers_0_rdata: ec2-52-55-138-44.compute-1.amazonaws.com, dns_grouped_PTR_0: ec2-52-55-138-44.compute-1.amazonaws.com ; pcap_cnt: 5721504, event_type: dns, proto: UDP, dns_type: query, dns_id: 39206, dns_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 5721531, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 39206, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 55, dns_answers_0_rdata: 98.139.225.43, dns_answers_1_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 55, dns_answers_1_rdata: 72.30.3.43, dns_grouped_A_0: 98.139.225.43, dns_grouped_A_1: 72.30.3.43 ; pcap_cnt: 6524344, event_type: dns, proto: UDP, dns_type: query, dns_id: 64466, dns_rrname: 56.216.172.69.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 6524404, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 64466, dns_flags: 8183, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 56.216.172.69.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NXDOMAIN, dns_authorities_0_rrname: 216.172.69.in-addr.arpa, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 384, dns_authorities_0_soa_mname: ns1.peer1.net, dns_authorities_0_soa_rname: hostmaster@216.172.69.in-addr.arpa, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 16384, dns_authorities_0_soa_retry: 2048, dns_authorities_0_soa_expire: 1048576, dns_authorities_0_soa_minimum: 2560 ; pcap_cnt: 6748125, event_type: dns, proto: UDP, dns_type: query, dns_id: 3260, dns_rrname: pix.btrll.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6748148, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 3260, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pix.btrll.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: pix.btrll.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 226, dns_answers_0_rdata: geo-um.btrll.com, dns_answers_1_rrname: geo-um.btrll.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 162.208.22.39, dns_grouped_CNAME_0: geo-um.btrll.com, dns_grouped_A_0: 162.208.22.39 ; pcap_cnt: 7392416, event_type: dns, proto: UDP, dns_type: query, dns_id: 42561, dns_rrname: www.sony.jp, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7392740, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 42561, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.sony.jp, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.sony.jp, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 300, dns_answers_0_rdata: cs328.wpc.omicroncdn.net, dns_answers_1_rrname: cs328.wpc.omicroncdn.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 3600, dns_answers_1_rdata: 93.184.215.129, dns_grouped_A_0: 93.184.215.129, dns_grouped_CNAME_0: cs328.wpc.omicroncdn.net ; pcap_cnt: 7514115, event_type: dns, proto: UDP, dns_type: query, dns_id: 55279, dns_rrname: ping.chartbeat.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7514127, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 55279, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ping.chartbeat.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ping.chartbeat.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 23.23.170.207, dns_answers_1_rrname: ping.chartbeat.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 23.23.139.95, dns_answers_2_rrname: ping.chartbeat.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 54.221.250.240, dns_answers_3_rrname: ping.chartbeat.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 50.19.83.4, dns_answers_4_rrname: ping.chartbeat.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 54.225.147.154, dns_answers_5_rrname: ping.chartbeat.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 50.16.197.102, dns_answers_6_rrname: ping.chartbeat.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 54.197.255.253, dns_answers_7_rrname: ping.chartbeat.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 54.225.163.44, dns_grouped_A_0: 23.23.170.207, dns_grouped_A_1: 23.23.139.95, dns_grouped_A_2: 54.221.250.240, dns_grouped_A_3: 50.19.83.4, dns_grouped_A_4: 54.225.147.154, dns_grouped_A_5: 50.16.197.102, dns_grouped_A_6: 54.197.255.253, dns_grouped_A_7: 54.225.163.44 ; pcap_cnt: 7928664, event_type: dns, proto: UDP, dns_type: query, dns_id: 20657, dns_rrname: s.skimresources.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7928944, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 20657, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s.skimresources.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: s.skimresources.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 100, dns_answers_0_rdata: s.skimresources.com.a.prod.fastly.net, dns_grouped_CNAME_0: s.skimresources.com.a.prod.fastly.net, dns_authorities_0_rrname: fastly.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 12, dns_authorities_0_soa_mname: ns1.fastly.net, dns_authorities_0_soa_rname: hostmaster.fastly.com, dns_authorities_0_soa_serial: 2017052201, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 30 ; pcap_cnt: 8081295, event_type: dns, proto: UDP, dns_type: query, dns_id: 56346, dns_rrname: collect.life.com.tw, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8081305, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 56346, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: collect.life.com.tw, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: life.com.tw, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1799, dns_authorities_0_soa_mname: ben.ns.cloudflare.com, dns_authorities_0_soa_rname: dns.cloudflare.com, dns_authorities_0_soa_serial: 2024841653, dns_authorities_0_soa_refresh: 10000, dns_authorities_0_soa_retry: 2400, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 3600 ; pcap_cnt: 8091124, event_type: dns, proto: UDP, dns_type: query, dns_id: 60852, dns_rrname: 189.58.170.134.