Skip to content

Instantly share code, notes, and snippets.

/-

Created September 28, 2016 13:00
Show Gist options
  • Save anonymous/1ad7e5258be5c48665aa1368a12631f9 to your computer and use it in GitHub Desktop.
Save anonymous/1ad7e5258be5c48665aa1368a12631f9 to your computer and use it in GitHub Desktop.
{
"timestamp": "2016-05-24T17:27:02.333141-0600",
"flow_id": 15684738590988,
"pcap_cnt": 2,
"event_type": "dns",
"src_ip": "10.16.1.11",
"src_port": 53679,
"dest_ip": "10.16.1.1",
"dest_port": 53,
"proto": "UDP",
"dns": {
"type": "unified",
"id": 39339,
"query": {
"rrname": "client-cf.dropbox.com",
"rrtype": "A"
},
"rcode": "NOERROR",
"answer": [
{
"rrname": "client-cf.dropbox.com",
"rrtype": "A",
"ttl": 47,
"rdata": "52.85.112.21"
}
],
"tx_id": 0
}
}
{
"timestamp": "2016-05-24T17:27:03.213624-0600",
"flow_id": 542660046009438,
"pcap_cnt": 5,
"event_type": "dns",
"src_ip": "10.16.1.11",
"src_port": 49697,
"dest_ip": "10.16.1.1",
"dest_port": 53,
"proto": "UDP",
"dns": {
"type": "unified",
"id": 3407,
"query": {
"rrname": "block.dropbox.com",
"rrtype": "A"
},
"rcode": "NOERROR",
"answer": [
{
"rrname": "block.dropbox.com",
"rrtype": "CNAME",
"ttl": 9,
"rdata": "block.g1.dropbox.com"
},
{
"rrname": "block.g1.dropbox.com",
"rrtype": "A",
"ttl": 8,
"rdata": "45.58.70.33"
}
],
"tx_id": 0
}
}
{
"timestamp": "2016-05-24T17:27:03.493333-0600",
"flow_id": 1585332076629375,
"pcap_cnt": 6,
"event_type": "dns",
"src_ip": "10.16.1.11",
"src_port": 33458,
"dest_ip": "10.16.1.1",
"dest_port": 53,
"proto": "UDP",
"dns": {
"type": "unified",
"id": 44779,
"query": {
"rrname": "codemonkey.net",
"rrtype": "A"
},
"rcode": "NOERROR",
"answer": [
{
"rrname": "codemonkey.net",
"rrtype": "A",
"ttl": 435,
"rdata": "104.131.202.103"
}
],
"tx_id": 0
}
}
{
"timestamp": "2016-05-24T17:27:04.654238-0600",
"flow_id": 848126710184488,
"pcap_cnt": 8,
"event_type": "dns",
"src_ip": "10.16.1.11",
"src_port": 57634,
"dest_ip": "10.16.1.1",
"dest_port": 53,
"proto": "UDP",
"dns": {
"type": "unified",
"id": 14681,
"query": {
"rrname": "client-cf.dropbox.com",
"rrtype": "A"
},
"rcode": "NOERROR",
"answer": [
{
"rrname": "client-cf.dropbox.com",
"rrtype": "A",
"ttl": 45,
"rdata": "52.85.112.21"
}
],
"tx_id": 0
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment