['flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.5, src_port: 56840, dest_ip: 192.168.10.3, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 160, flow_bytes_toclient: 440, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 4, flow_pkts_toclient: 2, flow_bytes_toserver: 280, flow_bytes_toclient: 696, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 4, flow_pkts_toclient: 2, flow_bytes_toserver: 308, flow_bytes_toclient: 528, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 4, flow_pkts_toclient: 4, flow_bytes_toserver: 344, flow_bytes_toclient: 568, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 3496960, event_type: dns, proto: UDP, dns_type: query, dns_id: 26205, dns_rrname: cdnjs.cloudflare.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 3496961, event_type: dns, proto: UDP, dns_type: query, dns_id: 26205, dns_rrname: cdnjs.cloudflare.com, dns_rrtype: AAAA, dns_tx_id: 1 ; pcap_cnt: 3496962, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 26205, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cdnjs.cloudflare.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: cdnjs.cloudflare.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 280, dns_answers_0_rdata: 2400:cb00:2048:0001:0000:0000:6813:c266, dns_answers_1_rrname: cdnjs.cloudflare.com, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 280, dns_answers_1_rdata: 2400:cb00:2048:0001:0000:0000:6813:c366, dns_answers_2_rrname: cdnjs.cloudflare.com, dns_answers_2_rrtype: AAAA, dns_answers_2_ttl: 280, dns_answers_2_rdata: 2400:cb00:2048:0001:0000:0000:6813:c066, dns_answers_3_rrname: cdnjs.cloudflare.com, dns_answers_3_rrtype: AAAA, dns_answers_3_ttl: 280, dns_answers_3_rdata: 2400:cb00:2048:0001:0000:0000:6813:c466, dns_answers_4_rrname: cdnjs.cloudflare.com, dns_answers_4_rrtype: AAAA, dns_answers_4_ttl: 280, dns_answers_4_rdata: 2400:cb00:2048:0001:0000:0000:6813:c166, dns_grouped_AAAA_0: 2400:cb00:2048:0001:0000:0000:6813:c266, dns_grouped_AAAA_1: 2400:cb00:2048:0001:0000:0000:6813:c366, dns_grouped_AAAA_2: 2400:cb00:2048:0001:0000:0000:6813:c066, dns_grouped_AAAA_3: 2400:cb00:2048:0001:0000:0000:6813:c466, dns_grouped_AAAA_4: 2400:cb00:2048:0001:0000:0000:6813:c166 ; pcap_cnt: 3496963, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 26205, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cdnjs.cloudflare.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: cdnjs.cloudflare.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 280, dns_answers_0_rdata: 2400:cb00:2048:0001:0000:0000:6813:c266, dns_answers_1_rrname: cdnjs.cloudflare.com, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 280, dns_answers_1_rdata: 2400:cb00:2048:0001:0000:0000:6813:c366, dns_answers_2_rrname: cdnjs.cloudflare.com, dns_answers_2_rrtype: AAAA, dns_answers_2_ttl: 280, dns_answers_2_rdata: 2400:cb00:2048:0001:0000:0000:6813:c066, dns_answers_3_rrname: cdnjs.cloudflare.com, dns_answers_3_rrtype: AAAA, dns_answers_3_ttl: 280, dns_answers_3_rdata: 2400:cb00:2048:0001:0000:0000:6813:c466, dns_answers_4_rrname: cdnjs.cloudflare.com, dns_answers_4_rrtype: AAAA, dns_answers_4_ttl: 280, dns_answers_4_rdata: 2400:cb00:2048:0001:0000:0000:6813:c166, dns_grouped_AAAA_0: 2400:cb00:2048:0001:0000:0000:6813:c266, dns_grouped_AAAA_1: 2400:cb00:2048:0001:0000:0000:6813:c366, dns_grouped_AAAA_2: 2400:cb00:2048:0001:0000:0000:6813:c066, dns_grouped_AAAA_3: 2400:cb00:2048:0001:0000:0000:6813:c466, dns_grouped_AAAA_4: 2400:cb00:2048:0001:0000:0000:6813:c166 ; pcap_cnt: 4576501, event_type: dns, proto: UDP, dns_type: query, dns_id: 32805, dns_rrname: v.lkqd.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4576502, event_type: dns, proto: UDP, dns_type: query, dns_id: 32805, dns_rrname: v.lkqd.net, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 4576513, event_type: dns, proto: UDP, dns_type: query, dns_id: 32805, dns_rrname: v.lkqd.