['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 60477, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 99, flow_bytes_toclient: 184, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 162, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 119, flow_bytes_toclient: 201, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 106, flow_bytes_toclient: 159, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 120, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 228, flow_bytes_toclient: 374, flow_age: 42, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 97, flow_bytes_toclient: 160, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 104, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 190, flow_bytes_toclient: 267, flow_age: 20, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 190, flow_bytes_toclient: 266, flow_age: 125, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 90, flow_bytes_toclient: 186, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 94, flow_bytes_toclient: 158, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 235, flow_bytes_toclient: 398, flow_age: 118, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 3, flow_pkts_toclient: 3, flow_bytes_toserver: 289, flow_bytes_toclient: 491, flow_age: 31, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 95, flow_bytes_toclient: 170, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 3, flow_pkts_toclient: 3, flow_bytes_toserver: 281, flow_bytes_toclient: 412, flow_age: 172, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 3, flow_pkts_toclient: 3, flow_bytes_toserver: 271, flow_bytes_toclient: 439, flow_age: 145, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 114, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 3, flow_pkts_toclient: 3, flow_bytes_toserver: 261, flow_bytes_toclient: 590, flow_age: 116, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 99, flow_bytes_toclient: 227, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 175, flow_bytes_toclient: 219, flow_age: 106, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 88, flow_bytes_toclient: 152, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 93, flow_bytes_toclient: 154, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 164, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 190836, event_type: dns, proto: UDP, dns_type: query, dns_id: 54979, dns_rrname: dcky6u1m8u6el.cloudfront.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 190846, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 54979, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dcky6u1m8u6el.cloudfront.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: dcky6u1m8u6el.cloudfront.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 7, dns_authorities_0_soa_mname: ns-1336.awsdns-39.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 660892, event_type: dns, proto: UDP, dns_type: query, dns_id: 17855, dns_rrname: f2.shared.global.fastly.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 660893, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 17855, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: f2.shared.global.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: f2.shared.global.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 0, dns_answers_0_rdata: 151.101.2.2, dns_answers_1_rrname: f2.shared.global.fastly.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 0, dns_answers_1_rdata: 151.101.66.2, dns_answers_2_rrname: f2.shared.global.fastly.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 0, dns_answers_2_rdata: 151.101.130.2, dns_answers_3_rrname: f2.shared.global.fastly.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 0, dns_answers_3_rdata: 151.101.194.2, dns_grouped_A_0: 151.101.2.2, dns_grouped_A_1: 151.101.66.2, dns_grouped_A_2: 151.101.130.2, dns_grouped_A_3: 151.101.194.2 ; pcap_cnt: 2487705, event_type: dns, proto: UDP, dns_type: query, dns_id: 40733, dns_rrname: elb-tse-01-133143027.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 2487886, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 40733, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: elb-tse-01-133143027.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 45, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 3575862, event_type: dns, proto: UDP, dns_type: query, dns_id: 56025, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 3575894, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 56025, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp-ds.ws.symantec.com.edgekey.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: e8218.dscb1.akamaiedge.net, dns_answers_1_rrname: e8218.dscb1.akamaiedge.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 14, dns_answers_1_rdata: 23.61.187.27, dns_grouped_CNAME_0: e8218.dscb1.akamaiedge.net, dns_grouped_A_0: 23.61.187.27 ; pcap_cnt: 3972958, event_type: dns, proto: UDP, dns_type: query, dns_id: 47863, dns_rrname: www.voirfilms.org, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 3972961, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 47863, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.voirfilms.org, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: www.voirfilms.org, dns_answers_0_rrtype: A, dns_answers_0_ttl: 300, dns_answers_0_rdata: 104.27.152.12, dns_answers_1_rrname: www.voirfilms.org, dns_answers_1_rrtype: A, dns_answers_1_ttl: 300, dns_answers_1_rdata: 104.27.153.12, dns_grouped_A_0: 104.27.152.12, dns_grouped_A_1: 104.27.153.12 ; pcap_cnt: 4409124, event_type: dns, proto: UDP, dns_type: query, dns_id: 61878, dns_rrname: acds-prod-us-east-1-ext-a-1276816593.