['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 61367, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 130, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 272, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 135, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 80, flow_bytes_toclient: 80, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 156, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 90, flow_bytes_toclient: 122, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 99, flow_bytes_toclient: 149, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 102, flow_bytes_toclient: 118, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 271, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 150, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 97, flow_bytes_toclient: 155, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 102, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 193, flow_bytes_toclient: 241, flow_age: 91, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 100, flow_bytes_toclient: 228, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 241, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 217, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 169, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 83, flow_bytes_toclient: 99, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 217, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 213, flow_bytes_toclient: 282, flow_age: 57, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 255, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 100, flow_bytes_toclient: 187, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 142, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 191, flow_bytes_toclient: 275, flow_age: 1, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 171, flow_bytes_toclient: 259, flow_age: 77, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 3, flow_pkts_toclient: 3, flow_bytes_toserver: 285, flow_bytes_toclient: 466, flow_age: 278, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 124, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 182, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 120, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 56800, event_type: dns, proto: UDP, dns_type: query, dns_id: 50597, dns_rrname: cm.g.doubleclick.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 56830, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 50597, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cm.g.doubleclick.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: cm.g.doubleclick.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 38348, dns_answers_0_rdata: pagead.l.doubleclick.net, dns_answers_1_rrname: pagead.l.doubleclick.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 49, dns_answers_1_rdata: 172.217.12.162, dns_grouped_CNAME_0: pagead.l.doubleclick.net, dns_grouped_A_0: 172.217.12.162 ; pcap_cnt: 605094, event_type: dns, proto: UDP, dns_type: query, dns_id: 44843, dns_rrname: acds.prod.vidible.tv, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 605756, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 44843, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: acds.prod.vidible.tv, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: acds.prod.vidible.tv, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 45, dns_answers_0_rdata: acds.prod.us-east-1.vidible.tv, dns_answers_1_rrname: acds.prod.us-east-1.vidible.tv, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 123, dns_answers_1_rdata: acds-a.prod.us-east-1.vidible.tv, dns_answers_2_rrname: acds-a.prod.us-east-1.vidible.tv, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 42, dns_answers_2_rdata: acds-prod-us-east-1-ext-a-1276816593.us-east-1.elb.amazonaws.com, dns_answers_3_rrname: acds-prod-us-east-1-ext-a-1276816593.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 54.208.26.241, dns_answers_4_rrname: acds-prod-us-east-1-ext-a-1276816593.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 52.6.89.8, dns_answers_5_rrname: acds-prod-us-east-1-ext-a-1276816593.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 52.86.204.9, dns_grouped_CNAME_0: acds.prod.us-east-1.vidible.tv, dns_grouped_CNAME_1: acds-a.prod.us-east-1.vidible.tv, dns_grouped_CNAME_2: acds-prod-us-east-1-ext-a-1276816593.us-east-1.elb.amazonaws.com, dns_grouped_A_0: 54.208.26.241, dns_grouped_A_1: 52.6.89.8, dns_grouped_A_2: 52.86.204.9 ; pcap_cnt: 1957047, event_type: dns, proto: UDP, dns_type: query, dns_id: 3901, dns_rrname: ans.mlb.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 1957575, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 3901, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ans.mlb.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ans.mlb.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 85802, dns_answers_0_rdata: mlb.com.102.112.2o7.net, dns_answers_1_rrname: mlb.com.102.112.2o7.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 471, dns_answers_1_rdata: 63.140.62.205, dns_grouped_CNAME_0: mlb.com.102.112.2o7.net, dns_grouped_A_0: 63.140.62.205 ; pcap_cnt: 5337318, event_type: dns, proto: UDP, dns_type: query, dns_id: 42166, dns_rrname: http-s.ws, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5337321, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 42166, dns_flags: 8182, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: http-s.ws, dns_rrtype: A, dns_rcode: SERVFAIL ; pcap_cnt: 5916099, event_type: dns, proto: UDP, dns_type: query, dns_id: 36946, dns_rrname: ib.anycast.adnxs.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 5916173, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36946, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ib.anycast.adnxs.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: adnxs.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 6, dns_authorities_0_soa_mname: ns1.gslb.com, dns_authorities_0_soa_rname: support.appnexus.net, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 86400, dns_authorities_0_soa_retry: 30, dns_authorities_0_soa_expire: 86400, dns_authorities_0_soa_minimum: 30 ; pcap_cnt: 6286410, event_type: dns, proto: UDP, dns_type: query, dns_id: 26489, dns_rrname: tags.emedemujer.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6286472, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 26489, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: tags.emedemujer.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: tags.emedemujer.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 300, dns_answers_0_rdata: 104.25.117.5, dns_answers_1_rrname: tags.emedemujer.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 300, dns_answers_1_rdata: 104.25.116.5, dns_grouped_A_0: 104.25.117.5, dns_grouped_A_1: 104.25.116.5 ; pcap_cnt: 6356737, event_type: dns, proto: UDP, dns_type: query, dns_id: 10024, dns_rrname: 183.166.193.173.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 6356800, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 10024, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 183.166.193.173.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 183.166.193.173.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 80578, dns_answers_0_rdata: b7.a6.c1ad.ip4.static.sl-reverse.com, dns_grouped_PTR_0: b7.a6.c1ad.ip4.static.sl-reverse.com ; pcap_cnt: 6408448, event_type: dns, proto: UDP, dns_type: query, dns_id: 32260, dns_rrname: pull-video.kumma.netdna-cdn.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6408474, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32260, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pull-video.kumma.netdna-cdn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: pull-video.kumma.netdna-cdn.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 177, dns_answers_0_rdata: 23.111.11.111, dns_grouped_A_0: 23.111.11.111 ; pcap_cnt: 6658299, event_type: dns, proto: UDP, dns_type: query, dns_id: 28988, dns_rrname: t.tellapart.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6658696, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28988, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: t.tellapart.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: t.tellapart.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 412, dns_answers_0_rdata: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 10, dns_answers_1_rdata: 23.21.55.226, dns_answers_2_rrname: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 10, dns_answers_2_rdata: 23.23.119.139, dns_answers_3_rrname: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 10, dns_answers_3_rdata: 50.17.234.240, dns_answers_4_rrname: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 10, dns_answers_4_rdata: 50.16.218.2, dns_answers_5_rrname: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 10, dns_answers_5_rdata: 50.16.233.31, dns_answers_6_rrname: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 10, dns_answers_6_rdata: 23.21.121.140, dns_answers_7_rrname: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 10, dns_answers_7_rdata: 50.19.250.40, dns_answers_8_rrname: merchant-897380121.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 10, dns_answers_8_rdata: 54.235.106.104, dns_grouped_CNAME_0: merchant-897380121.us-east-1.elb.amazonaws.com, dns_grouped_A_0: 23.21.55.226, dns_grouped_A_1: 23.23.119.139, dns_grouped_A_2: 50.17.234.240, dns_grouped_A_3: 50.16.218.2, dns_grouped_A_4: 50.16.233.31, dns_grouped_A_5: 23.21.121.140, dns_grouped_A_6: 50.19.250.40, dns_grouped_A_7: 54.235.106.104 ; pcap_cnt: 6761376, event_type: dns, proto: UDP, dns_type: query, dns_id: 34320, dns_rrname: 55.64.84.52.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 6761470, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 34320, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 55.64.84.52.