admin/activecm-rita
1
0
Fork 0
mirror of https://github.com/activecm/rita synced 2026-06-08 13:02:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
develop
activecm-rita/test_data/json_with_all_fields/ORIGINALdns.log
T
Naomi Kramer 906f53b3e5 BEAM ME UP SCOTTY 
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com>
2024-06-28 00:28:25 -04:00

35 lines
17 KiB
Plaintext
Raw Permalink Blame History

{"ts": 1517336042.279652, "uid": "CVvreZ2AGtqjnP3nnl", "id.orig_h": "192.168.88.2", "id.orig_p": 55638, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 42937, "rtt": 0.069982, "query": "6dde0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 302f017537c68f5169"], "TTLs": [60.000000], "rejected": true}
{"ts": 1517336043.354471, "uid": "C4zL1G2q2YhuW5hCh6", "id.orig_h": "192.168.88.2", "id.orig_p": 28736, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 16556, "rtt": 0.078779, "query": "0b320175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 c27a017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336044.438943, "uid": "CeV48h4Dxmx9mh7qd3", "id.orig_h": "192.168.88.2", "id.orig_p": 42647, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 7845, "rtt": 0.073451, "query": "344b0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 67f2017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336045.517672, "uid": "CKkRMy2TfxbV02Mfc8", "id.orig_h": "192.168.88.2", "id.orig_p": 20440, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 39375, "rtt": 0.064032, "query": "0f370175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 8759017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336046.587421, "uid": "CST5jL2LDLfx36aDJ3", "id.orig_h": "192.168.88.2", "id.orig_p": 39912, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 65170, "rtt": 0.071484, "query": "251e0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 cf5d017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336047.665136, "uid": "CChTJ93fyBjt9vTNsb", "id.orig_h": "192.168.88.2", "id.orig_p": 42658, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 739, "rtt": 0.072499, "query": "31610175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 4a42017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336048.741779, "uid": "Ck5tpC22orODC7RkA8", "id.orig_h": "192.168.88.2", "id.orig_p": 16271, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 13013, "rtt": 0.06654, "query": "1a600175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 50fa017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336049.812569, "uid": "Cggxxq0D12CRFXhgj", "id.orig_h": "192.168.88.2", "id.orig_p": 9373, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 17102, "rtt": 0.065963, "query": "69a60175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 a7be017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336050.883618, "uid": "CQXLB24yHbuHS8jP0g", "id.orig_h": "192.168.88.2", "id.orig_p": 56067, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 27469, "rtt": 0.060626, "query": "06540175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 6d55017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336051.948532, "uid": "C1XdcZbhbijgg6ybc", "id.orig_h": "192.168.88.2", "id.orig_p": 56908, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 64823, "rtt": 0.093769, "query": "4bff0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 414c017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336052.042311, "uid": "CImOfO15K4i2P7bJda", "id.orig_h": "192.168.88.2", "id.orig_p": 22670, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 42341, "rtt": 0.056198, "query": "4bff0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 7dcd017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336053.003657, "uid": "C07bu62dzbWtrebr5", "id.orig_h": "192.168.88.2", "id.orig_p": 65341, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 8546, "rtt": 0.056776, "query": "295a0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 8b9c017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336054.065845, "uid": "Ckc42T3EMy3KU38Og", "id.orig_h": "192.168.88.2", "id.orig_p": 