['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 61901, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 99, flow_bytes_toclient: 167, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 97, flow_bytes_toclient: 335, flow_age: 1, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 275, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 122, flow_bytes_toclient: 250, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 148, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 179, flow_bytes_toclient: 241, flow_age: 95, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 117, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 96, flow_bytes_toclient: 158, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 195, flow_bytes_toclient: 314, flow_age: 134, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 103, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 81, flow_bytes_toclient: 153, flow_age: 1, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 173, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 187, flow_bytes_toclient: 275, flow_age: 20, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 104, flow_bytes_toclient: 272, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 98, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 188, flow_bytes_toclient: 360, flow_age: 124, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 101, flow_bytes_toclient: 191, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 305, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 120, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 90, flow_bytes_toclient: 170, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 104, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 116, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 238, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 114, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 187, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 94632, event_type: dns, proto: UDP, dns_type: query, dns_id: 55170, dns_rrname: 251.165.170.134.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 94633, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 55170, dns_flags: 8183, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 251.165.170.134.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NXDOMAIN, dns_authorities_0_rrname: 170.134.in-addr.arpa, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 239, dns_authorities_0_soa_mname: ns1.msft.net, dns_authorities_0_soa_rname: msnhst.microsoft.com, dns_authorities_0_soa_serial: 2017062801, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 7200000, dns_authorities_0_soa_minimum: 3600 ; pcap_cnt: 2170225, event_type: dns, proto: UDP, dns_type: query, dns_id: 5591, dns_rrname: ads.adaptv.advertising.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 2170237, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 5591, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ads.adaptv.advertising.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: ads.adaptv.advertising.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 0, dns_answers_0_rdata: control.adap.tv, dns_answers_1_rrname: control.adap.tv, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 0, dns_answers_1_rdata: control.adap.tv.akadns.net, dns_answers_2_rrname: control.adap.tv.akadns.net, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 54, dns_answers_2_rdata: control-wc-local.adap.tv.akadns.net, dns_answers_3_rrname: control-wc-local.adap.tv.akadns.net, dns_answers_3_rrtype: CNAME, dns_answers_3_ttl: 6, dns_answers_3_rdata: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_grouped_CNAME_0: control.adap.tv, dns_grouped_CNAME_1: control.adap.tv.akadns.net, dns_grouped_CNAME_2: control-wc-local.adap.tv.akadns.net, dns_grouped_CNAME_3: ads-zone-c-1184022283.us-west-1.elb.amazonaws.com, dns_authorities_0_rrname: us-west-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 34, dns_authorities_0_soa_mname: ns-699.awsdns-23.net, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 5137485, event_type: dns, proto: UDP, dns_type: query, dns_id: 48568, dns_rrname: p.adsymptotic.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5137683, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 48568, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: p.adsymptotic.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: p.adsymptotic.