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 2 ; pcap_cnt: 8091143, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 60852, dns_flags: 8183, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 189.58.170.134.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NXDOMAIN, dns_authorities_0_rrname: 170.134.in-addr.arpa, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1484, dns_authorities_0_soa_mname: ns1.msft.net, dns_authorities_0_soa_rname: msnhst.microsoft.com, dns_authorities_0_soa_serial: 2017062801, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 7200000, dns_authorities_0_soa_minimum: 3600 ; pcap_cnt: 8179478, event_type: dns, proto: UDP, dns_type: query, dns_id: 4143, dns_rrname: pixel-origin.mathtag.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8179490, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 4143, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pixel-origin.mathtag.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: mathtag.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 23, dns_authorities_0_soa_mname: ns1.p06.dynect.net, dns_authorities_0_soa_rname: technology.mediamath.com, dns_authorities_0_soa_serial: 422236, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 8272010, event_type: dns, proto: UDP, dns_type: query, dns_id: 30362, dns_rrname: s.adroll.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8272053, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 30362, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s.adroll.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s.adroll.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 757, dns_answers_0_rdata: wildcard.adroll.com.edgekey.net, dns_answers_1_rrname: wildcard.adroll.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 230, dns_answers_1_rdata: e4007.g.akamaiedge.net, dns_answers_2_rrname: e4007.g.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 19, dns_answers_2_rdata: 104.97.141.192, dns_grouped_A_0: 104.97.141.192, dns_grouped_CNAME_0: wildcard.adroll.com.edgekey.net, dns_grouped_CNAME_1: e4007.g.akamaiedge.net ; pcap_cnt: 8734317, event_type: dns, proto: UDP, dns_type: query, dns_id: 28644, dns_rrname: dart.l.doubleclick.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8734327, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28644, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dart.l.doubleclick.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dart.l.doubleclick.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 38, dns_answers_0_rdata: 172.217.11.6, dns_grouped_A_0: 172.217.11.6 ; pcap_cnt: 8983812, event_type: dns, proto: UDP, dns_type: query, dns_id: 57397, dns_rrname: fivethirtyeight.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8983825, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 57397, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: fivethirtyeight.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: fivethirtyeight.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 120, dns_authorities_0_soa_mname: ns1.wordpress.com, dns_authorities_0_soa_rname: hostmaster.wordpress.com, dns_authorities_0_soa_serial: 2005071858, dns_authorities_0_soa_refresh: 14400, dns_authorities_0_soa_retry: 7200, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 300 ; pcap_cnt: 9093347, event_type: dns, proto: UDP, dns_type: query, dns_id: 13258, dns_rrname: cdn.atlassbx.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9093408, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13258, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cdn.atlassbx.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: cdn.atlassbx.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 298, dns_answers_0_rdata: geocdn.atlassbx.com, dns_answers_1_rrname: geocdn.atlassbx.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 208, dns_answers_1_rdata: atlas.xx.fbcdn.net, dns_answers_2_rrname: atlas.xx.fbcdn.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 59, dns_answers_2_rdata: 31.13.80.2, dns_grouped_A_0: 31.13.80.2, dns_grouped_CNAME_0: geocdn.atlassbx.com, dns_grouped_CNAME_1: atlas.xx.fbcdn.net ; pcap_cnt: 9143053, event_type: dns, proto: UDP, dns_type: query, dns_id: 1335, dns_rrname: blocklist.addons.mozilla.org, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9143056, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 1335, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: blocklist.addons.mozilla.org, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: blocklist.addons.mozilla.org, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 2, dns_answers_0_rdata: versioncheck.prod.mozaws.net, dns_answers_1_rrname: versioncheck.prod.mozaws.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 52.27.123.81, dns_grouped_CNAME_0: versioncheck.prod.mozaws.net, dns_grouped_A_0: 52.27.123.81 ; pcap_cnt: 9459024, event_type: dns, proto: UDP, dns_type: query, dns_id: 54793, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9459053, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 54793, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e8218.dscb1.