45908, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 20051, "rtt": 0.060806, "query": "0d6b0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 7b30017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336055.1317, "uid": "CNbRBhFKGQHzpanij", "id.orig_h": "192.168.88.2", "id.orig_p": 13003, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 63975, "rtt": 0.068884, "query": "5f130175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 3a79017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336056.206734, "uid": "CnirC52h9MYy2PFrzc", "id.orig_h": "192.168.88.2", "id.orig_p": 15220, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 39758, "rtt": 0.061912, "query": "5a360175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 24b4017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336057.272803, "uid": "CUqXoW3IVWpNHIJd8", "id.orig_h": "192.168.88.2", "id.orig_p": 37749, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 42732, "rtt": 0.055722, "query": "46c60175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 efc3017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336058.336124, "uid": "C2WiYf2v08VITAPvHc", "id.orig_h": "192.168.88.2", "id.orig_p": 27831, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 4368, "rtt": 0.066987, "query": "617b0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 8c56017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336059.40763, "uid": "CKIDau4SCr4wYsAae2", "id.orig_h": "192.168.88.2", "id.orig_p": 12507, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 22179, "rtt": 0.05225, "query": "4b030175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 8748017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336060.465648, "uid": "C9rzJq2MTvoVIK044d", "id.orig_h": "192.168.88.2", "id.orig_p": 11932, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 49437, "rtt": 0.071437, "query": "39e80175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 e0ad017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336061.541029, "uid": "Cp5HYU1w1fB1xfIrN2", "id.orig_h": "192.168.88.2", "id.orig_p": 17558, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 43733, "rtt": 0.072925, "query": "4c860175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 e00f017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336062.61977, "uid": "CFRoEy4FM9B8QNSKN5", "id.orig_h": "192.168.88.2", "id.orig_p": 34986, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 34785, "rtt": 0.056565, "query": "03c10175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 fa08017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336063.681801, "uid": "Cybr0E1QoT8OUtCNhd", "id.orig_h": "192.168.88.2", "id.orig_p": 17811, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 22981, "rtt": 0.062599, "query": "745d0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 297d017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336064.747716, "uid": "CVwA0O1Nz6efGzEGw1", "id.orig_h": "192.168.88.2", "id.orig_p": 7776, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 252, "rtt": 0.059161, "query": "6c270175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 2787017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336065.811656, "uid": "Cbw4I32Pi1B7HLp6ol", "id.orig_h": "192.168.88.2", "id.orig_p": 5341, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "trans_id": 40146, "rtt": 0.062729, "query": "714e0175375169c68f.dnsc.r-1x.com", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 16, "qtype_name": "TXT", "rcode": 0, "rcode_name": "NOERROR", "AA": false, "TC": false, "RD": true, "RA": true, "Z": 0, "answers": ["TXT 18 b1a7017537c68f5169"], "TTLs": [60.000000], "rejected": false}
{"ts": 1517336146.323324, "uid": "CnXKrS2sy24xI9KUF8", "id.orig_h": "10.55.200.11", "id.orig_p": 57744, "id.resp_h": "23.61.199.131", "id.resp_p": 53, "proto": "udp", "trans_id": 65164, "rtt": 0.05664, "query": "v10-win.vortex.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "rcode": 0, "rcode_name": "NOERROR", "AA": true, "TC": false, "RD": false, "RA": false, "Z": 0, "answers": ["geo.vortex.data.microsoft.com.akadns.net"], "TTLs": [300.000000], "rejected": false}