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 84, dns_answers_0_rdata: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 13, dns_answers_1_rdata: 52.55.237.80, dns_answers_2_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 13, dns_answers_2_rdata: 54.175.45.34, dns_answers_3_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 13, dns_answers_3_rdata: 52.54.186.98, dns_answers_4_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 13, dns_answers_4_rdata: 34.193.176.145, dns_answers_5_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 13, dns_answers_5_rdata: 54.164.246.23, dns_answers_6_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 13, dns_answers_6_rdata: 52.54.101.148, dns_answers_7_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 13, dns_answers_7_rdata: 52.73.61.178, dns_answers_8_rrname: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 13, dns_answers_8_rdata: 52.54.216.76, dns_grouped_CNAME_0: p-jp-awse-1529798244.us-east-1.elb.amazonaws.com, dns_grouped_A_0: 52.55.237.80, dns_grouped_A_1: 54.175.45.34, dns_grouped_A_2: 52.54.186.98, dns_grouped_A_3: 34.193.176.145, dns_grouped_A_4: 54.164.246.23, dns_grouped_A_5: 52.54.101.148, dns_grouped_A_6: 52.73.61.178, dns_grouped_A_7: 52.54.216.76 ; pcap_cnt: 5529846, event_type: dns, proto: UDP, dns_type: query, dns_id: 41736, dns_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5529967, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 41736, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 20, dns_answers_0_rdata: 35.166.31.108, dns_answers_1_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 20, dns_answers_1_rdata: 52.26.112.159, dns_answers_2_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 20, dns_answers_2_rdata: 35.167.226.133, dns_answers_3_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 20, dns_answers_3_rdata: 35.161.35.168, dns_answers_4_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 20, dns_answers_4_rdata: 35.160.70.124, dns_answers_5_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 20, dns_answers_5_rdata: 52.24.219.132, dns_answers_6_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 20, dns_answers_6_rdata: 35.160.180.157, dns_answers_7_rrname: dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 20, dns_answers_7_rdata: 54.71.146.239, dns_grouped_A_0: 35.166.31.108, dns_grouped_A_1: 52.26.112.159, dns_grouped_A_2: 35.167.226.133, dns_grouped_A_3: 35.161.35.168, dns_grouped_A_4: 35.160.70.124, dns_grouped_A_5: 52.24.219.132, dns_grouped_A_6: 35.160.180.157, dns_grouped_A_7: 54.71.146.239 ; pcap_cnt: 6022420, event_type: dns, proto: UDP, dns_type: query, dns_id: 56853, dns_rrname: css-seeker.newjobs.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6022484, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 56853, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: css-seeker.newjobs.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: css-seeker.newjobs.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 372, dns_answers_0_rdata: monstercom-3.hs.llnwd.net, dns_answers_1_rrname: monstercom-3.hs.llnwd.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 274, dns_answers_1_rdata: 69.28.187.239, dns_grouped_A_0: 69.28.187.239, dns_grouped_CNAME_0: monstercom-3.hs.llnwd.net ; pcap_cnt: 6630858, event_type: dns, proto: UDP, dns_type: query, dns_id: 13980, dns_rrname: www.dinepenger.no, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6630918, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13980, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.dinepenger.no, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.dinepenger.no, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 298, dns_answers_0_rdata: dinepenger.no, dns_answers_1_rrname: dinepenger.no, dns_answers_1_rrtype: A, dns_answers_1_ttl: 600, dns_answers_1_rdata: 195.88.54.114, dns_grouped_A_0: 195.88.54.114, dns_grouped_CNAME_0: dinepenger.no ; pcap_cnt: 6663630, event_type: dns, proto: UDP, dns_type: query, dns_id: 36051, dns_rrname: nbcume.sc.omtrdc.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 6663747, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36051, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: nbcume.sc.omtrdc.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: nbcume.sc.omtrdc.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 182, dns_answers_0_rdata: 192.243.250.84, dns_answers_1_rrname: nbcume.sc.omtrdc.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 182, dns_answers_1_rdata: 192.243.250.68, dns_grouped_A_0: 192.243.250.84, dns_grouped_A_1: 192.243.250.68 ; pcap_cnt: 6771319, event_type: dns, proto: UDP, dns_type: query, dns_id: 62679, dns_rrname: script.ioam.de, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6771320, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 62679, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: script.ioam.de, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: script.ioam.de, dns_answers_0_rrtype: A, dns_answers_0_ttl: 216, dns_answers_0_rdata: 91.215.100.39, dns_answers_1_rrname: script.ioam.de, dns_answers_1_rrtype: A, dns_answers_1_ttl: 216, dns_answers_1_rdata: 91.215.103.64, dns_grouped_A_0: 91.215.100.39, dns_grouped_A_1: 91.215.103.64 ; pcap_cnt: 7150834, event_type: dns, proto: UDP, dns_type: query, dns_id: 57499, dns_rrname: 249.36.68.54.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 7150945, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 57499, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 249.36.68.54.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 249.36.68.54.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 215, dns_answers_0_rdata: ec2-54-68-36-249.us-west-2.compute.amazonaws.com, dns_grouped_PTR_0: ec2-54-68-36-249.us-west-2.compute.amazonaws.com ; pcap_cnt: 7656646, event_type: dns, proto: UDP, dns_type: query, dns_id: 42427, dns_rrname: 252.215.44.52.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 7656650, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 42427, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 252.215.44.52.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 252.215.44.52.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 236, dns_answers_0_rdata: ec2-52-44-215-252.compute-1.amazonaws.com, dns_grouped_PTR_0: ec2-52-44-215-252.compute-1.amazonaws.com ; pcap_cnt: 7701982, event_type: dns, proto: UDP, dns_type: query, dns_id: 7157, dns_rrname: f2.shared.global.fastly.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 7702001, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 7157, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: f2.shared.global.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: f2.shared.global.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 17, dns_answers_0_rdata: 151.101.2.2, dns_answers_1_rrname: f2.shared.global.fastly.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 17, dns_answers_1_rdata: 151.101.66.2, dns_answers_2_rrname: f2.shared.global.fastly.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 17, dns_answers_2_rdata: 151.101.130.2, dns_answers_3_rrname: f2.shared.global.fastly.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 17, dns_answers_3_rdata: 151.101.194.2, dns_grouped_A_0: 151.101.2.2, dns_grouped_A_1: 151.101.66.2, dns_grouped_A_2: 151.101.130.2, dns_grouped_A_3: 151.101.194.2 ; pcap_cnt: 7927486, event_type: dns, proto: UDP, dns_type: query, dns_id: 13258, dns_rrname: www.rtalabel.org, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7927498, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13258, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.rtalabel.org, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.rtalabel.org, dns_answers_0_rrtype: A, dns_answers_0_ttl: 456, dns_answers_0_rdata: 69.50.139.162, dns_grouped_A_0: 69.50.139.162 ; pcap_cnt: 8078630, event_type: dns, proto: UDP, dns_type: query, dns_id: 39138, dns_rrname: oe1.orf.at, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8078776, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 39138, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: oe1.orf.at, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: oe1.orf.at, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 86400, dns_answers_0_rdata: laos.orf.at, dns_grouped_CNAME_0: laos.orf.at, dns_authorities_0_rrname: orf.at, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 27365, dns_authorities_0_soa_mname: ns1.apa.at, dns_authorities_0_soa_rname: netadmin.orf.at, dns_authorities_0_soa_serial: 2017062901, dns_authorities_0_soa_refresh: 14400, dns_authorities_0_soa_retry: 3600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 8267224, event_type: dns, proto: UDP, dns_type: query, dns_id: 40539, dns_rrname: s4.cnzz.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8267333, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 40539, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s4.cnzz.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s4.cnzz.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 3370, dns_answers_0_rdata: c.cnzz.com, dns_answers_1_rrname: c.cnzz.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 245, dns_answers_1_rdata: all.cnzz.com.danuoyi.tbcache.com, dns_answers_2_rrname: all.cnzz.com.danuoyi.tbcache.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 281, dns_answers_2_rdata: 183.232.151.22, dns_answers_3_rrname: all.cnzz.com.danuoyi.tbcache.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 281, dns_answers_3_rdata: 183.232.151.251, dns_grouped_A_0: 183.232.151.22, dns_grouped_A_1: 183.232.151.251, dns_grouped_CNAME_0: c.cnzz.com, dns_grouped_CNAME_1: all.cnzz.com.danuoyi.tbcache.com ; pcap_cnt: 8628528, event_type: dns, proto: UDP, dns_type: query, dns_id: 20514, dns_rrname: bs.eyeblaster.akadns.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8628594, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 20514, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: bs.eyeblaster.akadns.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: bs.eyeblaster.akadns.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: bsnj.eyeblaster.akadns.net, dns_answers_1_rrname: bsnj.eyeblaster.akadns.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 29, dns_answers_1_rdata: 63.241.108.104, dns_grouped_A_0: 63.241.108.104, dns_grouped_CNAME_0: bsnj.eyeblaster.akadns.net ; pcap_cnt: 8631532, event_type: dns, proto: UDP, dns_type: query, dns_id: 39503, dns_rrname: adx.g.doubleclick.net, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 8631607, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 39503, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: adx.g.doubleclick.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: adx.g.doubleclick.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 121, dns_answers_0_rdata: pagead46.l.doubleclick.net, dns_answers_1_rrname: pagead46.l.doubleclick.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 198, dns_answers_1_rdata: 2607:f8b0:4006:0805:0000:0000:0000:2002, dns_grouped_AAAA_0: 2607:f8b0:4006:0805:0000:0000:0000:2002, dns_grouped_CNAME_0: pagead46.l.doubleclick.net ; pcap_cnt: 8899656, event_type: dns, proto: UDP, dns_type: query, dns_id: 58965, dns_rrname: content-signature.cdn.mozilla.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8899669, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 58965, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: content-signature.cdn.mozilla.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: content-signature.cdn.mozilla.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: d12uj65dsn9ho1.cloudfront.net, dns_answers_1_rrname: d12uj65dsn9ho1.cloudfront.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 2, dns_answers_1_rdata: 54.192.37.146, dns_answers_2_rrname: d12uj65dsn9ho1.cloudfront.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 2, dns_answers_2_rdata: 54.192.37.221, dns_answers_3_rrname: d12uj65dsn9ho1.cloudfront.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 2, dns_answers_3_rdata: 54.192.37.41, dns_answers_4_rrname: d12uj65dsn9ho1.cloudfront.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 2, dns_answers_4_rdata: 54.192.37.161, dns_answers_5_rrname: d12uj65dsn9ho1.cloudfront.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 2, dns_answers_5_rdata: 54.192.37.173, dns_answers_6_rrname: d12uj65dsn9ho1.cloudfront.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 2, dns_answers_6_rdata: 54.192.37.80, dns_answers_7_rrname: d12uj65dsn9ho1.cloudfront.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 2, dns_answers_7_rdata: 54.192.37.61, dns_answers_8_rrname: d12uj65dsn9ho1.cloudfront.net, dns_answers_8_rrtype: A, dns_answers_8_ttl: 2, dns_answers_8_rdata: 54.192.37.36, dns_grouped_CNAME_0: d12uj65dsn9ho1.cloudfront.net, dns_grouped_A_0: 54.192.37.146, dns_grouped_A_1: 54.192.37.221, dns_grouped_A_2: 54.192.37.41, dns_grouped_A_3: 54.192.37.161, dns_grouped_A_4: 54.192.37.173, dns_grouped_A_5: 54.192.37.80, dns_grouped_A_6: 54.192.37.61, dns_grouped_A_7: 54.192.37.36 ; pcap_cnt: 8944665, event_type: dns, proto: UDP, dns_type: query, dns_id: 51882, dns_rrname: www.ccb.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8944667, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 51882, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.ccb.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.ccb.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 300, dns_answers_0_rdata: 202.106.80.78, dns_grouped_A_0: 202.106.80.78 ; pcap_cnt: 8982149, event_type: dns, proto: UDP, dns_type: query, dns_id: 65481, dns_rrname: cat.ny.us.criteo.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 8982173, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 65481, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cat.ny.us.criteo.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us.criteo.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 905, dns_authorities_0_soa_mname: ns1.criteo.com, dns_authorities_0_soa_rname: dns.criteo.com, dns_authorities_0_soa_serial: 2014061906, dns_authorities_0_soa_refresh: 10800, dns_authorities_0_soa_retry: 3600, dns_authorities_0_soa_expire: 2419200, dns_authorities_0_soa_minimum: 3600 ; pcap_cnt: 9011988, event_type: dns, proto: UDP, dns_type: query, dns_id: 46570, dns_rrname: ocsp.sca1b.amazontrust.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 9012041, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 46570, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.sca1b.amazontrust.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.sca1b.amazontrust.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 24, dns_answers_0_rdata: 54.192.36.242, dns_answers_1_rrname: ocsp.sca1b.amazontrust.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 24, dns_answers_1_rdata: 54.192.36.175, dns_answers_2_rrname: ocsp.sca1b.amazontrust.