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 14, dns_answers_0_rdata: 23.60.139.27, dns_grouped_A_0: 23.60.139.27 ; pcap_cnt: 9524032, event_type: dns, proto: UDP, dns_type: query, dns_id: 3913, dns_rrname: bat-bing-com.a-0001.a-msedge.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 9524052, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 3913, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: bat-bing-com.a-0001.a-msedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: bat-bing-com.a-0001.a-msedge.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 50, dns_answers_0_rdata: a-0001.a-msedge.net, dns_answers_1_rrname: a-0001.a-msedge.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 204.79.197.200, dns_answers_2_rrname: a-0001.a-msedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 13.107.21.200, dns_grouped_CNAME_0: a-0001.a-msedge.net, dns_grouped_A_0: 204.79.197.200, dns_grouped_A_1: 13.107.21.200 ; pcap_cnt: 9588636, event_type: dns, proto: UDP, dns_type: query, dns_id: 26718, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9588658, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 26718, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: scontent.xx.fbcdn.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 41, dns_answers_0_rdata: 157.240.18.19, dns_grouped_A_0: 157.240.18.19 ; pcap_cnt: 9683405, event_type: dns, proto: UDP, dns_type: query, dns_id: 55741, dns_rrname: abcookiesync.us-east-1.elasticbeanstalk.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9683454, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 55741, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: abcookiesync.us-east-1.elasticbeanstalk.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: abcookiesync.us-east-1.elasticbeanstalk.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 11, dns_answers_0_rdata: 34.228.131.61, dns_answers_1_rrname: abcookiesync.us-east-1.elasticbeanstalk.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 11, dns_answers_1_rdata: 54.88.165.110, dns_answers_2_rrname: abcookiesync.us-east-1.elasticbeanstalk.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 11, dns_answers_2_rdata: 52.86.68.253, dns_answers_3_rrname: abcookiesync.us-east-1.elasticbeanstalk.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 11, dns_answers_3_rdata: 54.165.129.5, dns_answers_4_rrname: abcookiesync.us-east-1.elasticbeanstalk.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 11, dns_answers_4_rdata: 54.165.89.238, dns_answers_5_rrname: abcookiesync.us-east-1.elasticbeanstalk.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 11, dns_answers_5_rdata: 23.20.246.196, dns_grouped_A_0: 34.228.131.61, dns_grouped_A_1: 54.88.165.110, dns_grouped_A_2: 52.86.68.253, dns_grouped_A_3: 54.165.129.5, dns_grouped_A_4: 54.165.89.238, dns_grouped_A_5: 23.20.246.196 ; pcap_cnt: 9714138, event_type: dns, proto: UDP, dns_type: query, dns_id: 22661, dns_rrname: fonts.gstatic.com, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 9714149, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 22661, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: fonts.gstatic.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: fonts.gstatic.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: gstaticadssl.l.google.com, dns_answers_1_rrname: gstaticadssl.l.google.com, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 267, dns_answers_1_rdata: 2607:f8b0:4006:0804:0000:0000:0000:2003, dns_grouped_AAAA_0: 2607:f8b0:4006:0804:0000:0000:0000:2003, dns_grouped_CNAME_0: gstaticadssl.l.google.com ; pcap_cnt: 10417452, event_type: dns, proto: UDP, dns_type: query, dns_id: 16815, dns_rrname: e1879.e7.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10417482, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16815, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e1879.e7.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e1879.e7.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 16, dns_answers_0_rdata: 23.34.74.210, dns_grouped_A_0: 23.34.74.210 ; pcap_cnt: 10433225, event_type: dns, proto: UDP, dns_type: query, dns_id: 62169, dns_rrname: ssp.adskom.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 10433371, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 62169, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ssp.adskom.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ssp.adskom.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 911, dns_answers_0_rdata: ssp.n.adskom.com, dns_answers_1_rrname: ssp.n.adskom.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 598, dns_answers_1_rdata: 119.81.26.176, dns_answers_2_rrname: ssp.n.adskom.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 598, dns_answers_2_rdata: 119.81.195.120, dns_grouped_A_0: 119.81.26.176, dns_grouped_A_1: 119.81.195.120, dns_grouped_CNAME_0: ssp.n.adskom.com ; pcap_cnt: 10490334, event_type: dns, proto: UDP, dns_type: query, dns_id: 3943, dns_rrname: www.crowneplaza.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10490399, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 3943, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.crowneplaza.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.crowneplaza.