['flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.14, src_port: 51690, dest_ip: 192.168.10.3, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 166, flow_bytes_toclient: 290, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 4, flow_pkts_toclient: 4, flow_bytes_toserver: 316, flow_bytes_toclient: 1140, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 2293753, event_type: dns, proto: UDP, dns_type: query, dns_id: 24591, dns_rrname: 17.4.15.23.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 2293754, event_type: dns, proto: UDP, dns_type: query, dns_id: 24591, dns_rrname: 17.4.15.23.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 1 ; pcap_cnt: 2293755, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 24591, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 17.4.15.23.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 17.4.15.23.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 14804, dns_answers_0_rdata: a23-15-4-17.deploy.static.akamaitechnologies.com, dns_grouped_PTR_0: a23-15-4-17.deploy.static.akamaitechnologies.com ; pcap_cnt: 2293756, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 24591, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 17.4.15.23.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 17.4.15.23.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 14804, dns_answers_0_rdata: a23-15-4-17.deploy.static.akamaitechnologies.com, dns_grouped_PTR_0: a23-15-4-17.deploy.static.akamaitechnologies.com ; pcap_cnt: 10947669, event_type: dns, proto: UDP, dns_type: query, dns_id: 28700, dns_rrname: dc.ads.linkedin.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10947670, event_type: dns, proto: UDP, dns_type: query, dns_id: 28700, dns_rrname: dc.ads.linkedin.com, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 10947724, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28700, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dc.ads.linkedin.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dc.ads.linkedin.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 62, dns_answers_0_rdata: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 54.225.109.210, dns_answers_2_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 23.23.225.186, dns_answers_3_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 23.21.238.25, dns_answers_4_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 54.204.15.175, dns_answers_5_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 184.72.253.93, dns_answers_6_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 50.19.125.134, dns_answers_7_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 23.23.213.182, dns_answers_8_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 184.72.235.37, dns_grouped_CNAME_0: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_grouped_A_0: 54.225.109.210, dns_grouped_A_1: 23.23.225.186, dns_grouped_A_2: 23.21.238.25, dns_grouped_A_3: 54.204.15.175, dns_grouped_A_4: 184.72.253.93, dns_grouped_A_5: 50.19.125.134, dns_grouped_A_6: 23.23.213.182, dns_grouped_A_7: 184.72.235.37 ; pcap_cnt: 10947725, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28700, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dc.ads.linkedin.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dc.ads.linkedin.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 62, dns_answers_0_rdata: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 54.225.109.210, dns_answers_2_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 23.23.225.186, dns_answers_3_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 23.21.238.25, dns_answers_4_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 54.204.15.175, dns_answers_5_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 184.72.253.93, dns_answers_6_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 50.19.125.134, dns_answers_7_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 23.23.213.182, dns_answers_8_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 184.72.235.37, dns_grouped_CNAME_0: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_grouped_A_0: 54.225.109.210, dns_grouped_A_1: 23.23.225.186, dns_grouped_A_2: 23.21.238.25, dns_grouped_A_3: 54.204.15.175, dns_grouped_A_4: 184.72.253.93, dns_grouped_A_5: 50.19.125.134, dns_grouped_A_6: 23.23.213.182, dns_grouped_A_7: 184.72.235.37 ; pcap_cnt: 10947860, event_type: dns, proto: UDP, dns_type: query, dns_id: 28700, dns_rrname: dc.ads.linkedin.com, dns_rrtype: A, dns_tx_id: 4 ; pcap_cnt: 10947861, event_type: dns, proto: UDP, dns_type: query, dns_id: 28700, dns_rrname: dc.ads.linkedin.com, dns_rrtype: A, dns_tx_id: 5 ; pcap_cnt: 10947865, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28700, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dc.ads.linkedin.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dc.ads.linkedin.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 61, dns_answers_0_rdata: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 0, dns_answers_1_rdata: 23.23.225.186, dns_answers_2_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 0, dns_answers_2_rdata: 23.21.238.25, dns_answers_3_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 0, dns_answers_3_rdata: 54.204.15.175, dns_answers_4_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 0, dns_answers_4_rdata: 184.72.253.93, dns_answers_5_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 0, dns_answers_5_rdata: 50.19.125.134, dns_answers_6_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 0, dns_answers_6_rdata: 23.23.213.182, dns_answers_7_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 0, dns_answers_7_rdata: 184.72.235.37, dns_answers_8_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 0, dns_answers_8_rdata: 54.225.109.210, dns_grouped_A_0: 23.23.225.186, dns_grouped_A_1: 23.21.238.25, dns_grouped_A_2: 54.204.15.175, dns_grouped_A_3: 184.72.253.93, dns_grouped_A_4: 50.19.125.134, dns_grouped_A_5: 23.23.213.182, dns_grouped_A_6: 184.72.235.37, dns_grouped_A_7: 54.225.109.210, dns_grouped_CNAME_0: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com ; pcap_cnt: 10947866, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28700, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dc.ads.linkedin.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dc.ads.linkedin.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 61, dns_answers_0_rdata: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 0, dns_answers_1_rdata: 23.23.225.186, dns_answers_2_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 0, dns_answers_2_rdata: 23.21.238.25, dns_answers_3_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 0, dns_answers_3_rdata: 54.204.15.175, dns_answers_4_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 0, dns_answers_4_rdata: 184.72.253.93, dns_answers_5_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 0, dns_answers_5_rdata: 50.19.125.134, dns_answers_6_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 0, dns_answers_6_rdata: 23.23.213.182, dns_answers_7_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 0, dns_answers_7_rdata: 184.72.235.37, dns_answers_8_rrname: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 0, dns_answers_8_rdata: 54.225.109.210, dns_grouped_CNAME_0: data-collector-linkedin-prod-1143471378.us-east-1.elb.amazonaws.com, dns_grouped_A_0: 23.23.225.186, dns_grouped_A_1: 23.21.238.25, dns_grouped_A_2: 54.204.15.175, dns_grouped_A_3: 184.72.253.93, dns_grouped_A_4: 50.19.125.134, dns_grouped_A_5: 23.23.213.182, dns_grouped_A_6: 184.72.235.37, dns_grouped_A_7: 54.225.109.210
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.