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 24, dns_answers_2_rdata: 54.192.36.36, dns_answers_3_rrname: ocsp.sca1b.amazontrust.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 24, dns_answers_3_rdata: 54.192.36.97, dns_answers_4_rrname: ocsp.sca1b.amazontrust.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 24, dns_answers_4_rdata: 54.192.36.201, dns_answers_5_rrname: ocsp.sca1b.amazontrust.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 24, dns_answers_5_rdata: 54.192.36.139, dns_answers_6_rrname: ocsp.sca1b.amazontrust.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 24, dns_answers_6_rdata: 54.192.36.157, dns_answers_7_rrname: ocsp.sca1b.amazontrust.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 24, dns_answers_7_rdata: 54.192.36.134, dns_grouped_A_0: 54.192.36.242, dns_grouped_A_1: 54.192.36.175, dns_grouped_A_2: 54.192.36.36, dns_grouped_A_3: 54.192.36.97, dns_grouped_A_4: 54.192.36.201, dns_grouped_A_5: 54.192.36.139, dns_grouped_A_6: 54.192.36.157, dns_grouped_A_7: 54.192.36.134 ; pcap_cnt: 9061559, event_type: dns, proto: UDP, dns_type: query, dns_id: 65249, dns_rrname: aax.amazon-adsystem.amazon.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9061620, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 65249, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: aax.amazon-adsystem.amazon.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: aax.amazon-adsystem.amazon.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: aax-us-east.amazon-adsystem.com, dns_grouped_CNAME_0: aax-us-east.amazon-adsystem.com, dns_authorities_0_rrname: aax-us-east.amazon-adsystem.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 19, dns_authorities_0_soa_mname: ns-947.amazon.com, dns_authorities_0_soa_rname: root.amazon.com, dns_authorities_0_soa_serial: 1499099506, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 7776000, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 9295688, event_type: dns, proto: UDP, dns_type: query, dns_id: 54745, dns_rrname: st.videojam.tv, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9296169, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 54745, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: st.videojam.tv, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: st.videojam.tv, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 68, dns_answers_0_rdata: dsp.vj-vid.com, dns_answers_1_rrname: dsp.vj-vid.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 159.203.99.186, dns_answers_2_rrname: dsp.vj-vid.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 138.197.13.37, dns_answers_3_rrname: dsp.vj-vid.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 45.55.46.90, dns_answers_4_rrname: dsp.vj-vid.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 45.55.51.91, dns_answers_5_rrname: dsp.vj-vid.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 159.203.163.153, dns_answers_6_rrname: dsp.vj-vid.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 159.203.93.75, dns_answers_7_rrname: dsp.vj-vid.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 45.55.53.163, dns_answers_8_rrname: dsp.vj-vid.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 159.203.170.206, dns_answers_9_rrname: dsp.vj-vid.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 1, dns_answers_9_rdata: 45.55.50.181, dns_answers_10_rrname: dsp.vj-vid.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 1, dns_answers_10_rdata: 159.203.93.70, dns_answers_11_rrname: dsp.vj-vid.com, dns_answers_11_rrtype: A, dns_answers_11_ttl: 1, dns_answers_11_rdata: 138.197.74.57, dns_answers_12_rrname: dsp.vj-vid.com, dns_answers_12_rrtype: A, dns_answers_12_ttl: 1, dns_answers_12_rdata: 45.55.144.249, dns_grouped_CNAME_0: dsp.vj-vid.com, dns_grouped_A_0: 159.203.99.186, dns_grouped_A_1: 138.197.13.37, dns_grouped_A_2: 45.55.46.90, dns_grouped_A_3: 45.55.51.91, dns_grouped_A_4: 159.203.163.153, dns_grouped_A_5: 159.203.93.75, dns_grouped_A_6: 45.55.53.163, dns_grouped_A_7: 159.203.170.206, dns_grouped_A_8: 45.55.50.181, dns_grouped_A_9: 159.203.93.70, dns_grouped_A_10: 138.197.74.57, dns_grouped_A_11: 45.55.144.249 ; pcap_cnt: 10111756, event_type: dns, proto: UDP, dns_type: query, dns_id: 37094, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10111814, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37094, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: scontent.xx.fbcdn.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2a03:2880:f00e:0013:face:b00c:0000:0003, dns_grouped_AAAA_0: 2a03:2880:f00e:0013:face:b00c:0000:0003 ; pcap_cnt: 10726369, event_type: dns, proto: UDP, dns_type: query, dns_id: 20419, dns_rrname: m.anycast.adnxs.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10726383, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 20419, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: m.anycast.adnxs.