{"ts": 1517336150.770251, "uid": "CnRAIf4ree9ClHA6F5", "id.orig_h": "10.55.200.10", "id.orig_p": 54231, "id.resp_h": "193.108.88.128", "id.resp_p": 53, "proto": "udp", "trans_id": 63392, "rtt": 0.052476, "query": "v10-win.vortex.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "rcode": 0, "rcode_name": "NOERROR", "AA": true, "TC": false, "RD": false, "RA": false, "Z": 0, "answers": ["geo.vortex.data.microsoft.com.akadns.net"], "TTLs": [300.000000], "rejected": false}
{"ts": 1517336146.135124, "uid": "CvwD4F3NpL8IsWsnqb", "id.orig_h": "10.55.200.10", "id.orig_p": 54593, "id.resp_h": "172.16.200.11", "id.resp_p": 53, "proto": "udp", "trans_id": 36024, "query": "v10-win.vortex.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "AA": false, "TC": false, "RD": true, "RA": false, "Z": 0, "rejected": false}
{"ts": 1517336150.823078, "uid": "C7Vbi33iXM6TIe7eu6", "id.orig_h": "10.55.200.10", "id.orig_p": 53547, "id.resp_h": "172.16.200.11", "id.resp_p": 53, "proto": "udp", "trans_id": 39337, "query": "geo.vortex.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "AA": false, "TC": false, "RD": true, "RA": false, "Z": 0, "rejected": false}
{"ts": 1517336166.260298, "uid": "Cybgm9sxnCSxPcWti", "id.orig_h": "192.168.88.2", "id.orig_p": 52744, "id.resp_h": "184.85.248.66", "id.resp_p": 53, "proto": "udp", "trans_id": 53962, "rtt": 0.154592, "query": "wildcard.weather.microsoft.com.edgekey.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "rcode": 0, "rcode_name": "NOERROR", "AA": true, "TC": false, "RD": false, "RA": false, "Z": 1, "answers": ["e7070.g.akamaiedge.net"], "TTLs": [900.000000], "rejected": false}
{"ts": 1517336181.839221, "uid": "CB6AkG1BNRtZJREXy", "id.orig_h": "10.55.200.11", "id.orig_p": 56288, "id.resp_h": "193.108.88.128", "id.resp_p": 53, "proto": "udp", "trans_id": 16180, "rtt": 0.050808, "query": "asimov-win.settings.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "rcode": 0, "rcode_name": "NOERROR", "AA": true, "TC": false, "RD": false, "RA": false, "Z": 0, "answers": ["geo.settings.data.microsoft.com.akadns.net"], "TTLs": [300.000000], "rejected": false}
{"ts": 1517336181.890555, "uid": "CY0AZ44F59fWL6jxtk", "id.orig_h": "10.55.200.11", "id.orig_p": 55405, "id.resp_h": "193.108.88.128", "id.resp_p": 53, "proto": "udp", "trans_id": 22343, "rtt": 0.051254, "query": "geo.settings.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "rcode": 0, "rcode_name": "NOERROR", "AA": true, "TC": false, "RD": false, "RA": false, "Z": 0, "answers": ["cy2.settings.data.microsoft.com.akadns.net"], "TTLs": [300.000000], "rejected": false}
{"ts": 1517336181.942124, "uid": "Cw6iPz2RDR2qag9Zgg", "id.orig_h": "10.55.200.11", "id.orig_p": 56213, "id.resp_h": "193.108.88.128", "id.resp_p": 53, "proto": "udp", "trans_id": 46205, "rtt": 0.047415, "query": "cy2.settings.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "rcode": 1, "rcode_name": "NOERROR", "AA": true, "TC": false, "RD": false, "RA": false, "Z": 123, "answers": ["64.4.54.253"], "TTLs": [300.000000], "rejected": false}
{"ts": 1517336185.208478, "uid": "CT2SKx374HJpKYfAbg", "id.orig_h": "10.55.200.10", "id.orig_p": 54419, "id.resp_h": "193.108.88.128", "id.resp_p": 53, "proto": "udp", "trans_id": 19662, "rtt": 0.048605, "query": "asimov-win.settings.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "rcode": 0, "rcode_name": "NOERROR", "AA": true, "TC": false, "RD": false, "RA": false, "Z": 0, "answers": ["geo.settings.data.microsoft.com.akadns.net"], "TTLs": [300.000000], "rejected": false}
{"ts": 1517336189.739584, "uid": "CpgVJ82nIQdWTY8UGa", "id.orig_h": "10.55.200.10", "id.orig_p": 53268, "id.resp_h": "184.85.248.128", "id.resp_p": 53, "proto": "udp", "trans_id": 55204, "rtt": 0.15641, "query": "geo.settings.data.microsoft.com.akadns.net", "qclass": 1, "qclass_name": "C_INTERNET", "qtype": 1, "qtype_name": "A", "rcode": 0, "rcode_name": "NOERROR", "AA": true, "TC": false, "RD": false, "RA": false, "Z": 0, "answers": ["cy2.settings.data.microsoft.com.akadns.net"], "TTLs": [300.000000], "rejected": false}
Reference in New Issue View Git Blame Copy Permalink