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 4409152, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 61878, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: acds-prod-us-east-1-ext-a-1276816593.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 26, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 4423389, event_type: dns, proto: UDP, dns_type: query, dns_id: 18866, dns_rrname: global.prod.fastly.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 4423442, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 18866, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: global.prod.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: global.prod.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 20, dns_answers_0_rdata: 151.101.0.249, dns_answers_1_rrname: global.prod.fastly.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 20, dns_answers_1_rdata: 151.101.64.249, dns_answers_2_rrname: global.prod.fastly.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 20, dns_answers_2_rdata: 151.101.128.249, dns_answers_3_rrname: global.prod.fastly.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 20, dns_answers_3_rdata: 151.101.192.249, dns_grouped_A_0: 151.101.0.249, dns_grouped_A_1: 151.101.64.249, dns_grouped_A_2: 151.101.128.249, dns_grouped_A_3: 151.101.192.249 ; pcap_cnt: 4575312, event_type: dns, proto: UDP, dns_type: query, dns_id: 21042, dns_rrname: 205.200.30.52.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 4575328, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 21042, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 205.200.30.52.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 205.200.30.52.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 299, dns_answers_0_rdata: ec2-52-30-200-205.eu-west-1.compute.amazonaws.com, dns_grouped_PTR_0: ec2-52-30-200-205.eu-west-1.compute.amazonaws.com ; pcap_cnt: 4700186, event_type: dns, proto: UDP, dns_type: query, dns_id: 1787, dns_rrname: nflonlocation.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4700199, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 1787, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: nflonlocation.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: nflonlocation.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 290, dns_answers_0_rdata: 146.148.81.8, dns_grouped_A_0: 146.148.81.8 ; pcap_cnt: 4989264, event_type: dns, proto: UDP, dns_type: query, dns_id: 59691, dns_rrname: prod.appnexus.map.fastly.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 4989286, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 59691, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: prod.appnexus.map.fastly.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: fastly.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 5, dns_authorities_0_soa_mname: ns1.fastly.net, dns_authorities_0_soa_rname: hostmaster.fastly.com, dns_authorities_0_soa_serial: 2017052201, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 30 ; pcap_cnt: 4996162, event_type: dns, proto: UDP, dns_type: query, dns_id: 10130, dns_rrname: s3-1-w.amazonaws.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 4996177, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 10130, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s3-1-w.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s3-1-w.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 3, dns_answers_0_rdata: 52.216.229.163, dns_grouped_A_0: 52.216.229.163 ; pcap_cnt: 5061048, event_type: dns, proto: UDP, dns_type: query, dns_id: 35297, dns_rrname: ads-bid.l.doubleclick.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 5061049, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 35297, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ads-bid.l.doubleclick.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: l.doubleclick.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 598, dns_authorities_0_soa_mname: ns2.google.com, dns_authorities_0_soa_rname: dns-admin.google.com, dns_authorities_0_soa_serial: 161179285, dns_authorities_0_soa_refresh: 900, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 5075084, event_type: dns, proto: UDP, dns_type: query, dns_id: 64875, dns_rrname: dsp.adfarm1.adition.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 5075111, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 64875, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dsp.adfarm1.adition.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dsp.adfarm1.adition.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 40, dns_answers_0_rdata: 85.114.159.93, dns_grouped_A_0: 85.114.159.93 ; pcap_cnt: 5183922, event_type: dns, proto: UDP, dns_type: query, dns_id: 57530, dns_rrname: loadus.exelator.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5183971, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 57530, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: loadus.exelator.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: loadus.exelator.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: loadus.tm.ssl.exelator.com, dns_answers_1_rrname: loadus.tm.ssl.exelator.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 0, dns_answers_1_rdata: us-east.load.exelator.com, dns_answers_2_rrname: us-east.load.exelator.com, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 0, dns_answers_2_rdata: load.njexp.exelator.com, dns_answers_3_rrname: load.njexp.exelator.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 326, dns_answers_3_rdata: 63.251.98.12, dns_grouped_CNAME_0: loadus.tm.ssl.exelator.com, dns_grouped_CNAME_1: us-east.load.exelator.com, dns_grouped_CNAME_2: load.njexp.exelator.com, dns_grouped_A_0: 63.251.98.12 ; pcap_cnt: 5294673, event_type: dns, proto: UDP, dns_type: query, dns_id: 14839, dns_rrname: f.global-ssl.fastly.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5294674, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 14839, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: f.global-ssl.fastly.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: f.global-ssl.fastly.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 0, dns_answers_0_rdata: 151.101.0.64, dns_answers_1_rrname: f.global-ssl.fastly.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 0, dns_answers_1_rdata: 151.101.64.64, dns_answers_2_rrname: f.global-ssl.fastly.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 0, dns_answers_2_rdata: 151.101.128.64, dns_answers_3_rrname: f.global-ssl.fastly.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 0, dns_answers_3_rdata: 151.101.192.64, dns_grouped_A_0: 151.101.0.64, dns_grouped_A_1: 151.101.64.64, dns_grouped_A_2: 151.101.128.64, dns_grouped_A_3: 151.101.192.64 ; pcap_cnt: 5497437, event_type: dns, proto: UDP, dns_type: query, dns_id: 3038, dns_rrname: elb-aws-va-adnetik-1093829825.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 5497476, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 3038, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: elb-aws-va-adnetik-1093829825.us-east-1.elb.amazonaws.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 54, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 5508961, event_type: dns, proto: UDP, dns_type: query, dns_id: 34366, dns_rrname: ct-errs.cartrawler.com.herokudns.com, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 5508970, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 34366, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ct-errs.cartrawler.com.herokudns.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: herokudns.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 59, dns_authorities_0_soa_mname: ns-955.awsdns-55.net, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 5633199, event_type: dns, proto: UDP, dns_type: query, dns_id: 31863, dns_rrname: anzeigen-buchen.sueddeutsche.de, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 5633209, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 31863, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: anzeigen-buchen.sueddeutsche.de, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: sueddeutsche.de, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 50, dns_authorities_0_soa_mname: ns1.boreus.de, dns_authorities_0_soa_rname: hostmaster.boreus.de, dns_authorities_0_soa_serial: 2017070702, dns_authorities_0_soa_refresh: 86400, dns_authorities_0_soa_retry: 10800, dns_authorities_0_soa_expire: 3600000, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 5633683, event_type: dns, proto: UDP, dns_type: query, dns_id: 37219, dns_rrname: ping.chartbeat.net, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 5633687, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37219, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ping.chartbeat.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ping.chartbeat.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 50, dns_answers_0_rdata: 54.243.45.82, dns_answers_1_rrname: ping.chartbeat.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 50, dns_answers_1_rdata: 107.20.238.210, dns_answers_2_rrname: ping.chartbeat.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 50, dns_answers_2_rdata: 107.20.191.152, dns_answers_3_rrname: ping.chartbeat.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 50, dns_answers_3_rdata: 107.21.209.133, dns_answers_4_rrname: ping.chartbeat.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 50, dns_answers_4_rdata: 54.243.118.244, dns_answers_5_rrname: ping.chartbeat.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 50, dns_answers_5_rdata: 54.243.160.36, dns_answers_6_rrname: ping.chartbeat.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 50, dns_answers_6_rdata: 54.243.249.85, dns_answers_7_rrname: ping.chartbeat.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 50, dns_answers_7_rdata: 107.20.187.124, dns_grouped_A_0: 54.243.45.82, dns_grouped_A_1: 107.20.238.210, dns_grouped_A_2: 107.20.191.152, dns_grouped_A_3: 107.21.209.133, dns_grouped_A_4: 54.243.118.244, dns_grouped_A_5: 54.243.160.36, dns_grouped_A_6: 54.243.249.85, dns_grouped_A_7: 107.20.187.124 ; pcap_cnt: 5640340, event_type: dns, proto: UDP, dns_type: query, dns_id: 19282, dns_rrname: star-mini.c10r.facebook.com, dns_rrtype: A, dns_tx_id: 4 ; pcap_cnt: 5640498, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 19282, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: star-mini.c10r.facebook.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: star-mini.c10r.facebook.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 15, dns_answers_0_rdata: 157.240.2.35, dns_grouped_A_0: 157.240.2.35 ; pcap_cnt: 6088909, event_type: dns, proto: UDP, dns_type: query, dns_id: 43977, dns_rrname: pixel-origin.mathtag.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 6088994, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 43977, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pixel-origin.mathtag.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: mathtag.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 40, dns_authorities_0_soa_mname: ns1.p06.dynect.net, dns_authorities_0_soa_rname: technology.mediamath.com, dns_authorities_0_soa_serial: 422669, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 600, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 6812448, event_type: dns, proto: UDP, dns_type: query, dns_id: 47041, dns_rrname: ade.googlesyndication.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6812452, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 47041, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ade.googlesyndication.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ade.googlesyndication.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 299, dns_answers_0_rdata: pagead.l.doubleclick.net, dns_answers_1_rrname: pagead.l.doubleclick.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 158, dns_answers_1_rdata: 172.217.10.66, dns_grouped_A_0: 172.217.10.66, dns_grouped_CNAME_0: pagead.l.doubleclick.net ; pcap_cnt: 6829267, event_type: dns, proto: UDP, dns_type: query, dns_id: 33662, dns_rrname: s3-1-w.amazonaws.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 6829273, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 33662, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s3-1-w.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s3-1-w.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 54.231.114.42, dns_grouped_A_0: 54.231.114.42 ; pcap_cnt: 6843271, event_type: dns, proto: UDP, dns_type: query, dns_id: 32931, dns_rrname: e11294.g.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 4 ; pcap_cnt: 6843290, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 32931, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e11294.g.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 157, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499448286, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 7288449, event_type: dns, proto: UDP, dns_type: query, dns_id: 21450, dns_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7288471, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 21450, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: d2x3bkdslnxkuj.cloudfront.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 9, dns_authorities_0_soa_mname: ns-63.awsdns-07.com, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 7303785, event_type: dns, proto: UDP, dns_type: query, dns_id: 59401, dns_rrname: pix.impdesk.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 7303811, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 59401, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pix.impdesk.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: pix.impdesk.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 157, dns_answers_0_rdata: 107.178.255.114, dns_grouped_A_0: 107.178.255.114 ; pcap_cnt: 7354682, event_type: dns, proto: UDP, dns_type: query, dns_id: 29004, dns_rrname: www.abopool.de, dns_rrtype: AAAA, dns_tx_id: 4 ; pcap_cnt: 7354715, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 29004, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: www.abopool.de, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: abopool.de, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 103, dns_authorities_0_soa_mname: dns.typo3server.com, dns_authorities_0_soa_rname: support.mittwald.de, dns_authorities_0_soa_serial: 1706260001, dns_authorities_0_soa_refresh: 28800, dns_authorities_0_soa_retry: 7200, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 3600 ; pcap_cnt: 7444344, event_type: dns, proto: UDP, dns_type: query, dns_id: 14637, dns_rrname: e5178.dsce12.akamaiedge.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7444381, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 14637, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e5178.dsce12.akamaiedge.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: e5178.dsce12.akamaiedge.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 19, dns_answers_0_rdata: 104.97.91.19, dns_grouped_A_0: 104.97.91.19 ; pcap_cnt: 7653735, event_type: dns, proto: UDP, dns_type: query, dns_id: 57718, dns_rrname: static.criteo.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7653741, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 57718, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: static.criteo.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: static.criteo.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 212, dns_answers_0_rdata: 74.119.118.74, dns_grouped_A_0: 74.119.118.74 ; pcap_cnt: 7672628, event_type: dns, proto: UDP, dns_type: query, dns_id: 12290, dns_rrname: s.pinimg.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 7673347, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 12290, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s.pinimg.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s.pinimg.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 339, dns_answers_0_rdata: s.pinimg.com.gslb.pinterest.com, dns_answers_1_rrname: s.pinimg.com.gslb.pinterest.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 76, dns_answers_1_rdata: 2-01-37d2-0006.cdx.cedexis.net, dns_answers_2_rrname: 2-01-37d2-0006.cdx.cedexis.net, dns_answers_2_rrtype: CNAME, dns_answers_2_ttl: 0, dns_answers_2_rdata: s.pinimg.com.edgekey.net, dns_answers_3_rrname: s.pinimg.com.edgekey.net, dns_answers_3_rrtype: CNAME, dns_answers_3_ttl: 150, dns_answers_3_rdata: e4456.dsce2.akamaiedge.net, dns_answers_4_rrname: e4456.dsce2.akamaiedge.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 8, dns_answers_4_rdata: 104.79.134.103, dns_grouped_A_0: 104.79.134.103, dns_grouped_CNAME_0: s.pinimg.com.gslb.pinterest.com, dns_grouped_CNAME_1: 2-01-37d2-0006.cdx.cedexis.net, dns_grouped_CNAME_2: s.pinimg.com.edgekey.net, dns_grouped_CNAME_3: e4456.dsce2.akamaiedge.net ; pcap_cnt: 7705432, event_type: dns, proto: UDP, dns_type: query, dns_id: 16329, dns_rrname: logx.optimizely.com, dns_rrtype: AAAA, dns_tx_id: 4 ; pcap_cnt: 7705519, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16329, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: logx.optimizely.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: logx.optimizely.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 536, dns_answers_0_rdata: p13nlog-1106815646.us-east-1.elb.amazonaws.com, dns_grouped_CNAME_0: p13nlog-1106815646.us-east-1.elb.amazonaws.com, dns_authorities_0_rrname: us-east-1.elb.amazonaws.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 2, dns_authorities_0_soa_mname: ns-1119.awsdns-11.org, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 7758482, event_type: dns, proto: UDP, dns_type: query, dns_id: 43210, dns_rrname: d5nxst8fruw4z.cloudfront.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7758500, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 43210, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: d5nxst8fruw4z.cloudfront.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: d5nxst8fruw4z.cloudfront.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 7, dns_answers_0_rdata: 52.84.40.78, dns_answers_1_rrname: d5nxst8fruw4z.cloudfront.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 7, dns_answers_1_rdata: 52.84.40.166, dns_answers_2_rrname: d5nxst8fruw4z.cloudfront.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 7, dns_answers_2_rdata: 52.84.40.212, dns_answers_3_rrname: d5nxst8fruw4z.cloudfront.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 7, dns_answers_3_rdata: 52.84.40.16, dns_answers_4_rrname: d5nxst8fruw4z.cloudfront.net, dns_answers_4_rrtype: A, dns_answers_4_ttl: 7, dns_answers_4_rdata: 52.84.40.192, dns_answers_5_rrname: d5nxst8fruw4z.cloudfront.net, dns_answers_5_rrtype: A, dns_answers_5_ttl: 7, dns_answers_5_rdata: 52.84.40.131, dns_answers_6_rrname: d5nxst8fruw4z.cloudfront.net, dns_answers_6_rrtype: A, dns_answers_6_ttl: 7, dns_answers_6_rdata: 52.84.40.155, dns_answers_7_rrname: d5nxst8fruw4z.cloudfront.net, dns_answers_7_rrtype: A, dns_answers_7_ttl: 7, dns_answers_7_rdata: 52.84.40.55, dns_grouped_A_0: 52.84.40.78, dns_grouped_A_1: 52.84.40.166, dns_grouped_A_2: 52.84.40.212, dns_grouped_A_3: 52.84.40.16, dns_grouped_A_4: 52.84.40.192, dns_grouped_A_5: 52.84.40.131, dns_grouped_A_6: 52.84.40.155, dns_grouped_A_7: 52.84.40.55 ; pcap_cnt: 7916517, event_type: dns, proto: UDP, dns_type: query, dns_id: 12807, dns_rrname: ocsp.comodoca.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7916544, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 12807, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.comodoca.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp.comodoca.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 190, dns_answers_0_rdata: 2a02:1788:02fd:0000:0000:0000:b2ff:5301, dns_grouped_AAAA_0: 2a02:1788:02fd:0000:0000:0000:b2ff:5301 ; pcap_cnt: 7926818, event_type: dns, proto: UDP, dns_type: query, dns_id: 17582, dns_rrname: dns.msftncsi.com, dns_rrtype: A, dns_tx_id: 2 ; pcap_cnt: 7926819, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 17582, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: dns.msftncsi.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: dns.msftncsi.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 14, dns_answers_0_rdata: 131.107.255.255, dns_grouped_A_0: 131.107.255.255 ; pcap_cnt: 7967537, event_type: dns, proto: UDP, dns_type: query, dns_id: 53116, dns_rrname: img0.dditscdn.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 7967648, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 53116, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: img0.dditscdn.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: dditscdn.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 167, dns_authorities_0_soa_mname: ns1.dditservices.com, dns_authorities_0_soa_rname: hostmaster.dditservices.com, dns_authorities_0_soa_serial: 2017062101, dns_authorities_0_soa_refresh: 28800, dns_authorities_0_soa_retry: 7200, dns_authorities_0_soa_expire: 604800, dns_authorities_0_soa_minimum: 300 ; pcap_cnt: 9751667, event_type: dns, proto: UDP, dns_type: query, dns_id: 20755, dns_rrname: e9040.g.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9751756, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 20755, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e9040.g.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 999, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499455887, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 9779219, event_type: dns, proto: UDP, dns_type: query, dns_id: 62000, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9779243, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 62000, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp.godaddy.com.akadns.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: akadns.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 179, dns_authorities_0_soa_mname: internal.akadns.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499456121, dns_authorities_0_soa_refresh: 90000, dns_authorities_0_soa_retry: 90000, dns_authorities_0_soa_expire: 90000, dns_authorities_0_soa_minimum: 180
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.