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: m.anycast.adnxs.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 204.13.192.211, dns_answers_1_rrname: m.anycast.adnxs.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 204.13.192.177, dns_answers_2_rrname: m.anycast.adnxs.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 204.13.193.176, dns_answers_3_rrname: m.anycast.adnxs.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 68.67.180.138, dns_answers_4_rrname: m.anycast.adnxs.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 68.67.180.143, dns_grouped_A_0: 204.13.192.211, dns_grouped_A_1: 204.13.192.177, dns_grouped_A_2: 204.13.193.176, dns_grouped_A_3: 68.67.180.138, dns_grouped_A_4: 68.67.180.143 ; pcap_cnt: 10892543, event_type: dns, proto: UDP, dns_type: query, dns_id: 47698, dns_rrname: ocsp.comodoca.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10892566, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 47698, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.comodoca.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.comodoca.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 194, dns_answers_0_rdata: 178.255.83.1, dns_grouped_A_0: 178.255.83.1 ; pcap_cnt: 11134916, event_type: dns, proto: UDP, dns_type: query, dns_id: 13416, dns_rrname: ocsp.comodoca.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11135007, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13416, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.comodoca.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.comodoca.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 259, dns_answers_0_rdata: 2a02:1788:02fd:0000:0000:0000:b2ff:5301, dns_grouped_AAAA_0: 2a02:1788:02fd:0000:0000:0000:b2ff:5301 ; pcap_cnt: 11219450, event_type: dns, proto: UDP, dns_type: query, dns_id: 49414, dns_rrname: tapestry.tapad.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11219820, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 49414, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: tapestry.tapad.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: tapestry.tapad.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: tapestry-us-east.tapad.com, dns_answers_1_rrname: tapestry-us-east.tapad.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 157, dns_answers_1_rdata: vhosts-us-east.tapad.com, dns_answers_2_rrname: vhosts-us-east.tapad.com, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 166, dns_answers_2_rdata: vhosts-nj1.tapad.com, dns_answers_3_rrname: vhosts-nj1.tapad.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 166, dns_answers_3_rdata: 198.51.152.184, dns_answers_4_rrname: vhosts-nj1.tapad.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 166, dns_answers_4_rdata: 198.51.152.183, dns_answers_5_rrname: vhosts-nj1.tapad.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 166, dns_answers_5_rdata: 198.51.152.179, dns_answers_6_rrname: vhosts-nj1.tapad.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 166, dns_answers_6_rdata: 198.51.152.178, dns_grouped_A_0: 198.51.152.184, dns_grouped_A_1: 198.51.152.183, dns_grouped_A_2: 198.51.152.179, dns_grouped_A_3: 198.51.152.178, dns_grouped_CNAME_0: tapestry-us-east.tapad.com, dns_grouped_CNAME_1: vhosts-us-east.tapad.com, dns_grouped_CNAME_2: vhosts-nj1.tapad.com ; pcap_cnt: 11291184, event_type: dns, proto: UDP, dns_type: query, dns_id: 8321, dns_rrname: prod.taboola.map.fastly.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11291188, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 8321, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: prod.taboola.map.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: prod.taboola.map.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 151.101.21.181, dns_grouped_A_0: 151.101.21.181 ; pcap_cnt: 11626406, event_type: dns, proto: UDP, dns_type: query, dns_id: 51759, dns_rrname: www.tripadvisor.it, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11626417, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 51759, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.tripadvisor.it, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.tripadvisor.it, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 255, dns_answers_0_rdata: ev-www.tripadvisor.com.edgekey.net, dns_answers_1_rrname: ev-www.tripadvisor.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 21351, dns_answers_1_rdata: e10952.b.akamaiedge.net, dns_answers_2_rrname: e10952.b.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 19, dns_answers_2_rdata: 72.247.64.52, dns_grouped_A_0: 72.247.64.52, dns_grouped_CNAME_0: ev-www.tripadvisor.com.edgekey.net, dns_grouped_CNAME_1: e10952.b.akamaiedge.net
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.