-
-
Save jasonish/23104d70a21f2ec3db0037aceb56bdaa to your computer and use it in GitHub Desktop.
split dns json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "timestamp": "2016-05-24T17:27:01.960780-0600", | |
| "flow_id": 15684738590988, | |
| "pcap_cnt": 1, | |
| "event_type": "dns", | |
| "src_ip": "10.16.1.11", | |
| "src_port": 53679, | |
| "dest_ip": "10.16.1.1", | |
| "dest_port": 53, | |
| "proto": "UDP", | |
| "dns": { | |
| "type": "query", | |
| "id": 39339, | |
| "query": { | |
| "rrname": "client-cf.dropbox.com", | |
| "rrtype": "A" | |
| }, | |
| "tx_id": 0 | |
| } | |
| } | |
| { | |
| "timestamp": "2016-05-24T17:27:02.832606-0600", | |
| "flow_id": 542660046009438, | |
| "pcap_cnt": 3, | |
| "event_type": "dns", | |
| "src_ip": "10.16.1.11", | |
| "src_port": 49697, | |
| "dest_ip": "10.16.1.1", | |
| "dest_port": 53, | |
| "proto": "UDP", | |
| "dns": { | |
| "type": "query", | |
| "id": 3407, | |
| "query": { | |
| "rrname": "block.dropbox.com", | |
| "rrtype": "A" | |
| }, | |
| "tx_id": 0 | |
| } | |
| } | |
| { | |
| "timestamp": "2016-05-24T17:27:03.085375-0600", | |
| "flow_id": 1585332076629375, | |
| "pcap_cnt": 4, | |
| "event_type": "dns", | |
| "src_ip": "10.16.1.11", | |
| "src_port": 33458, | |
| "dest_ip": "10.16.1.1", | |
| "dest_port": 53, | |
| "proto": "UDP", | |
| "dns": { | |
| "type": "query", | |
| "id": 44779, | |
| "query": { | |
| "rrname": "codemonkey.net", | |
| "rrtype": "A" | |
| }, | |
| "tx_id": 0 | |
| } | |
| } | |
| { | |
| "timestamp": "2016-05-24T17:27:02.333141-0600", | |
| "flow_id": 15684738590988, | |
| "pcap_cnt": 2, | |
| "event_type": "dns", | |
| "src_ip": "10.16.1.11", | |
| "src_port": 53679, | |
| "dest_ip": "10.16.1.1", | |
| "dest_port": 53, | |
| "proto": "UDP", | |
| "dns": { | |
| "type": "answer", | |
| "id": 39339, | |
| "rcode": "NOERROR", | |
| "answer": [ | |
| { | |
| "rrname": "client-cf.dropbox.com", | |
| "rrtype": "A", | |
| "ttl": 47, | |
| "rdata": "52.85.112.21" | |
| } | |
| ], | |
| "tx_id": 0 | |
| } | |
| } | |
| { | |
| "timestamp": "2016-05-24T17:27:03.213624-0600", | |
| "flow_id": 542660046009438, | |
| "pcap_cnt": 5, | |
| "event_type": "dns", | |
| "src_ip": "10.16.1.11", | |
| "src_port": 49697, | |
| "dest_ip": "10.16.1.1", | |
| "dest_port": 53, | |
| "proto": "UDP", | |
| "dns": { | |
| "type": "answer", | |
| "id": 3407, | |
| "rcode": "NOERROR", | |
| "answer": [ | |
| { | |
| "rrname": "block.dropbox.com", | |
| "rrtype": "CNAME", | |
| "ttl": 9, | |
| "rdata": "block.g1.dropbox.com" | |
| }, | |
| { | |
| "rrname": "block.g1.dropbox.com", | |
| "rrtype": "A", | |
| "ttl": 8, | |
| "rdata": "45.58.70.33" | |
| } | |
| ], | |
| "tx_id": 0 | |
| } | |
| } | |
| { | |
| "timestamp": "2016-05-24T17:27:03.493333-0600", | |
| "flow_id": 1585332076629375, | |
| "pcap_cnt": 6, | |
| "event_type": "dns", | |
| "src_ip": "10.16.1.11", | |
| "src_port": 33458, | |
| "dest_ip": "10.16.1.1", | |
| "dest_port": 53, | |
| "proto": "UDP", | |
| "dns": { | |
| "type": "answer", | |
| "id": 44779, | |
| "rcode": "NOERROR", | |
| "answer": [ | |
| { | |
| "rrname": "codemonkey.net", | |
| "rrtype": "A", | |
| "ttl": 435, | |
| "rdata": "104.131.202.103" | |
| } | |
| ], | |
| "tx_id": 0 | |
| } | |
| } | |
| { | |
| "timestamp": "2016-05-24T17:27:04.653864-0600", | |
| "flow_id": 848126710184488, | |
| "pcap_cnt": 7, | |
| "event_type": "dns", | |
| "src_ip": "10.16.1.11", | |
| "src_port": 57634, | |
| "dest_ip": "10.16.1.1", | |
| "dest_port": 53, | |
| "proto": "UDP", | |
| "dns": { | |
| "type": "query", | |
| "id": 14681, | |
| "query": { | |
| "rrname": "client-cf.dropbox.com", | |
| "rrtype": "A" | |
| }, | |
| "tx_id": 0 | |
| } | |
| } | |
| { | |
| "timestamp": "2016-05-24T17:27:04.654238-0600", | |
| "flow_id": 848126710184488, | |
| "pcap_cnt": 8, | |
| "event_type": "dns", | |
| "src_ip": "10.16.1.11", | |
| "src_port": 57634, | |
| "dest_ip": "10.16.1.1", | |
| "dest_port": 53, | |
| "proto": "UDP", | |
| "dns": { | |
| "type": "answer", | |
| "id": 14681, | |
| "rcode": "NOERROR", | |
| "answer": [ | |
| { | |
| "rrname": "client-cf.dropbox.com", | |
| "rrtype": "A", | |
| "ttl": 45, | |
| "rdata": "52.85.112.21" | |
| } | |
| ], | |
| "tx_id": 0 | |
| } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment