['flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'flow', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns', 'dns']
src_ip: 192.168.10.3, src_port: 60627, dest_ip: 192.168.10.1, dest_port: 53, event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 89, flow_bytes_toclient: 217, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 398, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 203, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 100, flow_bytes_toclient: 181, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 172, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 154, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 119, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 138, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 82, flow_bytes_toclient: 98, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 137, flow_bytes_toclient: 265, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 243, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 107, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 87, flow_bytes_toclient: 203, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 103, flow_bytes_toclient: 119, flow_age: 1, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 98, flow_bytes_toclient: 114, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 91, flow_bytes_toclient: 150, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 211, flow_bytes_toclient: 283, flow_age: 119, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 190, flow_bytes_toclient: 291, flow_age: 36, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 101, flow_bytes_toclient: 359, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 100, flow_bytes_toclient: 194, flow_age: 1, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 203, flow_bytes_toclient: 355, flow_age: 14, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 92, flow_bytes_toclient: 108, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 83, flow_bytes_toclient: 186, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 1, flow_pkts_toclient: 1, flow_bytes_toserver: 105, flow_bytes_toclient: 165, flow_age: 0, flow_state: established, flow_reason: timeout ; event_type: flow, proto: UDP, app_proto: dns, flow_pkts_toserver: 2, flow_pkts_toclient: 2, flow_bytes_toserver: 180, flow_bytes_toclient: 332, flow_age: 151, flow_state: established, flow_reason: shutdown ; pcap_cnt: 2231095, event_type: dns, proto: UDP, dns_type: query, dns_id: 63758, dns_rrname: adserve.atedra.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 2231236, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 63758, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: adserve.atedra.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: adserve.atedra.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 270, dns_answers_0_rdata: adserve-atedra-1370652231.us-east-1.elb.amazonaws.com, dns_answers_1_rrname: adserve-atedra-1370652231.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 59, dns_answers_1_rdata: 52.54.213.208, dns_answers_2_rrname: adserve-atedra-1370652231.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 59, dns_answers_2_rdata: 34.196.226.160, dns_answers_3_rrname: adserve-atedra-1370652231.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 59, dns_answers_3_rdata: 52.20.126.96, dns_answers_4_rrname: adserve-atedra-1370652231.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 59, dns_answers_4_rdata: 54.165.167.80, dns_grouped_A_0: 52.54.213.208, dns_grouped_A_1: 34.196.226.160, dns_grouped_A_2: 52.20.126.96, dns_grouped_A_3: 54.165.167.80, dns_grouped_CNAME_0: adserve-atedra-1370652231.us-east-1.elb.amazonaws.com ; pcap_cnt: 5290813, event_type: dns, proto: UDP, dns_type: query, dns_id: 61133, dns_rrname: tags.bluekai.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5290855, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 61133, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: tags.bluekai.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: tags.bluekai.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 35, dns_answers_0_rdata: tags.phx.bluekai.com, dns_answers_1_rrname: tags.phx.bluekai.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 46, dns_answers_1_rdata: 129.146.14.100, dns_answers_2_rrname: tags.phx.bluekai.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 46, dns_answers_2_rdata: 129.146.13.96, dns_answers_3_rrname: tags.phx.bluekai.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 46, dns_answers_3_rdata: 129.146.14.97, dns_answers_4_rrname: tags.phx.bluekai.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 46, dns_answers_4_rdata: 129.146.12.101, dns_answers_5_rrname: tags.phx.bluekai.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 46, dns_answers_5_rdata: 129.146.12.96, dns_answers_6_rrname: tags.phx.bluekai.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 46, dns_answers_6_rdata: 129.146.12.99, dns_answers_7_rrname: tags.phx.bluekai.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 46, dns_answers_7_rdata: 129.146.12.97, dns_answers_8_rrname: tags.phx.bluekai.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 46, dns_answers_8_rdata: 129.146.13.101, dns_answers_9_rrname: tags.phx.bluekai.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 46, dns_answers_9_rdata: 129.146.13.100, dns_answers_10_rrname: tags.phx.bluekai.com, dns_answers_10_rrtype: A, dns_answers_10_ttl: 46, dns_answers_10_rdata: 129.146.13.97, dns_answers_11_rrname: tags.phx.bluekai.com, dns_answers_11_rrtype: A, dns_answers_11_ttl: 46, dns_answers_11_rdata: 129.146.13.98, dns_answers_12_rrname: tags.phx.bluekai.com, dns_answers_12_rrtype: A, dns_answers_12_ttl: 46, dns_answers_12_rdata: 129.146.13.99, dns_answers_13_rrname: tags.phx.bluekai.com, dns_answers_13_rrtype: A, dns_answers_13_ttl: 46, dns_answers_13_rdata: 129.146.12.100, dns_answers_14_rrname: tags.phx.bluekai.com, dns_answers_14_rrtype: A, dns_answers_14_ttl: 46, dns_answers_14_rdata: 129.146.14.101, dns_answers_15_rrname: tags.phx.bluekai.com, dns_answers_15_rrtype: A, dns_answers_15_ttl: 46, dns_answers_15_rdata: 129.146.14.96, dns_answers_16_rrname: tags.phx.bluekai.com, dns_answers_16_rrtype: A, dns_answers_16_ttl: 46, dns_answers_16_rdata: 129.146.12.98, dns_answers_17_rrname: tags.phx.bluekai.com, dns_answers_17_rrtype: A, dns_answers_17_ttl: 46, dns_answers_17_rdata: 129.146.14.98, dns_answers_18_rrname: tags.phx.bluekai.com, dns_answers_18_rrtype: A, dns_answers_18_ttl: 46, dns_answers_18_rdata: 129.146.14.99, dns_grouped_A_0: 129.146.14.100, dns_grouped_A_1: 129.146.13.96, dns_grouped_A_2: 129.146.14.97, dns_grouped_A_3: 129.146.12.101, dns_grouped_A_4: 129.146.12.96, dns_grouped_A_5: 129.146.12.99, dns_grouped_A_6: 129.146.12.97, dns_grouped_A_7: 129.146.13.101, dns_grouped_A_8: 129.146.13.100, dns_grouped_A_9: 129.146.13.97, dns_grouped_A_10: 129.146.13.98, dns_grouped_A_11: 129.146.13.99, dns_grouped_A_12: 129.146.12.100, dns_grouped_A_13: 129.146.14.101, dns_grouped_A_14: 129.146.14.96, dns_grouped_A_15: 129.146.12.98, dns_grouped_A_16: 129.146.14.98, dns_grouped_A_17: 129.146.14.99, dns_grouped_CNAME_0: tags.phx.bluekai.com ; pcap_cnt: 5699022, event_type: dns, proto: UDP, dns_type: query, dns_id: 28832, dns_rrname: ocsp2.globalsign.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 5699946, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 28832, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ocsp2.globalsign.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ocsp2.globalsign.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: cdn.globalsigncdn.com, dns_answers_1_rrname: cdn.globalsigncdn.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 77, dns_answers_1_rdata: 104.16.24.216, dns_answers_2_rrname: cdn.globalsigncdn.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 77, dns_answers_2_rdata: 104.16.26.216, dns_answers_3_rrname: cdn.globalsigncdn.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 77, dns_answers_3_rdata: 104.16.25.216, dns_answers_4_rrname: cdn.globalsigncdn.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 77, dns_answers_4_rdata: 104.16.27.216, dns_answers_5_rrname: cdn.globalsigncdn.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 77, dns_answers_5_rdata: 104.16.28.216, dns_grouped_A_0: 104.16.24.216, dns_grouped_A_1: 104.16.26.216, dns_grouped_A_2: 104.16.25.216, dns_grouped_A_3: 104.16.27.216, dns_grouped_A_4: 104.16.28.216, dns_grouped_CNAME_0: cdn.globalsigncdn.com ; pcap_cnt: 6001804, event_type: dns, proto: UDP, dns_type: query, dns_id: 4324, dns_rrname: d1z2jf7jlzjs58.cloudfront.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 6001881, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 4324, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: d1z2jf7jlzjs58.cloudfront.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: d1z2jf7jlzjs58.cloudfront.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 661, dns_authorities_0_soa_mname: ns-773.awsdns-32.net, dns_authorities_0_soa_rname: awsdns-hostmaster.amazon.com, dns_authorities_0_soa_serial: 1, dns_authorities_0_soa_refresh: 7200, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 86400 ; pcap_cnt: 6568999, event_type: dns, proto: UDP, dns_type: query, dns_id: 40736, dns_rrname: go.eu.bbelements.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6569006, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 40736, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: go.eu.bbelements.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: go.eu.bbelements.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 2599, dns_answers_0_rdata: go.bbelements.com, dns_answers_1_rrname: go.bbelements.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 7113, dns_answers_1_rdata: 62.168.44.117, dns_answers_2_rrname: go.bbelements.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 7113, dns_answers_2_rdata: 62.168.44.124, dns_answers_3_rrname: go.bbelements.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 7113, dns_answers_3_rdata: 62.168.44.115, dns_answers_4_rrname: go.bbelements.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 7113, dns_answers_4_rdata: 62.168.44.116, dns_grouped_CNAME_0: go.bbelements.com, dns_grouped_A_0: 62.168.44.117, dns_grouped_A_1: 62.168.44.124, dns_grouped_A_2: 62.168.44.115, dns_grouped_A_3: 62.168.44.116 ; pcap_cnt: 6681118, event_type: dns, proto: UDP, dns_type: query, dns_id: 38446, dns_rrname: 149.203.175.54.in-addr.arpa, dns_rrtype: PTR, dns_tx_id: 0 ; pcap_cnt: 6681155, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 38446, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: 149.203.175.54.in-addr.arpa, dns_rrtype: PTR, dns_rcode: NOERROR, dns_answers_0_rrname: 149.203.175.54.in-addr.arpa, dns_answers_0_rrtype: PTR, dns_answers_0_ttl: 84, dns_answers_0_rdata: ec2-54-175-203-149.compute-1.amazonaws.com, dns_grouped_PTR_0: ec2-54-175-203-149.compute-1.amazonaws.com ; pcap_cnt: 6789484, event_type: dns, proto: UDP, dns_type: query, dns_id: 11955, dns_rrname: clients.l.google.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 6789546, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 11955, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: clients.l.google.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: clients.l.google.com, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 240, dns_answers_0_rdata: 2607:f8b0:4006:0804:0000:0000:0000:200e, dns_grouped_AAAA_0: 2607:f8b0:4006:0804:0000:0000:0000:200e ; pcap_cnt: 6918998, event_type: dns, proto: UDP, dns_type: query, dns_id: 19574, dns_rrname: wuxia.qidian.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 6919219, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 19574, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: wuxia.qidian.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: wuxia.qidian.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 599, dns_answers_0_rdata: a.qidian.com.book.qq.com, dns_answers_1_rrname: a.qidian.com.book.qq.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 595, dns_answers_1_rdata: 61.151.186.106, dns_grouped_A_0: 61.151.186.106, dns_grouped_CNAME_0: a.qidian.com.book.qq.com ; pcap_cnt: 7249943, event_type: dns, proto: UDP, dns_type: query, dns_id: 31824, dns_rrname: ic.tynt.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 7249960, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 31824, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ic.tynt.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ic.tynt.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 61, dns_answers_0_rdata: 208.100.17.187, dns_grouped_A_0: 208.100.17.187 ; pcap_cnt: 8550743, event_type: dns, proto: UDP, dns_type: query, dns_id: 20808, dns_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8550753, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 20808, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 11, dns_answers_0_rdata: 54.243.72.201, dns_answers_1_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 11, dns_answers_1_rdata: 107.20.223.209, dns_answers_2_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 11, dns_answers_2_rdata: 54.83.19.188, dns_answers_3_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 11, dns_answers_3_rdata: 54.243.80.169, dns_answers_4_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 11, dns_answers_4_rdata: 54.243.231.120, dns_answers_5_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 11, dns_answers_5_rdata: 54.243.174.106, dns_answers_6_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 11, dns_answers_6_rdata: 54.243.228.133, dns_answers_7_rrname: ttd-useast-match-adsrvr-org-1999903436.us-east-1.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 11, dns_answers_7_rdata: 107.20.191.136, dns_grouped_A_0: 54.243.72.201, dns_grouped_A_1: 107.20.223.209, dns_grouped_A_2: 54.83.19.188, dns_grouped_A_3: 54.243.80.169, dns_grouped_A_4: 54.243.231.120, dns_grouped_A_5: 54.243.174.106, dns_grouped_A_6: 54.243.228.133, dns_grouped_A_7: 107.20.191.136 ; pcap_cnt: 8719919, event_type: dns, proto: UDP, dns_type: query, dns_id: 43465, dns_rrname: idsync.rlcdn.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8719964, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 43465, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: idsync.rlcdn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: idsync.rlcdn.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 146, dns_answers_0_rdata: idsync-ext-tf.rlcdn.com, dns_answers_1_rrname: idsync-ext-tf.rlcdn.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 6, dns_answers_1_rdata: 34.199.66.174, dns_answers_2_rrname: idsync-ext-tf.rlcdn.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 6, dns_answers_2_rdata: 34.198.116.1, dns_answers_3_rrname: idsync-ext-tf.rlcdn.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 6, dns_answers_3_rdata: 34.198.161.87, dns_answers_4_rrname: idsync-ext-tf.rlcdn.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 6, dns_answers_4_rdata: 34.198.109.29, dns_answers_5_rrname: idsync-ext-tf.rlcdn.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 6, dns_answers_5_rdata: 34.199.239.28, dns_answers_6_rrname: idsync-ext-tf.rlcdn.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 6, dns_answers_6_rdata: 34.196.62.106, dns_answers_7_rrname: idsync-ext-tf.rlcdn.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 6, dns_answers_7_rdata: 34.200.192.46, dns_answers_8_rrname: idsync-ext-tf.rlcdn.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 6, dns_answers_8_rdata: 34.198.23.240, dns_grouped_CNAME_0: idsync-ext-tf.rlcdn.com, dns_grouped_A_0: 34.199.66.174, dns_grouped_A_1: 34.198.116.1, dns_grouped_A_2: 34.198.161.87, dns_grouped_A_3: 34.198.109.29, dns_grouped_A_4: 34.199.239.28, dns_grouped_A_5: 34.196.62.106, dns_grouped_A_6: 34.200.192.46, dns_grouped_A_7: 34.198.23.240 ; pcap_cnt: 8979444, event_type: dns, proto: UDP, dns_type: query, dns_id: 38247, dns_rrname: mpp.vindicosuite.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 8979521, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 38247, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: mpp.vindicosuite.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: mpp.vindicosuite.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 39, dns_answers_0_rdata: 63.135.90.143, dns_grouped_A_0: 63.135.90.143 ; pcap_cnt: 9065075, event_type: dns, proto: UDP, dns_type: query, dns_id: 47550, dns_rrname: pixel.sojern.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9065120, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 47550, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pixel.sojern.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: pixel.sojern.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1250, dns_answers_0_rdata: pixelglobal.sojern.com, dns_grouped_CNAME_0: pixelglobal.sojern.com, dns_authorities_0_rrname: sojern.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 124, dns_authorities_0_soa_mname: ns-cloud-a1.googledomains.com, dns_authorities_0_soa_rname: cloud-dns-hostmaster.google.com, dns_authorities_0_soa_serial: 2, dns_authorities_0_soa_refresh: 21600, dns_authorities_0_soa_retry: 3600, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 300 ; pcap_cnt: 9215870, event_type: dns, proto: UDP, dns_type: query, dns_id: 53791, dns_rrname: prod.contextweb.map.fastlylb.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9215918, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 53791, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: prod.contextweb.map.fastlylb.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: prod.contextweb.map.fastlylb.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 2, dns_answers_0_rdata: 151.101.20.166, dns_grouped_A_0: 151.101.20.166 ; pcap_cnt: 9409637, event_type: dns, proto: UDP, dns_type: query, dns_id: 6839, dns_rrname: star-mini.c10r.facebook.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9409644, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 6839, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: star-mini.c10r.facebook.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: star-mini.c10r.facebook.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 31.13.71.36, dns_grouped_A_0: 31.13.71.36 ; pcap_cnt: 9452948, event_type: dns, proto: UDP, dns_type: query, dns_id: 33152, dns_rrname: pipki.r.worldssl.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9452958, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 33152, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pipki.r.worldssl.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: worldssl.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 180, dns_authorities_0_soa_mname: worldssl.net, dns_authorities_0_soa_rname: hostmaster.worldcdn.com, dns_authorities_0_soa_serial: 1499101178, dns_authorities_0_soa_refresh: 1200, dns_authorities_0_soa_retry: 180, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 180 ; pcap_cnt: 9536315, event_type: dns, proto: UDP, dns_type: query, dns_id: 16426, dns_rrname: prod.contextweb.map.fastlylb.net, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9536339, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16426, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: prod.contextweb.map.fastlylb.net, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: prod.contextweb.map.fastlylb.net, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 151.101.20.166, dns_grouped_A_0: 151.101.20.166 ; pcap_cnt: 9557569, event_type: dns, proto: UDP, dns_type: query, dns_id: 57606, dns_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 9557604, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 57606, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_answers_0_rrtype: AAAA, dns_answers_0_ttl: 1, dns_answers_0_rdata: 2001:4998:0058:4904:0000:0000:0000:6000, dns_answers_1_rrname: fo-fd-world-new.yax.gysm.yahoodns.net, dns_answers_1_rrtype: AAAA, dns_answers_1_ttl: 1, dns_answers_1_rdata: 2001:4998:0058:4904:0000:0000:0000:7000, dns_grouped_AAAA_0: 2001:4998:0058:4904:0000:0000:0000:6000, dns_grouped_AAAA_1: 2001:4998:0058:4904:0000:0000:0000:7000 ; pcap_cnt: 9654239, event_type: dns, proto: UDP, dns_type: query, dns_id: 37091, dns_rrname: pagead2.googlesyndication.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9654256, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 37091, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: pagead2.googlesyndication.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: pagead2.googlesyndication.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: pagead46.l.doubleclick.net, dns_answers_1_rrname: pagead46.l.doubleclick.net, dns_answers_1_rrtype: A, dns_answers_1_ttl: 249, dns_answers_1_rdata: 172.217.6.226, dns_grouped_A_0: 172.217.6.226, dns_grouped_CNAME_0: pagead46.l.doubleclick.net ; pcap_cnt: 9665545, event_type: dns, proto: UDP, dns_type: query, dns_id: 44112, dns_rrname: mbank.hit.gemius.pl, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 9665783, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 44112, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: mbank.hit.gemius.pl, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: hit.gemius.pl, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 635, dns_authorities_0_soa_mname: ns1.gemius.pl, dns_authorities_0_soa_rname: root.gemius.pl, dns_authorities_0_soa_serial: 2017063004, dns_authorities_0_soa_refresh: 3600, dns_authorities_0_soa_retry: 900, dns_authorities_0_soa_expire: 86400, dns_authorities_0_soa_minimum: 900 ; pcap_cnt: 9760610, event_type: dns, proto: UDP, dns_type: query, dns_id: 31835, dns_rrname: incoming.telemetry.mozilla.org, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 9760615, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 31835, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: incoming.telemetry.mozilla.org, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: incoming.telemetry.mozilla.org, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: telemetry-incoming.r53-2.services.mozilla.com, dns_answers_1_rrname: telemetry-incoming.r53-2.services.mozilla.com, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 19, dns_answers_1_rdata: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_2_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 1, dns_answers_2_rdata: 35.165.181.13, dns_answers_3_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 1, dns_answers_3_rdata: 54.201.188.11, dns_answers_4_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 1, dns_answers_4_rdata: 35.166.101.186, dns_answers_5_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_5_rrtype: A, dns_answers_5_ttl: 1, dns_answers_5_rdata: 52.11.31.31, dns_answers_6_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_6_rrtype: A, dns_answers_6_ttl: 1, dns_answers_6_rdata: 54.213.76.99, dns_answers_7_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_7_rrtype: A, dns_answers_7_ttl: 1, dns_answers_7_rdata: 50.112.45.104, dns_answers_8_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_8_rrtype: A, dns_answers_8_ttl: 1, dns_answers_8_rdata: 35.167.220.41, dns_answers_9_rrname: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com, dns_answers_9_rrtype: A, dns_answers_9_ttl: 1, dns_answers_9_rdata: 54.187.98.195, dns_grouped_A_0: 35.165.181.13, dns_grouped_A_1: 54.201.188.11, dns_grouped_A_2: 35.166.101.186, dns_grouped_A_3: 52.11.31.31, dns_grouped_A_4: 54.213.76.99, dns_grouped_A_5: 50.112.45.104, dns_grouped_A_6: 35.167.220.41, dns_grouped_A_7: 54.187.98.195, dns_grouped_CNAME_0: telemetry-incoming.r53-2.services.mozilla.com, dns_grouped_CNAME_1: pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com ; pcap_cnt: 9897489, event_type: dns, proto: UDP, dns_type: query, dns_id: 2934, dns_rrname: r.casalemedia.com.edgekey.net, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 9897736, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 2934, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: r.casalemedia.com.edgekey.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: r.casalemedia.com.edgekey.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 148, dns_answers_0_rdata: e8037.g.akamaiedge.net, dns_grouped_CNAME_0: e8037.g.akamaiedge.net, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 998, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499103570, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 10120430, event_type: dns, proto: UDP, dns_type: query, dns_id: 43838, dns_rrname: aax.amazon-adsystem.amazon.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10120507, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 43838, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: aax.amazon-adsystem.amazon.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: aax.amazon-adsystem.amazon.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 1, dns_answers_0_rdata: aax-us-east.amazon-adsystem.com, dns_answers_1_rrname: aax-us-east.amazon-adsystem.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 1, dns_answers_1_rdata: 54.239.17.113, dns_grouped_A_0: 54.239.17.113, dns_grouped_CNAME_0: aax-us-east.amazon-adsystem.com ; pcap_cnt: 10123786, event_type: dns, proto: UDP, dns_type: query, dns_id: 23019, dns_rrname: wildcard.adroll.com.edgekey.net, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 10123821, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 23019, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: wildcard.adroll.com.edgekey.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_answers_0_rrname: wildcard.adroll.com.edgekey.net, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 59, dns_answers_0_rdata: e4007.g.akamaiedge.net, dns_grouped_CNAME_0: e4007.g.akamaiedge.net, dns_authorities_0_rrname: g.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 999, dns_authorities_0_soa_mname: n0g.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499104855, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800 ; pcap_cnt: 10932317, event_type: dns, proto: UDP, dns_type: query, dns_id: 12586, dns_rrname: adserver.adtechus.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 10932394, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 12586, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: adserver.adtechus.