['flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.14, src_port: 57395, dest_ip: 192.168.10.3, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 164, flow_bytes_toclient: 804, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 250, flow_bytes_toclient: 506, flow_age: 0, flow_state: established, flow_reason: timeout ; pcap_cnt: 4145446, event_type: dns, proto: UDP, dns_type: query, dns_id: 31074, dns_rrname: userdblb.tubemogul.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 4145447, event_type: dns, proto: UDP, dns_type: query, dns_id: 31074, dns_rrname: userdblb.tubemogul.com, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 4145451, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 31074, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: userdblb.tubemogul.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: userdblb.tubemogul.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 284, dns_answers_0_rdata: 107.21.249.50, dns_answers_1_rrname: userdblb.tubemogul.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 284, dns_answers_1_rdata: 107.21.249.217, dns_answers_2_rrname: userdblb.tubemogul.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 284, dns_answers_2_rdata: 107.21.249.100, dns_answers_3_rrname: userdblb.tubemogul.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 284, dns_answers_3_rdata: 107.21.250.221, dns_answers_4_rrname: userdblb.tubemogul.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 284, dns_answers_4_rdata: 184.73.199.125, dns_answers_5_rrname: userdblb.tubemogul.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 284, dns_answers_5_rdata: 184.73.198.200, dns_answers_6_rrname: userdblb.tubemogul.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 284, dns_answers_6_rdata: 184.73.198.237, dns_answers_7_rrname: userdblb.tubemogul.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 284, dns_answers_7_rdata: 184.73.199.81, dns_answers_8_rrname: userdblb.tubemogul.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 284, dns_answers_8_rdata: 184.73.198.136, dns_answers_9_rrname: userdblb.tubemogul.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 284, dns_answers_9_rdata: 184.73.198.130, dns_answers_10_rrname: userdblb.tubemogul.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 284, dns_answers_10_rdata: 184.73.198.9, dns_answers_11_rrname: userdblb.tubemogul.com, dns_answers_11_rrtype: A, dns_answers_11_ttl: 284, dns_answers_11_rdata: 184.73.196.217, dns_answers_12_rrname: userdblb.tubemogul.com, dns_answers_12_rrtype: A, dns_answers_12_ttl: 284, dns_answers_12_rdata: 54.225.202.195, dns_answers_13_rrname: userdblb.tubemogul.com, dns_answers_13_rrtype: A, dns_answers_13_ttl: 284, dns_answers_13_rdata: 54.225.147.109, dns_answers_14_rrname: userdblb.tubemogul.com, dns_answers_14_rrtype: A, dns_answers_14_ttl: 284, dns_answers_14_rdata: 54.225.255.135, dns_answers_15_rrname: userdblb.tubemogul.com, dns_answers_15_rrtype: A, dns_answers_15_ttl: 284, dns_answers_15_rdata: 54.225.186.185, dns_answers_16_rrname: userdblb.tubemogul.com, dns_answers_16_rrtype: A, dns_answers_16_ttl: 284, dns_answers_16_rdata: 107.21.249.135, dns_answers_17_rrname: userdblb.tubemogul.com, dns_answers_17_rrtype: A, dns_answers_17_ttl: 284, dns_answers_17_rdata: 107.21.250.154, dns_answers_18_rrname: userdblb.tubemogul.com, dns_answers_18_rrtype: A, dns_answers_18_ttl: 284, dns_answers_18_rdata: 107.21.249.145, dns_answers_19_rrname: userdblb.tubemogul.com, dns_answers_19_rrtype: A, dns_answers_19_ttl: 284, dns_answers_19_rdata: 107.21.248.242, dns_grouped_A_0: 107.21.249.50, dns_grouped_A_1: 107.21.249.217, dns_grouped_A_2: 107.21.249.100, dns_grouped_A_3: 107.21.250.221, dns_grouped_A_4: 184.73.199.125, dns_grouped_A_5: 184.73.198.200, dns_grouped_A_6: 184.73.198.237, dns_grouped_A_7: 184.73.199.81, dns_grouped_A_8: 184.73.198.136, dns_grouped_A_9: 184.73.198.130, dns_grouped_A_10: 184.73.198.9, dns_grouped_A_11: 184.73.196.217, dns_grouped_A_12: 54.225.202.195, dns_grouped_A_13: 54.225.147.109, dns_grouped_A_14: 54.225.255.135, dns_grouped_A_15: 54.225.186.185, dns_grouped_A_16: 107.21.249.135, dns_grouped_A_17: 107.21.250.154, dns_grouped_A_18: 107.21.249.145, dns_grouped_A_19: 107.21.248.242 ; pcap_cnt: 4145452, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 31074, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: userdblb.tubemogul.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: userdblb.tubemogul.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 284, dns_answers_0_rdata: 107.21.249.50, dns_answers_1_rrname: userdblb.tubemogul.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 284, dns_answers_1_rdata: 107.21.249.217, dns_answers_2_rrname: userdblb.tubemogul.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 284, dns_answers_2_rdata: 107.21.249.100, dns_answers_3_rrname: userdblb.tubemogul.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 284, dns_answers_3_rdata: 107.21.250.221, dns_answers_4_rrname: userdblb.tubemogul.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 284, dns_answers_4_rdata: 184.73.199.125, dns_answers_5_rrname: userdblb.tubemogul.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 284, dns_answers_5_rdata: 184.73.198.200, dns_answers_6_rrname: userdblb.tubemogul.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 284, dns_answers_6_rdata: 184.73.198.237, dns_answers_7_rrname: userdblb.tubemogul.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 284, dns_answers_7_rdata: 184.73.199.81, dns_answers_8_rrname: userdblb.tubemogul.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 284, dns_answers_8_rdata: 184.73.198.136, dns_answers_9_rrname: userdblb.tubemogul.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 284, dns_answers_9_rdata: 184.73.198.130, dns_answers_10_rrname: userdblb.tubemogul.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 284, dns_answers_10_rdata: 184.73.198.9, dns_answers_11_rrname: userdblb.tubemogul.com, dns_answers_11_rrtype: A, dns_answers_11_ttl: 284, dns_answers_11_rdata: 184.73.196.217, dns_answers_12_rrname: userdblb.tubemogul.com, dns_answers_12_rrtype: A, dns_answers_12_ttl: 284, dns_answers_12_rdata: 54.225.202.195, dns_answers_13_rrname: userdblb.tubemogul.com, dns_answers_13_rrtype: A, dns_answers_13_ttl: 284, dns_answers_13_rdata: 54.225.147.109, dns_answers_14_rrname: userdblb.tubemogul.com, dns_answers_14_rrtype: A, dns_answers_14_ttl: 284, dns_answers_14_rdata: 54.225.255.135, dns_answers_15_rrname: userdblb.tubemogul.com, dns_answers_15_rrtype: A, dns_answers_15_ttl: 284, dns_answers_15_rdata: 54.225.186.185, dns_answers_16_rrname: userdblb.tubemogul.com, dns_answers_16_rrtype: A, dns_answers_16_ttl: 284, dns_answers_16_rdata: 107.21.249.135, dns_answers_17_rrname: userdblb.tubemogul.com, dns_answers_17_rrtype: A, dns_answers_17_ttl: 284, dns_answers_17_rdata: 107.21.250.154, dns_answers_18_rrname: userdblb.tubemogul.com, dns_answers_18_rrtype: A, dns_answers_18_ttl: 284, dns_answers_18_rdata: 107.21.249.145, dns_answers_19_rrname: userdblb.tubemogul.com, dns_answers_19_rrtype: A, dns_answers_19_ttl: 284, dns_answers_19_rdata: 107.21.248.242, dns_grouped_A_0: 107.21.249.50, dns_grouped_A_1: 107.21.249.217, dns_grouped_A_2: 107.21.249.100, dns_grouped_A_3: 107.21.250.221, dns_grouped_A_4: 184.73.199.125, dns_grouped_A_5: 184.73.198.200, dns_grouped_A_6: 184.73.198.237, dns_grouped_A_7: 184.73.199.81, dns_grouped_A_8: 184.73.198.136, dns_grouped_A_9: 184.73.198.130, dns_grouped_A_10: 184.73.198.9, dns_grouped_A_11: 184.73.196.217, dns_grouped_A_12: 54.225.202.195, dns_grouped_A_13: 54.225.147.109, dns_grouped_A_14: 54.225.255.135, dns_grouped_A_15: 54.225.186.185, dns_grouped_A_16: 107.21.249.135, dns_grouped_A_17: 107.21.250.154, dns_grouped_A_18: 107.21.249.145, dns_grouped_A_19: 107.21.248.242 ; pcap_cnt: 5520967, event_type: dns, proto: UDP, dns_type: query, dns_id: 23929, dns_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5520968, event_type: dns, proto: UDP, dns_type: query, dns_id: 23929, dns_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_tx_id: 1 ; pcap_cnt: 5520969, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 23929, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 35, dns_answers_0_rdata: 52.5.32.169, dns_answers_1_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 35, dns_answers_1_rdata: 34.206.14.85, dns_answers_2_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 35, dns_answers_2_rdata: 54.88.227.100, dns_answers_3_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 35, dns_answers_3_rdata: 54.173.192.55, dns_answers_4_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 35, dns_answers_4_rdata: 54.210.114.48, dns_answers_5_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 35, dns_answers_5_rdata: 34.197.207.184, dns_answers_6_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 35, dns_answers_6_rdata: 52.200.20.142, dns_answers_7_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 35, dns_answers_7_rdata: 54.236.94.183, dns_grouped_A_0: 52.5.32.169, dns_grouped_A_1: 34.206.14.85, dns_grouped_A_2: 54.88.227.100, dns_grouped_A_3: 54.173.192.55, dns_grouped_A_4: 54.210.114.48, dns_grouped_A_5: 34.197.207.184, dns_grouped_A_6: 52.200.20.142, dns_grouped_A_7: 54.236.94.183 ; pcap_cnt: 5520970, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 23929, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 35, dns_answers_0_rdata: 52.5.32.169, dns_answers_1_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 35, dns_answers_1_rdata: 34.206.14.85, dns_answers_2_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 35, dns_answers_2_rdata: 54.88.227.100, dns_answers_3_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 35, dns_answers_3_rdata: 54.173.192.55, dns_answers_4_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 35, dns_answers_4_rdata: 54.210.114.48, dns_answers_5_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 35, dns_answers_5_rdata: 34.197.207.184, dns_answers_6_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 35, dns_answers_6_rdata: 52.200.20.142, dns_answers_7_rrname: privacycollector-production-457481513.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 35, dns_answers_7_rdata: 54.236.94.183, dns_grouped_A_0: 52.5.32.169, dns_grouped_A_1: 34.206.14.85, dns_grouped_A_2: 54.88.227.100, dns_grouped_A_3: 54.173.192.55, dns_grouped_A_4: 54.210.114.48, dns_grouped_A_5: 34.197.207.184, dns_grouped_A_6: 52.200.20.142, dns_grouped_A_7: 54.236.94.183
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.