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 55.64.84.52.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 84129, dns_answers_0_rdata: server-52-84-64-55.ord51.r.cloudfront.net, dns_grouped_PTR_0: server-52-84-64-55.ord51.r.cloudfront.net ; pcap_cnt: 7342352, event_type: dns, proto: UDP, dns_type: query, dns_id: 51399, dns_rrname: 178.151.16.96.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 7342369, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 51399, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 178.151.16.96.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 178.151.16.96.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 86393, dns_answers_0_rdata: a96-16-151-178.deploy.akamaitechnologies.com, dns_grouped_PTR_0: a96-16-151-178.deploy.akamaitechnologies.com ; pcap_cnt: 7601845, event_type: dns, proto: UDP, dns_type: query, dns_id: 1569, dns_rrname: sb.l.google.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7601847, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 1569, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: sb.l.google.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: sb.l.google.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 79, dns_answers_0_rdata: 172.217.10.110, dns_grouped_A_0: 172.217.10.110 ; pcap_cnt: 7809024, event_type: dns, proto: UDP, dns_type: query, dns_id: 42815, dns_rrname: hsbcbankglobal.sc.omtrdc.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7809048, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 42815, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: hsbcbankglobal.sc.omtrdc.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: hsbcbankglobal.sc.omtrdc.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 35, dns_answers_0_rdata: 192.243.250.68, dns_answers_1_rrname: hsbcbankglobal.sc.omtrdc.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 35, dns_answers_1_rdata: 192.243.250.84, dns_grouped_A_0: 192.243.250.68, dns_grouped_A_1: 192.243.250.84 ; pcap_cnt: 7841868, event_type: dns, proto: UDP, dns_type: query, dns_id: 25835, dns_rrname: e11100.g.akamaiedge.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 7841871, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 25835, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e11100.g.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e11100.g.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 5, dns_answers_0_rdata: 23.201.73.58, dns_grouped_A_0: 23.201.73.58 ; pcap_cnt: 8317584, event_type: dns, proto: UDP, dns_type: query, dns_id: 38455, dns_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8317621, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 38455, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 59, dns_answers_0_rdata: 52.84.143.143, dns_answers_1_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 59, dns_answers_1_rdata: 52.84.143.82, dns_answers_2_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 59, dns_answers_2_rdata: 52.84.143.114, dns_answers_3_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 59, dns_answers_3_rdata: 52.84.143.115, dns_answers_4_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 59, dns_answers_4_rdata: 52.84.143.205, dns_answers_5_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 59, dns_answers_5_rdata: 52.84.143.187, dns_answers_6_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 59, dns_answers_6_rdata: 52.84.143.38, dns_answers_7_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 59, dns_answers_7_rdata: 52.84.143.116, dns_grouped_A_0: 52.84.143.143, dns_grouped_A_1: 52.84.143.82, dns_grouped_A_2: 52.84.143.114, dns_grouped_A_3: 52.84.143.115, dns_grouped_A_4: 52.84.143.205, dns_grouped_A_5: 52.84.143.187, dns_grouped_A_6: 52.84.143.38, dns_grouped_A_7: 52.84.143.116 ; pcap_cnt: 8426937, event_type: dns, proto: UDP, dns_type: query, dns_id: 7599, dns_rrname: secure-nym.adnxs.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8426938, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 7599, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: secure-nym.adnxs.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: secure-nym.adnxs.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: nym2.ib.adnxs.com, dns_answers_1_rrname: nym2.ib.adnxs.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 17, dns_answers_1_rdata: 68.67.178.243, dns_answers_2_rrname: nym2.ib.adnxs.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 17, dns_answers_2_rdata: 68.67.178.199, dns_answers_3_rrname: nym2.ib.adnxs.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 17, dns_answers_3_rdata: 68.67.178.197, dns_answers_4_rrname: nym2.ib.adnxs.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 17, dns_answers_4_rdata: 68.67.178.230, dns_answers_5_rrname: nym2.ib.adnxs.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 17, dns_answers_5_rdata: 68.67.178.173, dns_answers_6_rrname: nym2.ib.adnxs.