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 10, dns_answers_0_rdata: noccdn.crowneplaza.com.edgekey.net, dns_answers_1_rrname: noccdn.crowneplaza.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 21582, dns_answers_1_rdata: e2892.b.akamaiedge.net, dns_answers_2_rrname: e2892.b.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 20, dns_answers_2_rdata: 23.194.142.149, dns_grouped_A_0: 23.194.142.149, dns_grouped_CNAME_0: noccdn.crowneplaza.com.edgekey.net, dns_grouped_CNAME_1: e2892.b.akamaiedge.net ; pcap_cnt: 10518091, event_type: dns, proto: UDP, dns_type: query, dns_id: 32869, dns_rrname: location.gomoxie.solutions, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 10518101, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32869, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: location.gomoxie.solutions, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: gomoxie.solutions, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 264, dns_authorities_0_soa_mname: ns-195.awsdns-24.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 10540614, event_type: dns, proto: UDP, dns_type: query, dns_id: 20167, dns_rrname: ocsp.usertrust.com, dns_rrtype: AAAA, dns_tx_id: 4 ; pcap_cnt: 10540622, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 20167, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.usertrust.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.usertrust.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 162, dns_answers_0_rdata: 2a02:1788:02fd:0000:0000:0000:b2ff:5301, dns_grouped_AAAA_0: 2a02:1788:02fd:0000:0000:0000:b2ff:5301 ; pcap_cnt: 10544706, event_type: dns, proto: UDP, dns_type: query, dns_id: 18473, dns_rrname: 230.34.253.131.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 6 ; pcap_cnt: 10544707, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 18473, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 230.34.253.131.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 230.34.253.131.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 1403, dns_answers_0_rdata: bn2wns1.wns.windows.com, dns_grouped_PTR_0: bn2wns1.wns.windows.com ; pcap_cnt: 10693170, event_type: dns, proto: UDP, dns_type: query, dns_id: 13071, dns_rrname: 164.177.217.67.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 10693254, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13071, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 164.177.217.67.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 164.177.217.67.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 1505, dns_answers_0_rdata: 67-217-177-164.ash01.latisys.net, dns_grouped_PTR_0: 67-217-177-164.ash01.latisys.net ; pcap_cnt: 10918939, event_type: dns, proto: UDP, dns_type: query, dns_id: 30639, dns_rrname: masterh7.adriver.ru, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10919008, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 30639, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: masterh7.adriver.ru, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: masterh7.adriver.ru, dns_answers_0_rrtype: A, dns_answers_0_ttl: 2651, dns_answers_0_rdata: 83.222.14.88, dns_grouped_A_0: 83.222.14.88 ; pcap_cnt: 10936314, event_type: dns, proto: UDP, dns_type: query, dns_id: 28822, dns_rrname: eqv-515.eqv-rtb1.rfihub.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 10936375, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28822, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: eqv-515.eqv-rtb1.rfihub.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: eqv-515.eqv-rtb1.rfihub.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 206, dns_answers_0_rdata: 198.8.70.210, dns_grouped_A_0: 198.8.70.210 ; pcap_cnt: 11384663, event_type: dns, proto: UDP, dns_type: query, dns_id: 51895, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11384821, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 51895, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: scontent.xx.fbcdn.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 59, dns_answers_0_rdata: 2a03:2880:f00e:0013:face:b00c:0000:0003, dns_grouped_AAAA_0: 2a03:2880:f00e:0013:face:b00c:0000:0003 ; pcap_cnt: 11392138, event_type: dns, proto: UDP, dns_type: query, dns_id: 63416, dns_rrname: immobilienmarkt.sueddeutsche.de, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 11392377, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 63416, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: immobilienmarkt.sueddeutsche.de, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: immobilienmarkt.sueddeutsche.de, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 59, dns_answers_0_rdata: lb-orm-http.dns.boreus.de, dns_answers_1_rrname: lb-orm-http.dns.boreus.de, dns_answers_1_rrtype: A, dns_answers_1_ttl: 20, dns_answers_1_rdata: 195.50.177.234, dns_grouped_A_0: 195.50.177.234, dns_grouped_CNAME_0: lb-orm-http.dns.boreus.de ; pcap_cnt: 11410747, event_type: dns, proto: UDP, dns_type: query, dns_id: 47221, dns_rrname: jsonp-us-east-1-773824149.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 4 ; pcap_cnt: 11410757, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 47221, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: jsonp-us-east-1-773824149.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 22, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.