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: adserver.adtechus.com, dns_answers_0_rrtype: A, dns_answers_0_ttl: 1, dns_answers_0_rdata: 152.163.66.131, dns_grouped_A_0: 152.163.66.131 ; pcap_cnt: 11404903, event_type: dns, proto: UDP, dns_type: query, dns_id: 50103, dns_rrname: s.nflcdn.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11404975, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 50103, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: s.nflcdn.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: s.nflcdn.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 2557, dns_answers_0_rdata: static.nfl.com.edgesuite.net, dns_answers_1_rrname: static.nfl.com.edgesuite.net, dns_answers_1_rrtype: CNAME, dns_answers_1_ttl: 15397, dns_answers_1_rdata: a1126.g.akamai.net, dns_answers_2_rrname: a1126.g.akamai.net, dns_answers_2_rrtype: A, dns_answers_2_ttl: 16, dns_answers_2_rdata: 209.48.71.161, dns_answers_3_rrname: a1126.g.akamai.net, dns_answers_3_rrtype: A, dns_answers_3_ttl: 16, dns_answers_3_rdata: 209.48.71.112, dns_grouped_CNAME_0: static.nfl.com.edgesuite.net, dns_grouped_CNAME_1: a1126.g.akamai.net, dns_grouped_A_0: 209.48.71.161, dns_grouped_A_1: 209.48.71.112 ; pcap_cnt: 11611657, event_type: dns, proto: UDP, dns_type: query, dns_id: 27482, dns_rrname: sumo.external.zlb.scl3.mozilla.com, dns_rrtype: AAAA, dns_tx_id: 0 ; pcap_cnt: 11611660, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 27482, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: sumo.external.zlb.scl3.mozilla.com, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: mozilla.com, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 2901, dns_authorities_0_soa_mname: ns.mozilla.org, dns_authorities_0_soa_rname: sysadmins.mozilla.org, dns_authorities_0_soa_serial: 2017062700, dns_authorities_0_soa_refresh: 180, dns_authorities_0_soa_retry: 180, dns_authorities_0_soa_expire: 1209600, dns_authorities_0_soa_minimum: 60 ; pcap_cnt: 11666282, event_type: dns, proto: UDP, dns_type: query, dns_id: 7034, dns_rrname: sync.mathtag.com, dns_rrtype: A, dns_tx_id: 0 ; pcap_cnt: 11666307, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 7034, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: sync.mathtag.com, dns_rrtype: A, dns_rcode: NOERROR, dns_answers_0_rrname: sync.mathtag.com, dns_answers_0_rrtype: CNAME, dns_answers_0_ttl: 100, dns_answers_0_rdata: pixel-origin.mathtag.com, dns_answers_1_rrname: pixel-origin.mathtag.com, dns_answers_1_rrtype: A, dns_answers_1_ttl: 10, dns_answers_1_rdata: 74.121.138.97, dns_answers_2_rrname: pixel-origin.mathtag.com, dns_answers_2_rrtype: A, dns_answers_2_ttl: 10, dns_answers_2_rdata: 74.121.142.57, dns_answers_3_rrname: pixel-origin.mathtag.com, dns_answers_3_rrtype: A, dns_answers_3_ttl: 10, dns_answers_3_rdata: 74.121.142.169, dns_answers_4_rrname: pixel-origin.mathtag.com, dns_answers_4_rrtype: A, dns_answers_4_ttl: 10, dns_answers_4_rdata: 216.200.232.14, dns_grouped_A_0: 74.121.138.97, dns_grouped_A_1: 74.121.142.57, dns_grouped_A_2: 74.121.142.169, dns_grouped_A_3: 216.200.232.14, dns_grouped_CNAME_0: pixel-origin.mathtag.com ; pcap_cnt: 11684016, event_type: dns, proto: UDP, dns_type: query, dns_id: 16435, dns_rrname: e6409.x.akamaiedge.net, dns_rrtype: AAAA, dns_tx_id: 2 ; pcap_cnt: 11684017, event_type: dns, proto: UDP, dns_version: 2, dns_type: answer, dns_id: 16435, dns_flags: 8180, dns_qr: True, dns_rd: True, dns_ra: True, dns_rrname: e6409.x.akamaiedge.net, dns_rrtype: AAAA, dns_rcode: NOERROR, dns_authorities_0_rrname: x.akamaiedge.net, dns_authorities_0_rrtype: SOA, dns_authorities_0_ttl: 999, dns_authorities_0_soa_mname: n0x.akamaiedge.net, dns_authorities_0_soa_rname: hostmaster.akamai.com, dns_authorities_0_soa_serial: 1499111997, dns_authorities_0_soa_refresh: 1000, dns_authorities_0_soa_retry: 1000, dns_authorities_0_soa_expire: 1000, dns_authorities_0_soa_minimum: 1800
The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.
classification: Normal
justification: The network event described in the Suricata logs indicates normal behavior. This classification implies that the observed network activity does not exhibit any characteristics associated with malicious intent or attack patterns. Typical signs of attacks, such as unusual traffic patterns, suspicious connection attempts, or abnormal data exchanges, are absent. The network interactions recorded in the logs conform to expected and legitimate usage patterns, suggesting routine and benign operations.