['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 60595, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 191, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 109, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 128, flow_bytes_toclient: 212, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 149, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 182, flow_bytes_toclient: 308, flow_age: 154, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 166, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 84, flow_bytes_toclient: 242, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 133, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 114, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 223, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 157, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 110, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 260, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 107, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 190, flow_bytes_toclient: 366, flow_age: 2, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 153, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 318, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 192, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 101, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 110, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 48392, event_type: dns, proto: UDP, dns_type: query, dns_id: 9778, dns_rrname: ocsp.godaddy.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 48699, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 9778, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.godaddy.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.godaddy.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 398, dns_answers_0_rdata: ocsp.godaddy.com.akadns.net, dns_grouped_CNAME_0: ocsp.godaddy.com.akadns.net, dns_authorities_0_rrname: akadns.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 179, dns_authorities_0_soa_mname: internal.akadns.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499429148, dns_authorities_0_soa_refresh: 90000, dns_authorities_0_soa_retry: 90000, dns_authorities_0_soa_expire: 90000, dns_authorities_0_soa_minimum: 180 ; pcap_cnt: 287869, event_type: dns, proto: UDP, dns_type: query, dns_id: 50789, dns_rrname: e1706.g.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 287876, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 50789, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e1706.g.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e1706.g.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 19, dns_answers_0_rdata: 104.97.95.20, dns_grouped_A_0: 104.97.95.20 ; pcap_cnt: 2984236, event_type: dns, proto: UDP, dns_type: query, dns_id: 10126, dns_rrname: pixel-sync-jp-1279679511.ap-northeast-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 2984237, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 10126, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pixel-sync-jp-1279679511.ap-northeast-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: ap-northeast-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 58, dns_authorities_0_soa_mname: ns-1683.awsdns-18.co.uk, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 3744370, event_type: dns, proto: UDP, dns_type: query, dns_id: 32932, dns_rrname: cbsi-d.openx.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 3744371, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32932, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cbsi-d.openx.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: openx.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 258, dns_authorities_0_soa_mname: dns1.p04.nsone.net, dns_authorities_0_soa_rname: hostmaster.nsone.net, dns_authorities_0_soa_serial: 1499394995, dns_authorities_0_soa_refresh: 10800, dns_authorities_0_soa_retry: 3600, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 3600 ; pcap_cnt: 3795746, event_type: dns, proto: UDP, dns_type: query, dns_id: 25245, dns_rrname: e7131.g.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 3795747, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 25245, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e7131.g.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 918, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499431672, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 3872587, event_type: dns, proto: UDP, dns_type: query, dns_id: 13563, dns_rrname: geo-rtas.btrll.com, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 3872621, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13563, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: geo-rtas.btrll.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: btrll.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 3, dns_authorities_0_soa_mname: ns1.p02.dynect.net, dns_authorities_0_soa_rname: hostmaster.btrll.com, dns_authorities_0_soa_serial: 1499381800, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 4018570, event_type: dns, proto: UDP, dns_type: query, dns_id: 22, dns_rrname: syndication.twitter.