['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 60176, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 179, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 86, flow_bytes_toclient: 142, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 132, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 143, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 108, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 106, flow_bytes_toclient: 234, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 110, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 108, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 122, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 99, flow_bytes_toclient: 169, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 156, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 181, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 152, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 134, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 105, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 85, flow_bytes_toclient: 147, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 207, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 106, flow_bytes_toclient: 199, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 175, flow_bytes_toclient: 325, flow_age: 122, flow_state: established, flow_reason: timeout ; pcap_cnt: 4600253, event_type: dns, proto: UDP, dns_type: query, dns_id: 34487, dns_rrname: olympia.prod.mozaws.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 4600254, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 34487, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: olympia.prod.mozaws.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: prod.mozaws.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 93, dns_authorities_0_soa_mname: ns-1260.awsdns-29.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 5865031, event_type: dns, proto: UDP, dns_type: query, dns_id: 4714, dns_rrname: pre.glotgrx.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 5865038, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 4714, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pre.glotgrx.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: pre.glotgrx.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 106, dns_answers_0_rdata: 2400:cb00:2048:0001:0000:0000:6810:4036, dns_answers_1_rrname: pre.glotgrx.com, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 106, dns_answers_1_rdata: 2400:cb00:2048:0001:0000:0000:6810:3f36, dns_grouped_AAAA_0: 2400:cb00:2048:0001:0000:0000:6810:4036, dns_grouped_AAAA_1: 2400:cb00:2048:0001:0000:0000:6810:3f36 ; pcap_cnt: 10228140, event_type: dns, proto: UDP, dns_type: query, dns_id: 34229, dns_rrname: td.crwdcntrl.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10228147, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 34229, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: td.crwdcntrl.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: td.crwdcntrl.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 76, dns_answers_0_rdata: bcpad1.iad.loc.crwdcntrl.net, dns_answers_1_rrname: bcpad1.iad.loc.crwdcntrl.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 127, dns_answers_1_rdata: 199.233.57.16, dns_grouped_CNAME_0: bcpad1.iad.loc.crwdcntrl.net, dns_grouped_A_0: 199.233.57.16 ; pcap_cnt: 10262852, event_type: dns, proto: UDP, dns_type: query, dns_id: 6320, dns_rrname: fonts.googleapis.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10262919, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 6320, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: fonts.googleapis.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: fonts.googleapis.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 3599, dns_answers_0_rdata: googleadapis.l.google.com, dns_answers_1_rrname: googleadapis.l.google.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 299, dns_answers_1_rdata: 172.217.1.170, dns_grouped_CNAME_0: googleadapis.l.google.com, dns_grouped_A_0: 172.217.1.170 ; pcap_cnt: 10276086, event_type: dns, proto: UDP, dns_type: query, dns_id: 12273, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10276367, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 12273, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: scontent.xx.fbcdn.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: scontent.xx.fbcdn.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 21, dns_answers_0_rdata: 157.240.2.25, dns_grouped_A_0: 157.240.2.25 ; pcap_cnt: 10402129, event_type: dns, proto: UDP, dns_type: query, dns_id: 13777, dns_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10402130, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 13777, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 54.210.232.234, dns_answers_1_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 34.226.151.189, dns_answers_2_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 52.4.162.164, dns_answers_3_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 34.226.59.18, dns_answers_4_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 52.22.67.152, dns_answers_5_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 52.200.111.50, dns_answers_6_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 34.196.96.128, dns_answers_7_rrname: srv-2017-07-05-14.pixel.parsely.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 34.199.71.137, dns_grouped_A_0: 54.210.232.234, dns_grouped_A_1: 34.226.151.189, dns_grouped_A_2: 52.4.162.164, dns_grouped_A_3: 34.226.59.18, dns_grouped_A_4: 52.22.67.152, dns_grouped_A_5: 52.200.111.50, dns_grouped_A_6: 34.196.96.128, dns_grouped_A_7: 34.199.71.137 ; pcap_cnt: 10524760, event_type: dns, proto: UDP, dns_type: query, dns_id: 18339, dns_rrname: ad2.adfarm1.adition.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10524987, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 18339, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ad2.adfarm1.adition.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ad2.adfarm1.adition.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 60, dns_answers_0_rdata: 217.79.188.21, dns_grouped_A_0: 217.79.188.21 ; pcap_cnt: 10719882, event_type: dns, proto: UDP, dns_type: query, dns_id: 36571, dns_rrname: wedding.rakuten.co.jp, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10719914, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 36571, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: wedding.rakuten.co.jp, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: wedding.rakuten.co.jp, dns_answers_0_rrtype: A, dns_answers_0_ttl: 300, dns_answers_0_rdata: 133.237.60.131, dns_grouped_A_0: 133.237.60.131 ; pcap_cnt: 10796886, event_type: dns, proto: UDP, dns_type: query, dns_id: 28099, dns_rrname: s3.amazonaws.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10796927, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28099, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s3.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s3.amazonaws.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1263, dns_answers_0_rdata: s3-1.amazonaws.com, dns_answers_1_rrname: s3-1.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 52.216.85.149, dns_grouped_A_0: 52.216.85.149, dns_grouped_CNAME_0: s3-1.amazonaws.com ; pcap_cnt: 10893015, event_type: dns, proto: UDP, dns_type: query, dns_id: 4404, dns_rrname: cbslocal.files.wordpress.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 10893251, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 4404, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cbslocal.files.wordpress.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: cbslocal.files.wordpress.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 300, dns_answers_0_rdata: s2.files.wordpress.com, dns_grouped_CNAME_0: s2.files.wordpress.com, dns_authorities_0_rrname: files.wordpress.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 52, dns_authorities_0_soa_mname: mdns1.wordpress.com, dns_authorities_0_soa_rname: hostmaster.wordpress.com, dns_authorities_0_soa_serial: 157, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 11263350, event_type: dns, proto: UDP, dns_type: query, dns_id: 23324, dns_rrname: ib.anycast.adnxs.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11263433, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 23324, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ib.anycast.adnxs.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: adnxs.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1, dns_authorities_0_soa_mname: ns1.gslb.com, dns_authorities_0_soa_rname: support.appnexus.net, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 86400, dns_authorities_0_soa_retry: 30, dns_authorities_0_soa_expire: 86400, dns_authorities_0_soa_minimum: 30 ; pcap_cnt: 11576513, event_type: dns, proto: UDP, dns_type: query, dns_id: 12045, dns_rrname: px.moatads.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11576532, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 12045, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: px.moatads.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: px.moatads.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: wildcard.moatads.com.edgekey.net, dns_answers_1_rrname: wildcard.moatads.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 56, dns_answers_1_rdata: e11100.g.akamaiedge.net, dns_answers_2_rrname: e11100.g.akamaiedge.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 23.194.142.69, dns_grouped_CNAME_0: wildcard.moatads.com.edgekey.net, dns_grouped_CNAME_1: e11100.g.akamaiedge.net, dns_grouped_A_0: 23.194.142.69 ; pcap_cnt: 11914997, event_type: dns, proto: UDP, dns_type: query, dns_id: 46741, dns_rrname: tmk.smartadserver.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11915000, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 46741, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: tmk.smartadserver.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: smartadserver.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 449, dns_authorities_0_soa_mname: ns1.mailclub.fr, dns_authorities_0_soa_rname: domaines.mailclub.fr, dns_authorities_0_soa_serial: 2013124722, dns_authorities_0_soa_refresh: 28800, dns_authorities_0_soa_retry: 14400, dns_authorities_0_soa_expire: 3600000, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 12109534, event_type: dns, proto: UDP, dns_type: query, dns_id: 55356, dns_rrname: ad.turn.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 12109569, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 55356, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ad.turn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ad.turn.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 172, dns_answers_0_rdata: ad.turn.com.akadns.net, dns_answers_1_rrname: ad.turn.com.akadns.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 144, dns_answers_1_rdata: 50.116.194.21, dns_grouped_CNAME_0: ad.turn.com.akadns.net, dns_grouped_A_0: 50.116.194.21 ; pcap_cnt: 12169165, event_type: dns, proto: UDP, dns_type: query, dns_id: 59012, dns_rrname: cdn.optimizely.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 12169189, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 59012, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: cdn.optimizely.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: cdn.optimizely.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 19, dns_answers_0_rdata: 104.97.73.5, dns_grouped_A_0: 104.97.73.5 ; pcap_cnt: 12317101, event_type: dns, proto: UDP, dns_type: query, dns_id: 29521, dns_rrname: us-u.openx.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 12317104, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 29521, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: us-u.openx.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: openx.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 1424, dns_authorities_0_soa_mname: dns1.p04.nsone.net, dns_authorities_0_soa_rname: hostmaster.nsone.net, dns_authorities_0_soa_serial: 1498865252, dns_authorities_0_soa_refresh: 10800, dns_authorities_0_soa_retry: 3600, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 3600 ; pcap_cnt: 13268162, event_type: dns, proto: UDP, dns_type: query, dns_id: 11888, dns_rrname: pixel.rubiconproject.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 13268398, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 11888, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pixel.rubiconproject.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: pixel.rubiconproject.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 375, dns_answers_0_rdata: pixel.rubiconproject.net.akadns.net, dns_grouped_CNAME_0: pixel.rubiconproject.net.akadns.net, dns_authorities_0_rrname: akadns.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 179, dns_authorities_0_soa_mname: internal.akadns.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499282134, dns_authorities_0_soa_refresh: 90000, dns_authorities_0_soa_retry: 90000, dns_authorities_0_soa_expire: 90000, dns_authorities_0_soa_minimum: 180 ; pcap_cnt: 13543706, event_type: dns, proto: UDP, dns_type: query, dns_id: 912, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 13543720, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 912, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 8, dns_answers_0_rdata: e8218.dscb1.akamaiedge.net, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 1, dns_answers_1_rdata: 2600:1408:e000:019a:0000:0000:0000:201a, dns_answers_2_rrname: e8218.dscb1.akamaiedge.net, dns_answers_2_rrtype: AAAA, dns_answers_2_ttl: 1, dns_answers_2_rdata: 2600:1408:e000:0182:0000:0000:0000:201a, dns_grouped_CNAME_0: e8218.dscb1.akamaiedge.net, dns_grouped_AAAA_0: 2600:1408:e000:019a:0000:0000:0000:201a, dns_grouped_AAAA_1: 2600:1408:e000:0182:0000:0000:0000:201a ; pcap_cnt: 13634823, event_type: dns, proto: UDP, dns_type: query, dns_id: 59714, dns_rrname: i.ebayimg.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 13634908, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 59714, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: i.ebayimg.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: i.ebayimg.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 2834, dns_answers_0_rdata: slot5842.ebay.com.edgekey.net, dns_answers_1_rrname: slot5842.ebay.com.edgekey.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 21394, dns_answers_1_rdata: e5842.g.akamaiedge.net, dns_grouped_CNAME_0: slot5842.ebay.com.edgekey.net, dns_grouped_CNAME_1: e5842.g.akamaiedge.net, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 19, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499282856, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 13659972, event_type: dns, proto: UDP, dns_type: query, dns_id: 34309, dns_rrname: clients.l.google.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 13660010, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 34309, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: clients.l.google.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: clients.l.google.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 299, dns_answers_0_rdata: 172.217.10.110, dns_grouped_A_0: 172.217.10.110
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.