['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 60129, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 147, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 124, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 141, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 201, flow_bytes_toclient: 282, flow_age: 112, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 96, flow_bytes_toclient: 112, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 83, flow_bytes_toclient: 118, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 109, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 175, flow_bytes_toclient: 415, flow_age: 56, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 180, flow_bytes_toclient: 346, flow_age: 153, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 109, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 5, flow_pkts_toclient: 5, flow_bytes_toserver: 464, flow_bytes_toclient: 828, flow_age: 385, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 105, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 183, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 182, flow_bytes_toclient: 371, flow_age: 30, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 152, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 181, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 489, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 122, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 115, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 152, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 198, flow_bytes_toclient: 342, flow_age: 2, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 109, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 185, flow_bytes_toclient: 260, flow_age: 97, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 97, flow_bytes_toclient: 125, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 25059, event_type: dns, proto: UDP, dns_type: query, dns_id: 36790, dns_rrname: 1.ubuntu.pool.ntp.org, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 25060, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36790, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 1.ubuntu.pool.ntp.org, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: pool.ntp.org, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 413, dns_authorities_0_soa_mname: h.ntpns.org, dns_authorities_0_soa_rname: hostmaster.pool.ntp.org, dns_authorities_0_soa_serial: 1499082063, dns_authorities_0_soa_refresh: 5400, dns_authorities_0_soa_retry: 5400, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 3600 ; pcap_cnt: 1735002, event_type: dns, proto: UDP, dns_type: query, dns_id: 32343, dns_rrname: expo.getbootstrap.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 1735339, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32343, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: expo.getbootstrap.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: expo.getbootstrap.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 104.27.145.213, dns_answers_1_rrname: expo.getbootstrap.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 299, dns_answers_1_rdata: 104.27.144.213, dns_grouped_A_0: 104.27.145.213, dns_grouped_A_1: 104.27.144.213 ; pcap_cnt: 2686619, event_type: dns, proto: UDP, dns_type: query, dns_id: 9406, dns_rrname: www.hsph.harvard.edu, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 2686717, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 9406, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.hsph.harvard.edu, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.hsph.harvard.edu, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 59, dns_answers_0_rdata: ut456.x.incapdns.net, dns_answers_1_rrname: ut456.x.incapdns.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 29, dns_answers_1_rdata: 199.83.128.227, dns_grouped_CNAME_0: ut456.x.incapdns.net, dns_grouped_A_0: 199.83.128.227 ; pcap_cnt: 4767355, event_type: dns, proto: UDP, dns_type: query, dns_id: 36176, dns_rrname: 33.122.97.104.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 4767678, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36176, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 33.122.97.104.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 33.122.97.104.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 7429, dns_answers_0_rdata: a104-97-122-33.deploy.static.akamaitechnologies.com, dns_grouped_PTR_0: a104-97-122-33.deploy.static.akamaitechnologies.com ; pcap_cnt: 5227225, event_type: dns, proto: UDP, dns_type: query, dns_id: 25139, dns_rrname: ssl-google-analytics.l.google.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 5227544, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 25139, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ssl-google-analytics.l.google.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ssl-google-analytics.l.google.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 172.217.12.136, dns_grouped_A_0: 172.217.12.136 ; pcap_cnt: 6605067, event_type: dns, proto: UDP, dns_type: query, dns_id: 14586, dns_rrname: e6913.dscx.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6605078, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 14586, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e6913.dscx.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e6913.dscx.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 13, dns_answers_0_rdata: 23.208.165.24, dns_grouped_A_0: 23.208.165.24 ; pcap_cnt: 6715592, event_type: dns, proto: UDP, dns_type: query, dns_id: 54503, dns_rrname: a.rfihub.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6715675, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 54503, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a.rfihub.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: a.rfihub.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: a-tm.rfihub.com, dns_answers_1_rrname: a-tm.rfihub.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 8, dns_answers_1_rdata: 199.38.164.54, dns_grouped_CNAME_0: a-tm.rfihub.com, dns_grouped_A_0: 199.38.164.54 ; pcap_cnt: 6817491, event_type: dns, proto: UDP, dns_type: query, dns_id: 16013, dns_rrname: e8454.g.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6817508, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16013, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e8454.g.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e8454.g.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 104.88.70.158, dns_grouped_A_0: 104.88.70.158 ; pcap_cnt: 6954982, event_type: dns, proto: UDP, dns_type: query, dns_id: 13973, dns_rrname: rtb.gumgum.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6955070, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13973, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: rtb.gumgum.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: rtb.gumgum.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 59, dns_answers_0_rdata: 54.174.199.213, dns_answers_1_rrname: rtb.gumgum.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 59, dns_answers_1_rdata: 54.164.215.40, dns_answers_2_rrname: rtb.gumgum.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 59, dns_answers_2_rdata: 34.199.147.177, dns_answers_3_rrname: rtb.gumgum.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 59, dns_answers_3_rdata: 54.210.10.82, dns_answers_4_rrname: rtb.gumgum.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 59, dns_answers_4_rdata: 54.165.157.99, dns_answers_5_rrname: rtb.gumgum.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 59, dns_answers_5_rdata: 34.196.225.144, dns_answers_6_rrname: rtb.gumgum.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 59, dns_answers_6_rdata: 34.193.227.107, dns_answers_7_rrname: rtb.gumgum.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 59, dns_answers_7_rdata: 34.203.85.181, dns_grouped_A_0: 54.174.199.213, dns_grouped_A_1: 54.164.215.40, dns_grouped_A_2: 34.199.147.177, dns_grouped_A_3: 54.210.10.82, dns_grouped_A_4: 54.165.157.99, dns_grouped_A_5: 34.196.225.144, dns_grouped_A_6: 34.193.227.107, dns_grouped_A_7: 34.203.85.181 ; pcap_cnt: 6971198, event_type: dns, proto: UDP, dns_type: query, dns_id: 792, dns_rrname: vid.springserve.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 6971225, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 792, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: vid.springserve.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: vid.springserve.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 59, dns_answers_0_rdata: 52.71.206.171, dns_answers_1_rrname: vid.springserve.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 59, dns_answers_1_rdata: 52.7.160.203, dns_answers_2_rrname: vid.springserve.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 59, dns_answers_2_rdata: 34.194.111.0, dns_answers_3_rrname: vid.springserve.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 59, dns_answers_3_rdata: 34.193.193.111, dns_answers_4_rrname: vid.springserve.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 59, dns_answers_4_rdata: 54.164.70.80, dns_answers_5_rrname: vid.springserve.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 59, dns_answers_5_rdata: 52.72.164.81, dns_answers_6_rrname: vid.springserve.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 59, dns_answers_6_rdata: 52.72.49.160, dns_grouped_A_0: 52.71.206.171, dns_grouped_A_1: 52.7.160.203, dns_grouped_A_2: 34.194.111.0, dns_grouped_A_3: 34.193.193.111, dns_grouped_A_4: 54.164.70.80, dns_grouped_A_5: 52.72.164.81, dns_grouped_A_6: 52.72.49.160 ; pcap_cnt: 7085615, event_type: dns, proto: UDP, dns_type: query, dns_id: 65534, dns_rrname: e6749.g.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7085616, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 65534, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e6749.g.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 567, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499089996, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 7123421, event_type: dns, proto: UDP, dns_type: query, dns_id: 15044, dns_rrname: idsync.rlcdn.com, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 7123453, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 15044, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: idsync.rlcdn.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: idsync.rlcdn.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 245, dns_answers_0_rdata: idsync-ext-tf.rlcdn.com, dns_grouped_CNAME_0: idsync-ext-tf.rlcdn.com, dns_authorities_0_rrname: rlcdn.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 633, dns_authorities_0_soa_mname: ns-45.awsdns-05.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 2012040900, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 7336010, event_type: dns, proto: UDP, dns_type: query, dns_id: 32153, dns_rrname: s5j8g8c4.ssl.hwcdn.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7336065, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32153, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s5j8g8c4.ssl.hwcdn.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s5j8g8c4.ssl.hwcdn.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 296, dns_answers_0_rdata: 205.185.208.154, dns_grouped_A_0: 205.185.208.154 ; pcap_cnt: 7937041, event_type: dns, proto: UDP, dns_type: query, dns_id: 35894, dns_rrname: 62.132.20.146.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 7937067, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 35894, dns_flags: 8183, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 62.132.20.146.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NXDOMAIN, dns_authorities_0_rrname: 132.20.146.in-addr.arpa, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 247, dns_authorities_0_soa_mname: ns.rackspace.com, dns_authorities_0_soa_rname: hostmaster.rackspace.com, dns_authorities_0_soa_serial: 1443122837, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 300, dns_authorities_0_soa_expire: 1814400, dns_authorities_0_soa_minimum: 300 ; pcap_cnt: 7990630, event_type: dns, proto: UDP, dns_type: query, dns_id: 14361, dns_rrname: images.gogoanime.tv, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 7990653, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 14361, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: images.gogoanime.tv, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: images.gogoanime.tv, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 104.28.3.206, dns_answers_1_rrname: images.gogoanime.tv, dns_answers_1_rrtype: A, dns_answers_1_ttl: 299, dns_answers_1_rdata: 104.28.2.206, dns_grouped_A_0: 104.28.3.206, dns_grouped_A_1: 104.28.2.206 ; pcap_cnt: 8000716, event_type: dns, proto: UDP, dns_type: query, dns_id: 2193, dns_rrname: shavar.services.mozilla.com, dns_rrtype: A, dns_tx_id: 4 ; pcap_cnt: 8000720, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 2193, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: shavar.services.mozilla.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: shavar.services.mozilla.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 2, dns_answers_0_rdata: shavar.prod.mozaws.net, dns_answers_1_rrname: shavar.prod.mozaws.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 52.39.210.199, dns_answers_2_rrname: shavar.prod.mozaws.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 35.165.158.113, dns_answers_3_rrname: shavar.prod.mozaws.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 52.35.5.132, dns_answers_4_rrname: shavar.prod.mozaws.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 35.160.9.151, dns_answers_5_rrname: shavar.prod.mozaws.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 54.200.60.113, dns_answers_6_rrname: shavar.prod.mozaws.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 52.37.48.84, dns_grouped_A_0: 52.39.210.199, dns_grouped_A_1: 35.165.158.113, dns_grouped_A_2: 52.35.5.132, dns_grouped_A_3: 35.160.9.151, dns_grouped_A_4: 54.200.60.113, dns_grouped_A_5: 52.37.48.84, dns_grouped_CNAME_0: shavar.prod.mozaws.net ; pcap_cnt: 8042906, event_type: dns, proto: UDP, dns_type: query, dns_id: 62152, dns_rrname: cm.dsp.linksynergy.com, dns_rrtype: AAAA, dns_tx_id: 6 ; pcap_cnt: 8043020, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 62152, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cm.dsp.linksynergy.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: cm.dsp.linksynergy.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 300, dns_answers_0_rdata: ec2-52-205-114-175.compute-1.amazonaws.com, dns_grouped_CNAME_0: ec2-52-205-114-175.compute-1.amazonaws.com, dns_authorities_0_rrname: compute-1.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1466, dns_authorities_0_soa_mname: dns-external-master.amazon.com, dns_authorities_0_soa_rname: root.amazon.com, dns_authorities_0_soa_serial: 2013158666, dns_authorities_0_soa_refresh: 28800, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 2592000, dns_authorities_0_soa_minimum: 7211 ; pcap_cnt: 8061143, event_type: dns, proto: UDP, dns_type: query, dns_id: 47046, dns_rrname: rtax.criteo.com, dns_rrtype: A, dns_tx_id: 8 ; pcap_cnt: 8061153, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 47046, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: rtax.criteo.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: rtax.criteo.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 74.119.118.100, dns_grouped_A_0: 74.119.118.100 ; pcap_cnt: 8776331, event_type: dns, proto: UDP, dns_type: query, dns_id: 57859, dns_rrname: s3-1.amazonaws.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8776332, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 57859, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s3-1.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s3-1.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 4, dns_answers_0_rdata: 54.231.72.34, dns_grouped_A_0: 54.231.72.34 ; pcap_cnt: 9174369, event_type: dns, proto: UDP, dns_type: query, dns_id: 59170, dns_rrname: services.addons.mozilla.org, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9174375, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 59170, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: services.addons.mozilla.org, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: services.addons.mozilla.org, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: olympia.prod.mozaws.net, dns_answers_1_rrname: olympia.prod.mozaws.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 8, dns_answers_1_rdata: 52.11.164.190, dns_answers_2_rrname: olympia.prod.mozaws.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 8, dns_answers_2_rdata: 35.160.100.86, dns_answers_3_rrname: olympia.prod.mozaws.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 8, dns_answers_3_rdata: 34.209.201.65, dns_grouped_CNAME_0: olympia.prod.mozaws.net, dns_grouped_A_0: 52.11.164.190, dns_grouped_A_1: 35.160.100.86, dns_grouped_A_2: 34.209.201.65 ; pcap_cnt: 9288212, event_type: dns, proto: UDP, dns_type: query, dns_id: 45047, dns_rrname: e5195.g.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9288255, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 45047, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e5195.g.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1000, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499100405, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 9311332, event_type: dns, proto: UDP, dns_type: query, dns_id: 25139, dns_rrname: ssp.streamrail.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 9311333, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 25139, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ssp.streamrail.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ssp.streamrail.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 0, dns_answers_0_rdata: 52.14.40.167, dns_answers_1_rrname: ssp.streamrail.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 0, dns_answers_1_rdata: 52.14.82.203, dns_answers_2_rrname: ssp.streamrail.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 0, dns_answers_2_rdata: 52.14.255.120, dns_answers_3_rrname: ssp.streamrail.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 0, dns_answers_3_rdata: 52.14.9.165, dns_answers_4_rrname: ssp.streamrail.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 0, dns_answers_4_rdata: 52.14.43.159, dns_answers_5_rrname: ssp.streamrail.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 0, dns_answers_5_rdata: 52.14.88.194, dns_answers_6_rrname: ssp.streamrail.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 0, dns_answers_6_rdata: 52.14.71.101, dns_answers_7_rrname: ssp.streamrail.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 0, dns_answers_7_rdata: 52.15.103.85, dns_grouped_A_0: 52.14.40.167, dns_grouped_A_1: 52.14.82.203, dns_grouped_A_2: 52.14.255.120, dns_grouped_A_3: 52.14.9.165, dns_grouped_A_4: 52.14.43.159, dns_grouped_A_5: 52.14.88.194, dns_grouped_A_6: 52.14.71.101, dns_grouped_A_7: 52.15.103.85 ; pcap_cnt: 9550949, event_type: dns, proto: UDP, dns_type: query, dns_id: 2345, dns_rrname: 755003843.r.cdnsun.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9550950, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 2345, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 755003843.r.cdnsun.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: cdnsun.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 163, dns_authorities_0_soa_mname: cdnsun.net, dns_authorities_0_soa_rname: hostmaster.worldcdn.com, dns_authorities_0_soa_serial: 1499101746, dns_authorities_0_soa_refresh: 1200, dns_authorities_0_soa_retry: 180, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 180 ; pcap_cnt: 9634199, event_type: dns, proto: UDP, dns_type: query, dns_id: 42314, dns_rrname: px.moatads.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9634283, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 42314, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: px.moatads.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: px.moatads.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 123, dns_answers_0_rdata: wildcard.moatads.com.edgekey.net, dns_answers_1_rrname: wildcard.moatads.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 124, dns_answers_1_rdata: e11100.g.akamaiedge.net, dns_answers_2_rrname: e11100.g.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 23.194.111.147, dns_grouped_A_0: 23.194.111.147, dns_grouped_CNAME_0: wildcard.moatads.com.edgekey.net, dns_grouped_CNAME_1: e11100.g.akamaiedge.net ; pcap_cnt: 9704185, event_type: dns, proto: UDP, dns_type: query, dns_id: 31821, dns_rrname: rm.em.nscontext.eu, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9704497, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 31821, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: rm.em.nscontext.eu, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: rm.em.nscontext.eu, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 790, dns_answers_0_rdata: lb2.adcontext.pl, dns_answers_1_rrname: lb2.adcontext.pl, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 356, dns_answers_1_rdata: lb3.adcontext.pl, dns_answers_2_rrname: lb3.adcontext.pl, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1234, dns_answers_2_rdata: 138.201.165.92, dns_answers_3_rrname: lb3.adcontext.pl, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1234, dns_answers_3_rdata: 138.201.178.189, dns_answers_4_rrname: lb3.adcontext.pl, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1234, dns_answers_4_rdata: 138.201.230.73, dns_answers_5_rrname: lb3.adcontext.pl, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1234, dns_answers_5_rdata: 138.201.230.75, dns_answers_6_rrname: lb3.adcontext.pl, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1234, dns_answers_6_rdata: 148.251.158.105, dns_answers_7_rrname: lb3.adcontext.pl, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1234, dns_answers_7_rdata: 148.251.196.46, dns_answers_8_rrname: lb3.adcontext.pl, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1234, dns_answers_8_rdata: 188.40.16.249, dns_answers_9_rrname: lb3.adcontext.pl, dns_answers_9_rrtype: A, dns_answers_9_ttl: 1234, dns_answers_9_rdata: 188.40.17.15, dns_answers_10_rrname: lb3.adcontext.pl, dns_answers_10_rrtype: A, dns_answers_10_ttl: 1234, dns_answers_10_rdata: 188.40.17.50, dns_answers_11_rrname: lb3.adcontext.pl, dns_answers_11_rrtype: A, dns_answers_11_ttl: 1234, dns_answers_11_rdata: 46.4.70.55, dns_answers_12_rrname: lb3.adcontext.pl, dns_answers_12_rrtype: A, dns_answers_12_ttl: 1234, dns_answers_12_rdata: 88.99.176.143, dns_answers_13_rrname: lb3.adcontext.pl, dns_answers_13_rrtype: A, dns_answers_13_ttl: 1234, dns_answers_13_rdata: 136.243.87.193, dns_answers_14_rrname: lb3.adcontext.pl, dns_answers_14_rrtype: A, dns_answers_14_ttl: 1234, dns_answers_14_rdata: 136.243.87.194, dns_answers_15_rrname: lb3.adcontext.pl, dns_answers_15_rrtype: A, dns_answers_15_ttl: 1234, dns_answers_15_rdata: 136.243.87.196, dns_answers_16_rrname: lb3.adcontext.pl, dns_answers_16_rrtype: A, dns_answers_16_ttl: 1234, dns_answers_16_rdata: 136.243.87.204, dns_answers_17_rrname: lb3.adcontext.pl, dns_answers_17_rrtype: A, dns_answers_17_ttl: 1234, dns_answers_17_rdata: 136.243.87.209, dns_answers_18_rrname: lb3.adcontext.pl, dns_answers_18_rrtype: A, dns_answers_18_ttl: 1234, dns_answers_18_rdata: 136.243.87.210, dns_answers_19_rrname: lb3.adcontext.pl, dns_answers_19_rrtype: A, dns_answers_19_ttl: 1234, dns_answers_19_rdata: 136.243.87.212, dns_answers_20_rrname: lb3.adcontext.pl, dns_answers_20_rrtype: A, dns_answers_20_ttl: 1234, dns_answers_20_rdata: 136.243.87.213, dns_answers_21_rrname: lb3.adcontext.pl, dns_answers_21_rrtype: A, dns_answers_21_ttl: 1234, dns_answers_21_rdata: 136.243.140.54, dns_answers_22_rrname: lb3.adcontext.pl, dns_answers_22_rrtype: A, dns_answers_22_ttl: 1234, dns_answers_22_rdata: 136.243.140.58, dns_answers_23_rrname: lb3.adcontext.pl, dns_answers_23_rrtype: A, dns_answers_23_ttl: 1234, dns_answers_23_rdata: 136.243.140.59, dns_grouped_CNAME_0: lb2.adcontext.pl, dns_grouped_CNAME_1: lb3.adcontext.pl, dns_grouped_A_0: 138.201.165.92, dns_grouped_A_1: 138.201.178.189, dns_grouped_A_2: 138.201.230.73, dns_grouped_A_3: 138.201.230.75, dns_grouped_A_4: 148.251.158.105, dns_grouped_A_5: 148.251.196.46, dns_grouped_A_6: 188.40.16.249, dns_grouped_A_7: 188.40.17.15, dns_grouped_A_8: 188.40.17.50, dns_grouped_A_9: 46.4.70.55, dns_grouped_A_10: 88.99.176.143, dns_grouped_A_11: 136.243.87.193, dns_grouped_A_12: 136.243.87.194, dns_grouped_A_13: 136.243.87.196, dns_grouped_A_14: 136.243.87.204, dns_grouped_A_15: 136.243.87.209, dns_grouped_A_16: 136.243.87.210, dns_grouped_A_17: 136.243.87.212, dns_grouped_A_18: 136.243.87.213, dns_grouped_A_19: 136.243.140.54, dns_grouped_A_20: 136.243.140.58, dns_grouped_A_21: 136.243.140.59 ; pcap_cnt: 9825881, event_type: dns, proto: UDP, dns_type: query, dns_id: 11957, dns_rrname: stats.l.doubleclick.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9825919, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 11957, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: stats.l.doubleclick.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: stats.l.doubleclick.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 89, dns_answers_0_rdata: 2607:f8b0:400d:0c09:0000:0000:0000:009c, dns_grouped_AAAA_0: 2607:f8b0:400d:0c09:0000:0000:0000:009c ; pcap_cnt: 10012186, event_type: dns, proto: UDP, dns_type: query, dns_id: 58021, dns_rrname: maps.gstatic.