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 4018573, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 22, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: syndication.twitter.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: twitter.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 17, dns_authorities_0_soa_mname: ns1.p26.dynect.net, dns_authorities_0_soa_rname: zone-admin.dyndns.com, dns_authorities_0_soa_serial: 2007136037, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 4398618, event_type: dns, proto: UDP, dns_type: query, dns_id: 45193, dns_rrname: m.addthis.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4398660, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 45193, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: m.addthis.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: m.addthis.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 242, dns_answers_0_rdata: m.addthisedge.com, dns_answers_1_rrname: m.addthisedge.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 46, dns_answers_1_rdata: m.addthisedge.com.cdn.cloudflare.net, dns_answers_2_rrname: m.addthisedge.com.cdn.cloudflare.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 126, dns_answers_2_rdata: 104.16.26.235, dns_answers_3_rrname: m.addthisedge.com.cdn.cloudflare.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 126, dns_answers_3_rdata: 104.16.23.235, dns_answers_4_rrname: m.addthisedge.com.cdn.cloudflare.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 126, dns_answers_4_rdata: 104.16.27.235, dns_answers_5_rrname: m.addthisedge.com.cdn.cloudflare.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 126, dns_answers_5_rdata: 104.16.24.235, dns_answers_6_rrname: m.addthisedge.com.cdn.cloudflare.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 126, dns_answers_6_rdata: 104.16.25.235, dns_grouped_A_0: 104.16.26.235, dns_grouped_A_1: 104.16.23.235, dns_grouped_A_2: 104.16.27.235, dns_grouped_A_3: 104.16.24.235, dns_grouped_A_4: 104.16.25.235, dns_grouped_CNAME_0: m.addthisedge.com, dns_grouped_CNAME_1: m.addthisedge.com.cdn.cloudflare.net ; pcap_cnt: 4536984, event_type: dns, proto: UDP, dns_type: query, dns_id: 5209, dns_rrname: www.blogger.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4537017, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 5209, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.blogger.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.blogger.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 299, dns_answers_0_rdata: blogger.l.google.com, dns_answers_1_rrname: blogger.l.google.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 299, dns_answers_1_rdata: 172.217.9.233, dns_grouped_CNAME_0: blogger.l.google.com, dns_grouped_A_0: 172.217.9.233 ; pcap_cnt: 4653550, event_type: dns, proto: UDP, dns_type: query, dns_id: 25868, dns_rrname: f2.shared.global.fastly.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4653606, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 25868, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: f2.shared.global.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: f2.shared.global.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 151.101.22.2, dns_grouped_A_0: 151.101.22.2 ; pcap_cnt: 4721396, event_type: dns, proto: UDP, dns_type: query, dns_id: 51590, dns_rrname: challengegames.nfl.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 4721437, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 51590, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: challengegames.nfl.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: challengegames.nfl.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 209, dns_answers_0_rdata: nfl-challengegames-prod.sportstechinc.com, dns_grouped_CNAME_0: nfl-challengegames-prod.sportstechinc.com, dns_authorities_0_rrname: sportstechinc.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 349, dns_authorities_0_soa_mname: ns-337.awsdns-42.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 4997174, event_type: dns, proto: UDP, dns_type: query, dns_id: 21236, dns_rrname: a-tm.rfihub.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 4997175, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 21236, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: a-tm.rfihub.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: rfihub.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1023, dns_authorities_0_soa_mname: edns102.ultradns.com, dns_authorities_0_soa_rname: ayoung.rocketfuel.com, dns_authorities_0_soa_serial: 2017062632, dns_authorities_0_soa_refresh: 86400, dns_authorities_0_soa_retry: 86400, dns_authorities_0_soa_expire: 86400, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 5204008, event_type: dns, proto: UDP, dns_type: query, dns_id: 25158, dns_rrname: e13136.g.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5204023, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 25158, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e13136.g.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e13136.g.