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 4576514, event_type: dns, proto: UDP, dns_type: query, dns_id: 32805, dns_rrname: v.lkqd.net, dns_rrtype: A, dns_tx_id: 3 ; pcap_cnt: 4576519, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32805, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: v.lkqd.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: v.lkqd.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 51, dns_answers_0_rdata: rs-lb-a.lkqd.net, dns_answers_1_rrname: rs-lb-a.lkqd.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 47, dns_answers_1_rdata: 146.20.128.88, dns_answers_2_rrname: rs-lb-a.lkqd.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 47, dns_answers_2_rdata: 146.20.128.87, dns_answers_3_rrname: rs-lb-a.lkqd.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 47, dns_answers_3_rdata: 146.20.128.95, dns_answers_4_rrname: rs-lb-a.lkqd.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 47, dns_answers_4_rdata: 146.20.128.85, dns_answers_5_rrname: rs-lb-a.lkqd.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 47, dns_answers_5_rdata: 146.20.128.91, dns_answers_6_rrname: rs-lb-a.lkqd.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 47, dns_answers_6_rdata: 146.20.128.97, dns_answers_7_rrname: rs-lb-a.lkqd.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 47, dns_answers_7_rdata: 146.20.128.94, dns_answers_8_rrname: rs-lb-a.lkqd.net, dns_answers_8_rrtype: A, dns_answers_8_ttl: 47, dns_answers_8_rdata: 146.20.128.82, dns_answers_9_rrname: rs-lb-a.lkqd.net, dns_answers_9_rrtype: A, dns_answers_9_ttl: 47, dns_answers_9_rdata: 146.20.128.90, dns_answers_10_rrname: rs-lb-a.lkqd.net, dns_answers_10_rrtype: A, dns_answers_10_ttl: 47, dns_answers_10_rdata: 146.20.128.86, dns_answers_11_rrname: rs-lb-a.lkqd.net, dns_answers_11_rrtype: A, dns_answers_11_ttl: 47, dns_answers_11_rdata: 146.20.128.93, dns_answers_12_rrname: rs-lb-a.lkqd.net, dns_answers_12_rrtype: A, dns_answers_12_ttl: 47, dns_answers_12_rdata: 146.20.128.83, dns_answers_13_rrname: rs-lb-a.lkqd.net, dns_answers_13_rrtype: A, dns_answers_13_ttl: 47, dns_answers_13_rdata: 146.20.128.89, dns_answers_14_rrname: rs-lb-a.lkqd.net, dns_answers_14_rrtype: A, dns_answers_14_ttl: 47, dns_answers_14_rdata: 146.20.128.84, dns_answers_15_rrname: rs-lb-a.lkqd.net, dns_answers_15_rrtype: A, dns_answers_15_ttl: 47, dns_answers_15_rdata: 146.20.128.96, dns_answers_16_rrname: rs-lb-a.lkqd.net, dns_answers_16_rrtype: A, dns_answers_16_ttl: 47, dns_answers_16_rdata: 146.20.128.92, dns_grouped_CNAME_0: rs-lb-a.lkqd.net, dns_grouped_A_0: 146.20.128.88, dns_grouped_A_1: 146.20.128.87, dns_grouped_A_2: 146.20.128.95, dns_grouped_A_3: 146.20.128.85, dns_grouped_A_4: 146.20.128.91, dns_grouped_A_5: 146.20.128.97, dns_grouped_A_6: 146.20.128.94, dns_grouped_A_7: 146.20.128.82, dns_grouped_A_8: 146.20.128.90, dns_grouped_A_9: 146.20.128.86, dns_grouped_A_10: 146.20.128.93, dns_grouped_A_11: 146.20.128.83, dns_grouped_A_12: 146.20.128.89, dns_grouped_A_13: 146.20.128.84, dns_grouped_A_14: 146.20.128.96, dns_grouped_A_15: 146.20.128.92 ; pcap_cnt: 4576520, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32805, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: v.lkqd.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: v.lkqd.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 51, dns_answers_0_rdata: rs-lb-a.lkqd.net, dns_answers_1_rrname: rs-lb-a.lkqd.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 47, dns_answers_1_rdata: 146.20.128.88, dns_answers_2_rrname: rs-lb-a.lkqd.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 47, dns_answers_2_rdata: 146.20.128.87, dns_answers_3_rrname: rs-lb-a.lkqd.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 47, dns_answers_3_rdata: 146.20.128.95, dns_answers_4_rrname: rs-lb-a.lkqd.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 47, dns_answers_4_rdata: 146.20.128.85, dns_answers_5_rrname: rs-lb-a.lkqd.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 47, dns_answers_5_rdata: 146.20.128.91, dns_answers_6_rrname: rs-lb-a.lkqd.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 47, dns_answers_6_rdata: 146.20.128.97, dns_answers_7_rrname: rs-lb-a.lkqd.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 47, dns_answers_7_rdata: 146.20.128.94, dns_answers_8_rrname: rs-lb-a.lkqd.net, dns_answers_8_rrtype: A, dns_answers_8_ttl: 47, dns_answers_8_rdata: 146.20.128.82, dns_answers_9_rrname: rs-lb-a.lkqd.net, dns_answers_9_rrtype: A, dns_answers_9_ttl: 47, dns_answers_9_rdata: 146.20.128.90, dns_answers_10_rrname: rs-lb-a.lkqd.net, dns_answers_10_rrtype: A, dns_answers_10_ttl: 47, dns_answers_10_rdata: 146.20.128.86, dns_answers_11_rrname: rs-lb-a.lkqd.net, dns_answers_11_rrtype: A, dns_answers_11_ttl: 47, dns_answers_11_rdata: 146.20.128.93, dns_answers_12_rrname: rs-lb-a.lkqd.net, dns_answers_12_rrtype: A, dns_answers_12_ttl: 47, dns_answers_12_rdata: 146.20.128.83, dns_answers_13_rrname: rs-lb-a.lkqd.net, dns_answers_13_rrtype: A, dns_answers_13_ttl: 47, dns_answers_13_rdata: 146.20.128.89, dns_answers_14_rrname: rs-lb-a.lkqd.net, dns_answers_14_rrtype: A, dns_answers_14_ttl: 47, dns_answers_14_rdata: 146.20.128.84, dns_answers_15_rrname: rs-lb-a.lkqd.net, dns_answers_15_rrtype: A, dns_answers_15_ttl: 47, dns_answers_15_rdata: 146.20.128.96, dns_answers_16_rrname: rs-lb-a.lkqd.net, dns_answers_16_rrtype: A, dns_answers_16_ttl: 47, dns_answers_16_rdata: 146.20.128.92, dns_grouped_A_0: 146.20.128.88, dns_grouped_A_1: 146.20.128.87, dns_grouped_A_2: 146.20.128.95, dns_grouped_A_3: 146.20.128.85, dns_grouped_A_4: 146.20.128.91, dns_grouped_A_5: 146.20.128.97, dns_grouped_A_6: 146.20.128.94, dns_grouped_A_7: 146.20.128.82, dns_grouped_A_8: 146.20.128.90, dns_grouped_A_9: 146.20.128.86, dns_grouped_A_10: 146.20.128.93, dns_grouped_A_11: 146.20.128.83, dns_grouped_A_12: 146.20.128.89, dns_grouped_A_13: 146.20.128.84, dns_grouped_A_14: 146.20.128.96, dns_grouped_A_15: 146.20.128.92, dns_grouped_CNAME_0: rs-lb-a.lkqd.net ; pcap_cnt: 9503775, event_type: dns, proto: UDP, dns_type: query, dns_id: 15028, dns_rrname: p.adsymptotic.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9503776, event_type: dns, proto: UDP, dns_type: query, dns_id: 15028, dns_rrname: p.adsymptotic.com, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 9503804, event_type: dns, proto: UDP, dns_type: query, dns_id: 15028, dns_rrname: p.adsymptotic.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 9503805, event_type: dns, proto: UDP, dns_type: query, dns_id: 15028, dns_rrname: p.adsymptotic.com, dns_rrtype: A, dns_tx_id: 3 ; pcap_cnt: 9503809, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 15028, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: p.adsymptotic.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: p.adsymptotic.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 96, dns_answers_0_rdata: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 3, dns_answers_1_rdata: 54.86.240.237, dns_answers_2_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 3, dns_answers_2_rdata: 54.86.132.40, dns_answers_3_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 3, dns_answers_3_rdata: 52.1.112.15, dns_answers_4_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 3, dns_answers_4_rdata: 52.200.172.175, dns_answers_5_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 3, dns_answers_5_rdata: 54.210.204.131, dns_answers_6_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 3, dns_answers_6_rdata: 54.210.212.177, dns_answers_7_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 3, dns_answers_7_rdata: 34.200.58.169, dns_answers_8_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 3, dns_answers_8_rdata: 34.199.126.166, dns_grouped_A_0: 54.86.240.237, dns_grouped_A_1: 54.86.132.40, dns_grouped_A_2: 52.1.112.15, dns_grouped_A_3: 52.200.172.175, dns_grouped_A_4: 54.210.204.131, dns_grouped_A_5: 54.210.212.177, dns_grouped_A_6: 34.200.58.169, dns_grouped_A_7: 34.199.126.166, dns_grouped_CNAME_0: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com ; pcap_cnt: 9503810, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 15028, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: p.adsymptotic.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: p.adsymptotic.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 96, dns_answers_0_rdata: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 3, dns_answers_1_rdata: 54.86.240.237, dns_answers_2_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 3, dns_answers_2_rdata: 54.86.132.40, dns_answers_3_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 3, dns_answers_3_rdata: 52.1.112.15, dns_answers_4_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 3, dns_answers_4_rdata: 52.200.172.175, dns_answers_5_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 3, dns_answers_5_rdata: 54.210.204.131, dns_answers_6_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 3, dns_answers_6_rdata: 54.210.212.177, dns_answers_7_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 3, dns_answers_7_rdata: 34.200.58.169, dns_answers_8_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 3, dns_answers_8_rdata: 34.199.126.166, dns_grouped_CNAME_0: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_grouped_A_0: 54.86.240.237, dns_grouped_A_1: 54.86.132.40, dns_grouped_A_2: 52.1.112.15, dns_grouped_A_3: 52.200.172.175, dns_grouped_A_4: 54.210.204.131, dns_grouped_A_5: 54.210.212.177, dns_grouped_A_6: 34.200.58.169, dns_grouped_A_7: 34.199.126.166 ; pcap_cnt: 9820363, event_type: dns, proto: UDP, dns_type: query, dns_id: 53309, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9820364, event_type: dns, proto: UDP, dns_type: query, dns_id: 53309, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 1 ; pcap_cnt: 9820418, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 53309, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: e8218.dscb1.akamaiedge.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2600:1408:e000:0182:0000:0000:0000:201a, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 1, dns_answers_1_rdata: 2600:1408:e000:019a:0000:0000:0000:201a, dns_grouped_AAAA_0: 2600:1408:e000:0182:0000:0000:0000:201a, dns_grouped_AAAA_1: 2600:1408:e000:019a:0000:0000:0000:201a ; pcap_cnt: 9820419, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 53309, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: e8218.dscb1.akamaiedge.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2600:1408:e000:0182:0000:0000:0000:201a, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 1, dns_answers_1_rdata: 2600:1408:e000:019a:0000:0000:0000:201a, dns_grouped_AAAA_0: 2600:1408:e000:0182:0000:0000:0000:201a, dns_grouped_AAAA_1: 2600:1408:e000:019a:0000:0000:0000:201a ; pcap_cnt: 9820420, event_type: dns, proto: UDP, dns_type: query, dns_id: 53309, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 4 ; pcap_cnt: 9820421, event_type: dns, proto: UDP, dns_type: query, dns_id: 53309, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 5 ; pcap_cnt: 9820422, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 53309, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: e8218.dscb1.akamaiedge.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2600:1408:e000:019a:0000:0000:0000:201a, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 1, dns_answers_1_rdata: 2600:1408:e000:0182:0000:0000:0000:201a, dns_grouped_AAAA_0: 2600:1408:e000:019a:0000:0000:0000:201a, dns_grouped_AAAA_1: 2600:1408:e000:0182:0000:0000:0000:201a ; pcap_cnt: 9820423, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 53309, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e8218.dscb1.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: e8218.dscb1.akamaiedge.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2600:1408:e000:019a:0000:0000:0000:201a, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 1, dns_answers_1_rdata: 2600:1408:e000:0182:0000:0000:0000:201a, dns_grouped_AAAA_0: 2600:1408:e000:019a:0000:0000:0000:201a, dns_grouped_AAAA_1: 2600:1408:e000:0182:0000:0000:0000:201a
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.