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10012195, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 58021, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: maps.gstatic.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: maps.gstatic.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 62, dns_answers_0_rdata: 2607:f8b0:4006:0813:0000:0000:0000:2003, dns_grouped_AAAA_0: 2607:f8b0:4006:0813:0000:0000:0000:2003 ; pcap_cnt: 10437871, event_type: dns, proto: UDP, dns_type: query, dns_id: 62432, dns_rrname: action.media6degrees.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10437991, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 62432, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: action.media6degrees.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: action.media6degrees.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 821, dns_answers_0_rdata: action.dynectmedia6degrees.com, dns_answers_1_rrname: action.dynectmedia6degrees.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 533, dns_answers_1_rdata: 38.126.130.202, dns_grouped_CNAME_0: action.dynectmedia6degrees.com, dns_grouped_A_0: 38.126.130.202 ; pcap_cnt: 10683918, event_type: dns, proto: UDP, dns_type: query, dns_id: 49997, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10684019, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 49997, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: e8218.dscb1.akamaiedge.net, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 1, dns_answers_1_rdata: 2600:1408:e000:0182:0000:0000:0000:201a, dns_answers_2_rrname: e8218.dscb1.akamaiedge.net, dns_answers_2_rrtype: AAAA, dns_answers_2_ttl: 1, dns_answers_2_rdata: 2600:1408:e000:019a:0000:0000:0000:201a, dns_grouped_AAAA_0: 2600:1408:e000:0182:0000:0000:0000:201a, dns_grouped_AAAA_1: 2600:1408:e000:019a:0000:0000:0000:201a, dns_grouped_CNAME_0: e8218.dscb1.akamaiedge.net ; pcap_cnt: 10685861, event_type: dns, proto: UDP, dns_type: query, dns_id: 33398, dns_rrname: visitor.omnitagjs.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 10685998, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 33398, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: visitor.omnitagjs.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: visitor.omnitagjs.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 74, dns_answers_0_rdata: root.omnitagjs.com, dns_answers_1_rrname: root.omnitagjs.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 82, dns_answers_1_rdata: 5.196.119.250, dns_answers_2_rrname: root.omnitagjs.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 82, dns_answers_2_rdata: 5.196.119.249, dns_grouped_CNAME_0: root.omnitagjs.com, dns_grouped_A_0: 5.196.119.250, dns_grouped_A_1: 5.196.119.249 ; pcap_cnt: 10865509, event_type: dns, proto: UDP, dns_type: query, dns_id: 36522, dns_rrname: e5799.g.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10865548, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36522, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e5799.g.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e5799.g.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 23.194.109.177, dns_grouped_A_0: 23.194.109.177 ; pcap_cnt: 10934147, event_type: dns, proto: UDP, dns_type: query, dns_id: 41141, dns_rrname: aax-us-east.amazon-adsystem.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10934148, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 41141, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: aax-us-east.amazon-adsystem.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: aax-us-east.amazon-adsystem.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 52.94.232.33, dns_grouped_A_0: 52.94.232.33 ; pcap_cnt: 10958359, event_type: dns, proto: UDP, dns_type: query, dns_id: 40483, dns_rrname: cd.ladsp.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 10958566, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 40483, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cd.ladsp.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: cd.ladsp.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 60, dns_answers_0_rdata: d34ue60hib4v0z.cloudfront.net, dns_answers_1_rrname: d34ue60hib4v0z.cloudfront.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 60, dns_answers_1_rdata: 54.230.39.194, dns_grouped_A_0: 54.230.39.194, dns_grouped_CNAME_0: d34ue60hib4v0z.cloudfront.net ; pcap_cnt: 11407349, event_type: dns, proto: UDP, dns_type: query, dns_id: 54132, dns_rrname: pagead46.l.doubleclick.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11407467, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 54132, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pagead46.l.doubleclick.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: pagead46.l.doubleclick.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2607:f8b0:4006:0811:0000:0000:0000:2002, dns_grouped_AAAA_0: 2607:f8b0:4006:0811:0000:0000:0000:2002
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.