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 104.88.93.11, dns_grouped_A_0: 104.88.93.11 ; pcap_cnt: 5270155, event_type: dns, proto: UDP, dns_type: query, dns_id: 821, dns_rrname: gscounters.us1.gigya.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5270234, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 821, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: gscounters.us1.gigya.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: gscounters.us1.gigya.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 174, dns_answers_0_rdata: farm2.us1.gigya.com, dns_answers_1_rrname: farm2.us1.gigya.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 276, dns_answers_1_rdata: lb.us1.gigya.com, dns_answers_2_rrname: lb.us1.gigya.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 461, dns_answers_2_rdata: 74.120.148.204, dns_answers_3_rrname: lb.us1.gigya.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 461, dns_answers_3_rdata: 74.120.148.206, dns_answers_4_rrname: lb.us1.gigya.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 461, dns_answers_4_rdata: 74.120.148.208, dns_answers_5_rrname: lb.us1.gigya.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 461, dns_answers_5_rdata: 74.120.148.201, dns_answers_6_rrname: lb.us1.gigya.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 461, dns_answers_6_rdata: 74.120.148.202, dns_answers_7_rrname: lb.us1.gigya.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 461, dns_answers_7_rdata: 74.120.148.205, dns_answers_8_rrname: lb.us1.gigya.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 461, dns_answers_8_rdata: 74.120.148.207, dns_answers_9_rrname: lb.us1.gigya.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 461, dns_answers_9_rdata: 74.120.148.203, dns_grouped_A_0: 74.120.148.204, dns_grouped_A_1: 74.120.148.206, dns_grouped_A_2: 74.120.148.208, dns_grouped_A_3: 74.120.148.201, dns_grouped_A_4: 74.120.148.202, dns_grouped_A_5: 74.120.148.205, dns_grouped_A_6: 74.120.148.207, dns_grouped_A_7: 74.120.148.203, dns_grouped_CNAME_0: farm2.us1.gigya.com, dns_grouped_CNAME_1: lb.us1.gigya.com ; pcap_cnt: 5710525, event_type: dns, proto: UDP, dns_type: query, dns_id: 51490, dns_rrname: oxp.emea.mxptint.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5710553, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 51490, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: oxp.emea.mxptint.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: oxp.emea.mxptint.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 2252, dns_answers_0_rdata: 81.20.67.14, dns_grouped_A_0: 81.20.67.14 ; pcap_cnt: 6688368, event_type: dns, proto: UDP, dns_type: query, dns_id: 55888, dns_rrname: ls.hit.gemius.pl, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6688390, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 55888, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ls.hit.gemius.pl, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ls.hit.gemius.pl, dns_answers_0_rrtype: A, dns_answers_0_ttl: 51, dns_answers_0_rdata: 149.202.208.200, dns_answers_1_rrname: ls.hit.gemius.pl, dns_answers_1_rrtype: A, dns_answers_1_ttl: 51, dns_answers_1_rdata: 149.202.217.129, dns_answers_2_rrname: ls.hit.gemius.pl, dns_answers_2_rrtype: A, dns_answers_2_ttl: 51, dns_answers_2_rdata: 149.202.208.196, dns_answers_3_rrname: ls.hit.gemius.pl, dns_answers_3_rrtype: A, dns_answers_3_ttl: 51, dns_answers_3_rdata: 149.202.222.105, dns_answers_4_rrname: ls.hit.gemius.pl, dns_answers_4_rrtype: A, dns_answers_4_ttl: 51, dns_answers_4_rdata: 149.202.197.102, dns_answers_5_rrname: ls.hit.gemius.pl, dns_answers_5_rrtype: A, dns_answers_5_ttl: 51, dns_answers_5_rdata: 79.137.40.189, dns_answers_6_rrname: ls.hit.gemius.pl, dns_answers_6_rrtype: A, dns_answers_6_ttl: 51, dns_answers_6_rdata: 149.202.197.123, dns_answers_7_rrname: ls.hit.gemius.pl, dns_answers_7_rrtype: A, dns_answers_7_ttl: 51, dns_answers_7_rdata: 149.202.197.119, dns_answers_8_rrname: ls.hit.gemius.pl, dns_answers_8_rrtype: A, dns_answers_8_ttl: 51, dns_answers_8_rdata: 149.202.222.104, dns_answers_9_rrname: ls.hit.gemius.pl, dns_answers_9_rrtype: A, dns_answers_9_ttl: 51, dns_answers_9_rdata: 149.202.200.33, dns_grouped_A_0: 149.202.208.200, dns_grouped_A_1: 149.202.217.129, dns_grouped_A_2: 149.202.208.196, dns_grouped_A_3: 149.202.222.105, dns_grouped_A_4: 149.202.197.102, dns_grouped_A_5: 79.137.40.189, dns_grouped_A_6: 149.202.197.123, dns_grouped_A_7: 149.202.197.119, dns_grouped_A_8: 149.202.222.104, dns_grouped_A_9: 149.202.200.33 ; pcap_cnt: 6693480, event_type: dns, proto: UDP, dns_type: query, dns_id: 63887, dns_rrname: prod.contextweb.map.fastlylb.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 6693508, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 63887, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: prod.contextweb.map.fastlylb.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: prod.contextweb.map.fastlylb.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 151.101.116.166, dns_grouped_A_0: 151.101.116.166 ; pcap_cnt: 7669852, event_type: dns, proto: UDP, dns_type: query, dns_id: 35419, dns_rrname: e765.g.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7669853, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 35419, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e765.g.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 433, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499451169, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 9292784, event_type: dns, proto: UDP, dns_type: query, dns_id: 22682, dns_rrname: googleapis.l.google.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9292791, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 22682, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: googleapis.l.google.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: googleapis.l.google.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 291, dns_answers_0_rdata: 216.58.219.234, dns_answers_1_rrname: googleapis.l.google.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 291, dns_answers_1_rdata: 172.217.10.42, dns_answers_2_rrname: googleapis.l.google.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 291, dns_answers_2_rdata: 172.217.10.10, dns_answers_3_rrname: googleapis.l.google.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 291, dns_answers_3_rdata: 172.217.10.74, dns_answers_4_rrname: googleapis.l.google.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 291, dns_answers_4_rdata: 172.217.3.106, dns_answers_5_rrname: googleapis.l.google.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 291, dns_answers_5_rdata: 172.217.12.138, dns_answers_6_rrname: googleapis.l.google.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 291, dns_answers_6_rdata: 172.217.6.202, dns_answers_7_rrname: googleapis.l.google.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 291, dns_answers_7_rdata: 172.217.7.10, dns_answers_8_rrname: googleapis.l.google.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 291, dns_answers_8_rdata: 172.217.10.234, dns_answers_9_rrname: googleapis.l.google.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 291, dns_answers_9_rdata: 172.217.11.42, dns_answers_10_rrname: googleapis.l.google.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 291, dns_answers_10_rdata: 172.217.12.170, dns_answers_11_rrname: googleapis.l.google.com, dns_answers_11_rrtype: A, dns_answers_11_ttl: 291, dns_answers_11_rdata: 172.217.12.202, dns_answers_12_rrname: googleapis.l.google.com, dns_answers_12_rrtype: A, dns_answers_12_ttl: 291, dns_answers_12_rdata: 172.217.9.234, dns_answers_13_rrname: googleapis.l.google.com, dns_answers_13_rrtype: A, dns_answers_13_ttl: 291, dns_answers_13_rdata: 216.58.219.202, dns_grouped_A_0: 216.58.219.234, dns_grouped_A_1: 172.217.10.42, dns_grouped_A_2: 172.217.10.10, dns_grouped_A_3: 172.217.10.74, dns_grouped_A_4: 172.217.3.106, dns_grouped_A_5: 172.217.12.138, dns_grouped_A_6: 172.217.6.202, dns_grouped_A_7: 172.217.7.10, dns_grouped_A_8: 172.217.10.234, dns_grouped_A_9: 172.217.11.42, dns_grouped_A_10: 172.217.12.170, dns_grouped_A_11: 172.217.12.202, dns_grouped_A_12: 172.217.9.234, dns_grouped_A_13: 216.58.219.202 ; pcap_cnt: 9618848, event_type: dns, proto: UDP, dns_type: query, dns_id: 35199, dns_rrname: pixel.rubiconproject.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9618865, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 35199, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pixel.rubiconproject.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: pixel.rubiconproject.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 191, dns_answers_0_rdata: pixel.rubiconproject.net.akadns.net, dns_answers_1_rrname: pixel.rubiconproject.net.akadns.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 21, dns_answers_1_rdata: 8.43.72.98, dns_answers_2_rrname: pixel.rubiconproject.net.akadns.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 21, dns_answers_2_rdata: 8.43.72.97, dns_answers_3_rrname: pixel.rubiconproject.net.akadns.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 21, dns_answers_3_rdata: 8.43.72.21, dns_grouped_A_0: 8.43.72.98, dns_grouped_A_1: 8.43.72.97, dns_grouped_A_2: 8.43.72.21, dns_grouped_CNAME_0: pixel.rubiconproject.net.akadns.net ; pcap_cnt: 9779442, event_type: dns, proto: UDP, dns_type: query, dns_id: 61432, dns_rrname: us-u.openx.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9779632, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 61432, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: us-u.openx.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: us-u.openx.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 599, dns_answers_0_rdata: 173.241.242.143, dns_grouped_A_0: 173.241.242.143 ; pcap_cnt: 9807910, event_type: dns, proto: UDP, dns_type: query, dns_id: 23186, dns_rrname: e11196.g.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9807967, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 23186, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e11196.g.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e11196.g.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 20, dns_answers_0_rdata: 23.194.142.74, dns_grouped_A_0: 23.194.142.74
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.