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 17, dns_answers_6_rdata: 68.67.178.109, dns_answers_7_rrname: nym2.ib.adnxs.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 17, dns_answers_7_rdata: 68.67.178.170, dns_answers_8_rrname: nym2.ib.adnxs.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 17, dns_answers_8_rdata: 68.67.178.138, dns_grouped_CNAME_0: nym2.ib.adnxs.com, dns_grouped_A_0: 68.67.178.243, dns_grouped_A_1: 68.67.178.199, dns_grouped_A_2: 68.67.178.197, dns_grouped_A_3: 68.67.178.230, dns_grouped_A_4: 68.67.178.173, dns_grouped_A_5: 68.67.178.109, dns_grouped_A_6: 68.67.178.170, dns_grouped_A_7: 68.67.178.138 ; pcap_cnt: 8565270, event_type: dns, proto: UDP, dns_type: query, dns_id: 36335, dns_rrname: ssp.streamrail.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8565274, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36335, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ssp.streamrail.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ssp.streamrail.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 13.58.131.237, dns_answers_1_rrname: ssp.streamrail.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 13.58.175.81, dns_answers_2_rrname: ssp.streamrail.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 13.58.123.116, dns_answers_3_rrname: ssp.streamrail.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 13.58.126.115, dns_answers_4_rrname: ssp.streamrail.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 13.58.152.36, dns_answers_5_rrname: ssp.streamrail.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 13.58.114.62, dns_answers_6_rrname: ssp.streamrail.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 13.58.146.190, dns_answers_7_rrname: ssp.streamrail.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 13.58.154.195, dns_grouped_A_0: 13.58.131.237, dns_grouped_A_1: 13.58.175.81, dns_grouped_A_2: 13.58.123.116, dns_grouped_A_3: 13.58.126.115, dns_grouped_A_4: 13.58.152.36, dns_grouped_A_5: 13.58.114.62, dns_grouped_A_6: 13.58.146.190, dns_grouped_A_7: 13.58.154.195 ; pcap_cnt: 9015177, event_type: dns, proto: UDP, dns_type: query, dns_id: 45228, dns_rrname: ec-concier.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9015213, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 45228, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ec-concier.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: ec-concier.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 900, dns_authorities_0_soa_mname: ns-1657.awsdns-15.co.uk, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 9085995, event_type: dns, proto: UDP, dns_type: query, dns_id: 50484, dns_rrname: www.1und1.de, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9086011, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 50484, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.1und1.de, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.1und1.de, dns_answers_0_rrtype: A, dns_answers_0_ttl: 300, dns_answers_0_rdata: 217.160.72.6, dns_grouped_A_0: 217.160.72.6 ; pcap_cnt: 9311003, event_type: dns, proto: UDP, dns_type: query, dns_id: 24499, dns_rrname: match.prod.bidr.io, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9311026, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 24499, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: match.prod.bidr.io, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: match.prod.bidr.io, dns_answers_0_rrtype: A, dns_answers_0_ttl: 10, dns_answers_0_rdata: 54.87.174.207, dns_answers_1_rrname: match.prod.bidr.io, dns_answers_1_rrtype: A, dns_answers_1_ttl: 10, dns_answers_1_rdata: 52.73.87.165, dns_answers_2_rrname: match.prod.bidr.io, dns_answers_2_rrtype: A, dns_answers_2_ttl: 10, dns_answers_2_rdata: 52.205.152.172, dns_answers_3_rrname: match.prod.bidr.io, dns_answers_3_rrtype: A, dns_answers_3_ttl: 10, dns_answers_3_rdata: 54.152.58.168, dns_answers_4_rrname: match.prod.bidr.io, dns_answers_4_rrtype: A, dns_answers_4_ttl: 10, dns_answers_4_rdata: 52.87.66.130, dns_answers_5_rrname: match.prod.bidr.io, dns_answers_5_rrtype: A, dns_answers_5_ttl: 10, dns_answers_5_rdata: 54.165.241.22, dns_answers_6_rrname: match.prod.bidr.io, dns_answers_6_rrtype: A, dns_answers_6_ttl: 10, dns_answers_6_rdata: 54.172.137.181, dns_answers_7_rrname: match.prod.bidr.io, dns_answers_7_rrtype: A, dns_answers_7_ttl: 10, dns_answers_7_rdata: 34.195.246.67, dns_grouped_A_0: 54.87.174.207, dns_grouped_A_1: 52.73.87.165, dns_grouped_A_2: 52.205.152.172, dns_grouped_A_3: 54.152.58.168, dns_grouped_A_4: 52.87.66.130, dns_grouped_A_5: 54.165.241.22, dns_grouped_A_6: 54.172.137.181, dns_grouped_A_7: 34.195.246.67 ; pcap_cnt: 9681892, event_type: dns, proto: UDP, dns_type: query, dns_id: 48385, dns_rrname: dimml.adversitementbv.netdna-cdn.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9681908, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 48385, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dimml.adversitementbv.netdna-cdn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dimml.adversitementbv.netdna-cdn.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 158, dns_answers_0_rdata: 146.88.138.32, dns_grouped_A_0: 146.88.138.32 ; pcap_cnt: 9699846, event_type: dns, proto: UDP, dns_type: query, dns_id: 59780, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 9699847, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 59780, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 0, dns_answers_0_rdata: e8218.dscb1.akamaiedge.net, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 15, dns_answers_1_rdata: 23.61.187.27, dns_grouped_CNAME_0: e8218.dscb1.akamaiedge.net, dns_grouped_A_0: 23.61.187.27 ; pcap_cnt: 10225745, event_type: dns, proto: UDP, dns_type: query, dns_id: 50192, dns_rrname: addons.cdn.mozilla.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10225822, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 50192, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: addons.cdn.mozilla.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: addons.cdn.mozilla.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 0, dns_answers_0_rdata: addons-cdn-geo.prod.mozaws.net, dns_answers_1_rrname: addons-cdn-geo.prod.mozaws.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 52, dns_answers_1_rdata: d1sp2sgy246t7c.cloudfront.net, dns_grouped_CNAME_0: addons-cdn-geo.prod.mozaws.net, dns_grouped_CNAME_1: d1sp2sgy246t7c.cloudfront.net, dns_authorities_0_rrname: d1sp2sgy246t7c.cloudfront.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 0, dns_authorities_0_soa_mname: ns-298.awsdns-37.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 10410007, event_type: dns, proto: UDP, dns_type: query, dns_id: 22150, dns_rrname: d12uj65dsn9ho1.cloudfront.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10410026, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 22150, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: d12uj65dsn9ho1.cloudfront.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: d12uj65dsn9ho1.cloudfront.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1, dns_authorities_0_soa_mname: ns-1675.awsdns-17.co.uk, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 10652600, event_type: dns, proto: UDP, dns_type: query, dns_id: 4756, dns_rrname: cm2.adform.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10652626, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 4756, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cm2.adform.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: adform.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 55, dns_authorities_0_soa_mname: a10-66.akam.net, dns_authorities_0_soa_rname: sysadmin.adform.net, dns_authorities_0_soa_serial: 2016102129, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 10682871, event_type: dns, proto: UDP, dns_type: query, dns_id: 24690, dns_rrname: star-mini.c10r.facebook.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10682950, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 24690, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: star-mini.c10r.facebook.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: star-mini.c10r.facebook.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 31.13.73.36, dns_grouped_A_0: 31.13.73.36 ; pcap_cnt: 10685616, event_type: dns, proto: UDP, dns_type: query, dns_id: 19505, dns_rrname: iad07-login.dotomi.com, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 10685732, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 19505, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: iad07-login.dotomi.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: dotomi.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 271, dns_authorities_0_soa_mname: ns1.vclk.net, dns_authorities_0_soa_rname: noc.conversantmedia.com, dns_authorities_0_soa_serial: 2017062700, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 1800, dns_authorities_0_soa_expire: 864000, dns_authorities_0_soa_minimum: 300 ; pcap_cnt: 10806573, event_type: dns, proto: UDP, dns_type: query, dns_id: 45454, dns_rrname: nzaza.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10806620, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 45454, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: nzaza.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: nzaza.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 3, dns_answers_0_rdata: 54.67.25.88, dns_answers_1_rrname: nzaza.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 3, dns_answers_1_rdata: 52.9.214.11, dns_grouped_A_0: 54.67.25.88, dns_grouped_A_1: 52.9.214.11 ; pcap_cnt: 10823246, event_type: dns, proto: UDP, dns_type: query, dns_id: 56475, dns_rrname: a771.dscq.akamai.net, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 10823275, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 56475, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a771.dscq.akamai.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: a771.dscq.akamai.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2600:1408:2000:0000:0000:0000:17db:5861, dns_answers_1_rrname: a771.dscq.akamai.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 1, dns_answers_1_rdata: 2600:1408:2000:0000:0000:0000:17db:5897, dns_grouped_AAAA_0: 2600:1408:2000:0000:0000:0000:17db:5861, dns_grouped_AAAA_1: 2600:1408:2000:0000:0000:0000:17db:5897 ; pcap_cnt: 10897573, event_type: dns, proto: UDP, dns_type: query, dns_id: 12912, dns_rrname: tapestry.tapad.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10897835, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 12912, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: tapestry.tapad.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: tapestry.tapad.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 9, dns_answers_0_rdata: tapestry-us-east.tapad.com, dns_answers_1_rrname: tapestry-us-east.tapad.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 55, dns_answers_1_rdata: vhosts-us-east.tapad.com, dns_answers_2_rrname: vhosts-us-east.tapad.com, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 236, dns_answers_2_rdata: vhosts-nj1.tapad.com, dns_answers_3_rrname: vhosts-nj1.tapad.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 187, dns_answers_3_rdata: 198.51.152.179, dns_answers_4_rrname: vhosts-nj1.tapad.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 187, dns_answers_4_rdata: 198.51.152.178, dns_answers_5_rrname: vhosts-nj1.tapad.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 187, dns_answers_5_rdata: 198.51.152.183, dns_answers_6_rrname: vhosts-nj1.tapad.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 187, dns_answers_6_rdata: 198.51.152.184, dns_grouped_A_0: 198.51.152.179, dns_grouped_A_1: 198.51.152.178, dns_grouped_A_2: 198.51.152.183, dns_grouped_A_3: 198.51.152.184, dns_grouped_CNAME_0: tapestry-us-east.tapad.com, dns_grouped_CNAME_1: vhosts-us-east.tapad.com, dns_grouped_CNAME_2: vhosts-nj1.tapad.com ; pcap_cnt: 10923987, event_type: dns, proto: UDP, dns_type: query, dns_id: 4913, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 10924014, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 4913, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.godaddy.com.akadns.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 72.167.239.239, dns_grouped_A_0: 72.167.239.239 ; pcap_cnt: 10963270, event_type: dns, proto: UDP, dns_type: query, dns_id: 37794, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: A, dns_tx_id: 4 ; pcap_cnt: 10963277, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37794, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.godaddy.com.akadns.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 2, dns_answers_0_rdata: 72.167.239.239, dns_grouped_A_0: 72.167.239.239 ; pcap_cnt: 11014618, event_type: dns, proto: UDP, dns_type: query, dns_id: 34586, dns_rrname: ib.mookie1.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11014715, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 34586, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ib.mookie1.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ib.mookie1.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 37, dns_answers_0_rdata: m.ib-ibi.com, dns_answers_1_rrname: m.ib-ibi.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 69.169.86.39, dns_grouped_A_0: 69.169.86.39, dns_grouped_CNAME_0: m.ib-ibi.com ; pcap_cnt: 11088797, event_type: dns, proto: UDP, dns_type: query, dns_id: 13633, dns_rrname: www.tomsguide.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11088823, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13633, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.tomsguide.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.tomsguide.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 35, dns_answers_0_rdata: www.tomsguide.com.edgekey.net, dns_answers_1_rrname: www.tomsguide.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 21599, dns_answers_1_rdata: e1151.e12.akamaiedge.net, dns_answers_2_rrname: e1151.e12.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 19, dns_answers_2_rdata: 104.97.71.4, dns_grouped_CNAME_0: www.tomsguide.com.edgekey.net, dns_grouped_CNAME_1: e1151.e12.akamaiedge.net, dns_grouped_A_0: 104.97.71.4 ; pcap_cnt: 11595388, event_type: dns, proto: UDP, dns_type: query, dns_id: 24677, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11595390, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 24677, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: scontent.xx.fbcdn.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 0, dns_answers_0_rdata: 2a03:2880:f003:0c0e:face:b00c:0000:0003, dns_grouped_AAAA_0: 2a03:2880:f003:0c0e:face:b00c:0000:0003
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.